CVE-2025-49144

Notepad++ Binary Planting PoC CVE-2025-49144 ⚠️ EDUCATIONAL PURPOSE ONLY This code is designed for educational and research purposes to understand binary planting vulnerabilities. Use only in controlled environments with proper authorization. 📋 Overview This Proof of Concept demonstrates the binar...

Notepad-8.8.1_CVE-2025-49144

CVE-2025-49144 – Exploit for Notepad++ 8.8.1 This repository contains a functional Proof of Concept PoC that exploits the CVE-2025-49144 vulnerability in the Notepad++ 8.8.1 installer. The malicious execution occurs by placing a binary regsvr32.exe in the same directory as the vulnerable installe...

CVE-2022-31902

CVE-2022-31902 Denial Of Service DoS in Notepad++x86 in 8.4.3 and before. Description Vulnerability triggering, via opening a specially crafted text file e.g. first.txt and then using options Find All in All Opened Document or Find All in Current Opened Document under Find options. As an...

Notepad-8.9.6-PoC

Notepad++ PoCs CVE-2026-48770 / CVE-2026-48778 / CVE-2026-48800 Proof-of-concept scripts for three vulnerabilities in Notepad++ = 8.9.6, patched in v8.9.6.1 2026-05-26. Vulnerabilities CVE| Type| CVSS| Impact ---|---|---|--- CVE-2026-48770| OOB Read via WMCOPYDATA| 5.0| DoS / Crash CVE-2026-48778...

CVE-2025-15556-Notepad-WinGUp-Updater-RCE

Affected Software: Notepad++ versions prior to 8.8.9 using the WinGUp updater. Vulnerability Type: Update integrity verification bypass leading to arbitrary code execution. Description: The WinGUp updater fails to properly verify the integrity of update metadata, allowing an attacker who can...

CVE-2025-56383-Proof-of-Concept

Notepad++ v8.8.3 has a DLL hijacking vulnerability, which can replace the original DLL file to execute malicious code. The example method is as follows: Please note that the following demonstration uses npp.8.8.3.Installer.x64.exe to install Notepad++for testing, but in reality, any installed...

forensicscanner

This repository does not have a README...

CVE-2025-56383

Vulnerability Attack Type: DLL Hijacking DLL Hijacking Target Application: Notepad++ Method: The NppExport.dll file is loaded by Notepad++ from the working directory Implementation The malicious DLL contains: Exported functions of the original library to ensure compatibility Reverse shell...

CVE-2022-31901

CVE-2022-31901 Denial Of Services DOS in Notepad++x86 in 8.4.3 and before. Description Vulnerability triggering, via opening two specially crafted text files e.g. first.txt & second.txt as input to notepad++. As an illustrative example below, as of 11/07/2022, latest version of Notepad++x86 is...

CVE-2025-49144_PoC

CVE-2025-49144PoC 📌 CVE-2025-49144 è una vulnerabilità di escalation dei privilegi locali ad alta gravità presente nei programmi di installazione di Notepad++ v8.8.1 e versioni precedenti. Questa vulnerabilità deriva da un comportamento incontrollato del percorso di ricerca degli eseguibili duran...

CVE-2023-6401

CVE-2023-6401 · Prova di concetto di DLL Hijacking English | 中文 中文 ⚠️ Avviso importante: solo per scopi di ricerca sulla sicurezza e formazione Prova di concetto per la vulnerabilità di DLL hijacking in NotePad++ ≤ 8.1. Consente di eseguire codice arbitrario inserendo una dbghelp.dll dannosa nella...

CVE-2026-52886

Path Traversal: Umgehung der startswith-Präfixprüfung Notepad++ — Beliebiges Lesen von Dateien übersession.xml-backupFilePath-Traversal Advisory GHSA: GHSA-rqfm-pw34-r7j6 CVE: CVE-2026-52886 Schweregrad: Mittel Betroffen: v8.9.6.4 Behoben in: v8.9.7 Patch-Commit: 7e66f36 Betroffene Datei:...

CVE-2026-20841

🛡️ CVE-2026-20841 - Windows Notepad Security Test Tool ⚠️ What is CVE-2026-20841? CVE-2026-20841 is a known security weakness in the Windows Notepad application. It affects the markdown feature, which lets Notepad display formatted text with clickable links. This weakness happens because the...

CVE-2026-48778

CVE-2026-48778 POC Notepad++ RCE via config.xml commandLineInterpreter Usage .\CVE-2026-48778.exe calc.exe Demo https://github.com/user-attachments/assets/79ec82c9-ab37-4923-b62d-325710095e86 Vulnerability Summary Package| Affected versions| Patched versions ---|---|--- Notepad++| = v8.9.6|...

CVE-2026-20841-PoC

Non è chiaro se questo sia il metodo corretto per attivare il PoC; pertanto, viene fornito solo come riferimento. CVE-2026-20841 - Windows notepad.exe RCE Condizione di sfruttamento: Versione di Notepad 11.2510 passo 1. passo 2...

notepadpp-supply-chain-iocs

Notepad++ Supply Chain Attack — IoC Repository CVE-2025-15556 | Lotus Blossom / Raspberry Typhoon | June – December 2025 Overview This repository contains a comprehensive, consolidated collection of Indicators of Compromise IoCs related to the Notepad++ supply chain attack disclosed on February 2...

notepad_CVE_2026_20841

Questo repository non contiene un README...

CVE-2026-20841_notepad_analysis

Scopo Condurre un'indagine sulla vulnerabilità RCE di Microsoft notepad CVE-2026-20841, l'analisi binaria e la creazione di un exploit PoC a scopo didattico. Divisione dei ruoli Avviare un Agent Team per eseguire la divisione dei ruoli che ho in mente. Cacciatore di binari: raccogliere i binari...

CVE-2026-20841

CVE-2026-20841 Dieser Inhalt entspricht einem Teil dessen, was über den Monatsbericht für PatchPoint-Abonnenten bereitgestellt wird. Übersicht Microsoft hat im Februar 2026 einen Patch für eine RCE-Schwachstelle in Notepad offengelegt. Bei der Schwachstelle handelt es sich um eine...

CVE-2026-3008

CVE-2026-3008 — Notepad++ 8.9.3 Iniezione di Stringa di Formato tramite nativeLang.xml Vulnerabilità Quando un'operazione di ricerca produce risultati, sub1400916C0 formatta un'etichetta con il conteggio dei risultati recuperando una stringa localizzata da nativeLang.xml e passandola direttamente...