CVE-2025-49144

Notepad++ Binary Planting PoC CVE-2025-49144 ⚠️ EDUCATIONAL PURPOSE ONLY This code is designed for educational and research purposes to understand binary planting vulnerabilities. Use only in controlled environments with proper authorization. 📋 Overview This Proof of Concept demonstrates the binar...

Notepad-8.8.1_CVE-2025-49144

CVE-2025-49144 – Exploit for Notepad++ 8.8.1 This repository contains a functional Proof of Concept PoC that exploits the CVE-2025-49144 vulnerability in the Notepad++ 8.8.1 installer. The malicious execution occurs by placing a binary regsvr32.exe in the same directory as the vulnerable installe...

CVE-2024-36587

CVE-2024-36587 - dnscrypt-proxy Local Privilege Escalation Overview Vulnerability Description : When installing the dnscrypt-proxy service, it trusts and registers executables in the current directory, allowing privilege escalation by inserting a malicious binary. Affected Versions : dnscrypt-pro...

RP_RecordClip_DLL_Hijack

Remote DLL Hijack Vulnerability in Real Player CVE-2022-32291 The Player application which is vulnerable upon starting Real Converter and the Recording Manager are prone to a remote DLL hijack binary planting issue because of unsafe search for unexisting DLLs. To exploit the issue attackers would...

CVE-2024-55347

CVE Disclosure: CVE-2024-55347 Public Disclosure of CVE-2024-55347 🚀 Date: 10-02-2025 Summary A Binary Planting vulnerability in Kroll Artifact Parser And Extractor KAPE v1.3.0.2 allows attackers to escalate privileges and execute arbitrary code by placing a maliciously crafted Binary file in a...

notepad-v8.8.1-LPE-CVE-

notepad-v8.8.1-LPE-CVE- CVE-2025-49144 Notepad++ v8.8.1 SYSTEM-level POC 📌 CVE-2025-49144 is a high-severity local privilege escalation vulnerability found in the Notepad++ v8.8.1 and prior version installers. This vulnerability stems from uncontrolled executable search path behavior during...

CVE-2026-84226

A flaw was found in OpenVPN on Windows. A local authenticated user could perform a binary planting attack during network configuration steps. This vulnerability could allow the attacker to execute arbitrary code or escalate privileges on the affected system...

CVE-2026-84226

OpenVPN version 2.5.0 through 2.6.22 and 2.7alpha1 through 2.7.6 on Windows allows local authenticated users to perform a binary planting attack during network configuration steps...

CVE-2026-84226

OpenVPN version 2.5.0 through 2.6.22 and 2.7alpha1 through 2.7.6 on Windows allows local authenticated users to perform a binary planting attack during network configuration steps...

EUVD-2026-72283

OpenVPN version 2.5.0 through 2.6.22 and 2.7alpha1 through 2.7.6 on Windows allows local authenticated users to perform a binary planting attack during network configuration steps...

CVE-2026-84226

OpenVPN versions 2.5.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows are vulnerable to a binary planting attack during network configuration steps, exploitable by local authenticated users with low privileges. The CVSS 4.0 score is 8.5 (HIGH) , with high impact to confidentiality, integr...

CVE-2026-84226

OpenVPN version 2.5.0 through 2.6.22 and 2.7alpha1 through 2.7.6 on Windows allows local authenticated users to perform a binary planting attack during network configuration steps...

CVE-2026-84226: Untrusted Search Path

OpenVPN version 2.5.0 through 2.6.22 and 2.7alpha1 through 2.7.6 on Windows allows local authenticated users to perform a binary planting attack during network configuration steps...

PT-2026-86645

OpenVPN version 2.5.0 through 2.6.22 and 2.7 alpha1 through 2.7.6 on Windows allows local authenticated users to perform a binary planting attack during network configuration steps...

CVE-2026-63093

Cursor for Windows version 3.2.16 contains a binary planting vulnerability that allows remote attackers to achieve arbitrary code execution by placing a malicious git.exe file in the repository root directory. When a developer clones and opens a crafted repository, Cursor automatically resolves a...

CVE-2026-63093

Cursor for Windows version 3.2.16 contains a binary planting vulnerability that allows remote attackers to achieve arbitrary code execution by placing a malicious git.exe file in the repository root directory. When a developer clones and opens a crafted repository, Cursor automatically resolves a...

EUVD-2026-45178

Cursor for Windows version 3.2.16 contains a binary planting vulnerability that allows remote attackers to achieve arbitrary code execution by placing a malicious git.exe file in the repository root directory. When a developer clones and opens a crafted repository, Cursor automatically resolves a...

CVE-2026-63093 Cursor for Windows 3.2.16 RCE via Malicious git.exe in Workspace

Cursor for Windows version 3.2.16 contains a binary planting vulnerability that allows remote attackers to achieve arbitrary code execution by placing a malicious git.exe file in the repository root directory. When a developer clones and opens a crafted repository, Cursor automatically resolves a...

CVE-2026-63093

CVE-2026-63093 affects Cursor for Windows 3.2.16. The issue is a binary planting vulnerability: if a malicious file named git.exe is placed in the repository root, Cursor can resolve and execute it during IDE startup and on a recurring cadence, executing with the current user’s privileges. This e...

CVE-2026-63093 Cursor for Windows 3.2.16 RCE via Malicious git.exe in Workspace

Cursor for Windows version 3.2.16 contains a binary planting vulnerability that allows remote attackers to achieve arbitrary code execution by placing a malicious git.exe file in the repository root directory. When a developer clones and opens a crafted repository, Cursor automatically resolves a...