KLA10972 CIA hacking issue in Notepad++

An issue of a hijacked DLL was found in Notepad++. By exploiting this vulnerability malicious users can obtain sensitive information. This vulnerability can be exploited remotely via a sciexer.dll, which is replaced by version of sciexer.dll built by CIA. Technical details This vulnerability has...

ColorNote Notepad Notes - Customized SSL, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application ColorNote Notepad Notes published at the 'play' market has multiple vulnerabilities...

NetWire RAT Back, Stealing Payment Card Data

The remote access Trojan NetWire is back and this time making the rounds pilfering payment card data. The move is a shift for attackers behind notorious NetWire, that was once thought to be the first multi-platform RAT. Over the last couple of years payment card breaches have been mostly synonymo...

Street Fighter 5 - 'Capcom.sys' Kernel Execution (Metasploit) Exploit

Exploit for windows platform in category local exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'msf/core/post/windows/reflectivedllinjection' require 'rex' class MetasploitModule...

Notepad++ Native Code Execution Vulnerability

Notepad++ is a free plain text editor developed by software developer Don Ho, which can be used to create plain text help files and is also suitable for use as an editor for writing computer programs. A local code execution vulnerability exists in Notepad++. A local attacker could exploit this...

notepad-plus-plus.org XSS vulnerability

Vulnerable URL: https://notepad-plus-plus.org/community/?lang=%27-prompt%28%27OPENBUGBOUNTY%27%29-%27 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7593 VIP website status:| Yes...

Notepad++ 6.9.2 DLL Hijacking

Aloha, npp.6.9.2.Installer.exe loads and executes dwmapi.dll from its "application directory". For software downloaded with a web browser the applicationdirectory is typically the user's "Downloads" directory: see , and for "prior art" about this well-known and well-documented vulnerability. If a...

My Notes - Notepad - Dangerous filesystem permissions, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application My Notes - Notepad published at the 'play' market has multiple vulnerabilities...

Notepad - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Notepad published at the 'play' market has multiple vulnerabilities...

Free Notes Notepad App - Dangerous filesystem permissions, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Free Notes Notepad App published at the 'play' market has multiple vulnerabilities...

InkPad Notepad Notes - Dangerous filesystem permissions, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application InkPad Notepad Notes published at the 'play' market has multiple vulnerabilities...

Ultimate Notepad - Exported components, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Ultimate Notepad published at the 'play' market has multiple vulnerabilities...

Notepad - Exported components, SD-card access, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Notepad published at the 'play' market has multiple vulnerabilities...

Notepad+ Free - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Notepad+ Free published at the 'play' market has multiple vulnerabilities...

Notepad - Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Notepad published at the 'play' market has multiple vulnerabilities...

Notepad++ NPPFtp Plugin 0.26.3 - Buffer Overflow

Title : Notepad ++ NPPFtp Plugin Buffer Overflow Date : 19/12/2015 Author : R-73eN Tested on : NPPFtp 0.26.3 Latest Version Software : http://sourceforge.net/projects/nppftp/ Vendor : https://notepad-plus-plus.org/ | | / | / | / \ | | | || ' | | / | | / \ ' \ / \ | | | || | | | | | || | / | | | /...

Notepad++ NPPFtp Plugin 0.26.3 - Buffer Overflow

Notepad++ NPPFtp Plugin 0.26.3 - Buffer Overflow Title : Notepad ++ NPPFtp Plugin Buffer Overflow Date : 19/12/2015 Author : R-73eN Tested on : NPPFtp 0.26.3 Latest Version Software : http://sourceforge.net/projects/nppftp/ Vendor : https://notepad-plus-plus.org/ | | / | / | / \ | | | || ' | | /...

Notepad++ NPPFtp Plugin 0.26.3 - Buffer Overflow

Exploit for windows platform in category dos / poc Title : Notepad ++ NPPFtp Plugin Buffer Overflow Date : 19/12/2015 Author : R-73eN Tested on : NPPFtp 0.26.3 Latest Version Software : http://sourceforge.net/projects/nppftp/ Vendor : https://notepad-plus-plus.org/ | | / | / | / \ | | | || ' | | ...

CVE-2015-2423

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Windows 10, Excel 2007 SP3, PowerPoint 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2,...

Notepad++ 6.7.3 - Crash PoC

Exploit for windows platform in category dos / poc Title: Notepad++ - Crash Date: 10/07/2015 Author: Rahul Pratap Singh @0x62626262 Vendor Homepage: https://notepad-plus-plus.org Download: https://notepad-plus-plus.org/download/v6.7.3.html Version: v6.7.3 Tested on: WindowsXPx86 & Windows7x86...