ALERT: North Korean hackers targeting South Korea with RokRat Trojan

A North Korean hacking group has been found deploying the RokRat Trojan in a new spear-phishing campaign targeting the South Korean government. Attributing the attack to APT37 aka Starcruft, Ricochet Chollima, or Reaper, Malwarebytes said it identified a malicious document last December that, whe...

Command Execution Vulnerability in Six Six Notepad pc Client Software

Six Six Notepad for PC is a simple interface, practical and convenient note-taking software, users can edit the page freely, the system itself sets up a variety of functions to meet the personalized needs of the user's records or editing requirements. A command execution vulnerability exists in t...

Add new features to Notepad++ using Python scripts: keyboard shortcut to insert current time

I have to say, I spend a lot of time daily in Notepad++ text editor for Windows. I keep my “logbook” there. I record what I am doing now and what needs to be done. This allows me not to keep everything in my head and switch the context more efficiently. I can recommend this to everyone. And it is...

The vulnerability of the sub-component SciLexer.dll, a text editing component of the text editor Scintilla (Notepad++), allows an attacker to cause a service failure or execute arbitrary code.

The vulnerability of the SciLexer.dll sub-component of the Scintilla text editor Notepad++, relates to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure by using a specially created .ml file containing...

XML Notepad 2.8.0.4 - XML External Entity Injection

Exploit Title: XML Notepad 2.8.0.4 - XML External Entity Injection Date: 2019-11-11 Exploit Author: 8-Team / daejinoh Vendor Homepage: https://www.microsoft.com/ Software Link: https://github.com/microsoft/XmlNotepad Version: XML Notepad 2.8.0.4 Tested on: Windows 10 Pro CVE : N/A Step 1 File -...

XML Notepad 2.8.0.4 - XML External Entity Injection

XML Notepad 2.8.0.4 - XML External Entity Injection Exploit Title: XML Notepad 2.8.0.4 - XML External Entity Injection Date: 2019-11-11 Exploit Author: 8-Team / daejinoh Vendor Homepage: https://www.microsoft.com/ Software Link: https://github.com/microsoft/XmlNotepad Version: XML Notepad 2.8.0.4...

XML Notepad 2.8.0.4 XML External Entity Injection

Exploit Title: XML Notepad 2.8.0.4 - XML External Entity Injection Date: 2019-11-11 Exploit Author: 8-Team / daejinoh Vendor Homepage: https://www.microsoft.com/ Software Link: https://github.com/microsoft/XmlNotepad Version: XML Notepad 2.8.0.4 Tested on: Windows 10 Pro CVE : N/A Step 1 File -...

XML Notepad 2.8.0.4 - XML External Entity Injection Exploit

Exploit Title: XML Notepad 2.8.0.4 - XML External Entity Injection Exploit Author: 8-Team / daejinoh Vendor Homepage: https://www.microsoft.com/ Software Link: https://github.com/microsoft/XmlNotepad Version: XML Notepad 2.8.0.4 Tested on: Windows 10 Pro CVE : N/A Step 1 File - Open - .xml Exploi...

Notepad++ < 7.7 (x64) - Denial of Service

Exploit Title: Notepad++ all x64 versions before 7.7. Remote memory corruption via .ml file. Google Dork: N/A Date: 2019-09-14 Exploit Author: Bogdan Kurinnoy [email protected] Vendor Homepage: https://notepad-plus-plus.org/ Version: 7.7 Tested on: Windows x64 CVE : CVE-2019-16294 Description:...

CVE-2019-16294

SciLexer.dll in Scintilla in Notepad++ x64 before 7.7 allows remote code execution or denial of service via Unicode characters in a crafted .ml file...

CVE-2019-16294

SciLexer.dll in Scintilla in Notepad++ x64 before 7.7 allows remote code execution or denial of service via Unicode characters in a crafted .ml file...

Remote code execution

SciLexer.dll in Scintilla in Notepad++ x64 before 7.7 allows remote code execution or denial of service via Unicode characters in a crafted .ml file...

CVE-2019-16294

Notepad++ (x64) before version 7.7 is affected by CVE-2019-16294 due to SciLexer.dll (Scintilla) processing crafted Unicode in .ml files, enabling remote code execution or denial of service. Exploitation targets the SciLexer.dll component within Notepad++, with a local/remote feasibility dependin...

EUVD-2019-7089

SciLexer.dll in Scintilla in Notepad++ x64 before 7.7 allows remote code execution or denial of service via Unicode characters in a crafted .ml file...

PT-2019-3959 · Notepad++ · Notepad++

Name of the Vulnerable Software and Affected Versions: Notepad++ versions prior to 7.7 Description: The issue is related to insufficient input validation in the SciLexer.dll component of the Scintilla text editing component in Notepad++. This can be exploited by a remote attacker using a speciall...

CVE-2019-16294: Out-of-bounds Write

SciLexer.dll in Scintilla in Notepad++ x64 before 7.7 allows remote code execution or denial of service via Unicode characters in a crafted .ml file...

Heap Overflow Vulnerability at Notepad++ Clipboard History Screen

Notepad++ is a suite of text editors for Windows operating systems Software Copyright License: GPL, with a complete Chinese language interface and support for multi-language writing UTF8 technology. A heap overflow vulnerability exists in Notepad++ at the clipboard history screen. An attacker can...

Notepad++ Se***-Op*** File Buffer Overflow Vulnerability

Notepad++ is a suite of text editors for Windows operating systems Software Copyright License: GPL, with a complete Chinese language interface and support for multi-language writing UTF8 technology. A buffer overflow vulnerability exists in Notepad++ Se-Op files. An attacker can exploit the...

Dll Hijacking Vulnerability in Notepad++ v7.6.3

Notepad++ is a suite of text editors for the Windows operating system Software Copyright License: GPL, with a complete Chinese language interface and support for multi-language writing UTF8 technology. Notepad++ v7.6.3 suffers from a Dll hijacking vulnerability that can be exploited by attackers ...

Notepad++ v7.6.3 print dialog box suffers from a buffer overflow vulnerability

Notepad++ is a suite of text editors for the Windows operating system Software Copyright License: GPL, with a complete Chinese language interface and support for multi-language writing UTF8 technology. A buffer overflow vulnerability exists in the Notepad++ v7.6.3 print dialog, no details of the...