Design/Logic Flaw

Notepad++ 7.3.3 32-bit with Hex Editor Plugin v0.9.5 might allow user-assisted attackers to execute code via a crafted file, because of a "Data from Faulting Address controls Code Flow" issue. One threat model is a victim who obtains an untrusted crafted file from a remote location and issues...

CVE-2017-8803

Notepad++ 7.3.3 (32-bit) with Hex Editor Plugin v0.9.5 is affected by CVE-2017-8803 due to a Data from Faulting Address controls Code Flow vulnerability. An attacker can trigger arbitrary code execution by processing a specially crafted file, potentially remotely, leading to user-assisted or remo...

CVE-2017-8803

Notepad++ 7.3.3 32-bit with Hex Editor Plugin v0.9.5 might allow user-assisted attackers to execute code via a crafted file, because of a "Data from Faulting Address controls Code Flow" issue. One threat model is a victim who obtains an untrusted crafted file from a remote location and issues...

KLA11062 Arbitrary code execution vulnerability in Notepad++

An unspecified vulnerability was found in Notepad++ 7.3.3 with Hex Editor Plugin v0.9.5. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed file or an untrusted specially designed file from a remote...

Heap Overflow Vulnerability in Notepad++ MIME Tools Plugin 2.1 memove Function

Notepad++ is a free plain text editor. A heap overflow vulnerability exists in the Notepad++ MIME Tools Plugin 2.1 memove function, which can be exploited by a remote attacker to construct a special text file that can be tricked into parsing by the application, which can crash the application...

KLA10972 CIA hacking issue in Notepad++

An issue of a hijacked DLL was found in Notepad++. By exploiting this vulnerability malicious users can obtain sensitive information. This vulnerability can be exploited remotely via a sciexer.dll, which is replaced by version of sciexer.dll built by CIA. Technical details This vulnerability has...

ColorNote Notepad Notes - Customized SSL, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application ColorNote Notepad Notes published at the 'play' market has multiple vulnerabilities...

NetWire RAT Back, Stealing Payment Card Data

The remote access Trojan NetWire is back and this time making the rounds pilfering payment card data. The move is a shift for attackers behind notorious NetWire, that was once thought to be the first multi-platform RAT. Over the last couple of years payment card breaches have been mostly synonymo...

Street Fighter 5 - 'Capcom.sys' Kernel Execution (Metasploit) Exploit

Exploit for windows platform in category local exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'msf/core/post/windows/reflectivedllinjection' require 'rex' class MetasploitModule...

Notepad++ Native Code Execution Vulnerability

Notepad++ is a free plain text editor developed by software developer Don Ho, which can be used to create plain text help files and is also suitable for use as an editor for writing computer programs. A local code execution vulnerability exists in Notepad++. A local attacker could exploit this...

notepad-plus-plus.org XSS vulnerability

Vulnerable URL: https://notepad-plus-plus.org/community/?lang=%27-prompt%28%27OPENBUGBOUNTY%27%29-%27 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7593 VIP website status:| Yes...

Notepad++ 6.9.2 DLL Hijacking

Aloha, npp.6.9.2.Installer.exe loads and executes dwmapi.dll from its "application directory". For software downloaded with a web browser the applicationdirectory is typically the user's "Downloads" directory: see , and for "prior art" about this well-known and well-documented vulnerability. If a...

My Notes - Notepad - Dangerous filesystem permissions, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application My Notes - Notepad published at the 'play' market has multiple vulnerabilities...

Notepad - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Notepad published at the 'play' market has multiple vulnerabilities...

Free Notes Notepad App - Dangerous filesystem permissions, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Free Notes Notepad App published at the 'play' market has multiple vulnerabilities...

InkPad Notepad Notes - Dangerous filesystem permissions, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application InkPad Notepad Notes published at the 'play' market has multiple vulnerabilities...

Ultimate Notepad - Exported components, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Ultimate Notepad published at the 'play' market has multiple vulnerabilities...

Notepad - Exported components, SD-card access, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Notepad published at the 'play' market has multiple vulnerabilities...

Notepad+ Free - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Notepad+ Free published at the 'play' market has multiple vulnerabilities...

Notepad - Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Notepad published at the 'play' market has multiple vulnerabilities...