Notepad++ 安全漏洞

Notepad++ is an open source plain text editor by Don Ho, an individual developer in Taiwan, China. A security vulnerability exists in Notepad++ version 8.8.3, which originates from DLL hijacking and could lead to the execution of malicious code...

CVE-2025-56383

Notepad++ v8.8.3 has a DLL hijacking vulnerability, which can replace the original DLL file to execute malicious code. NOTE: this is disputed by multiple parties because the behavior only occurs when a user installs the product into a directory tree that allows write access by arbitrary...

CVE-2025-56383: Uncontrolled Search Path Element

Notepad++ v8.8.3 has a DLL hijacking vulnerability, which can replace the original DLL file to execute malicious code. NOTE: this is disputed by multiple parties because the behavior only occurs when a user installs the product into a directory tree that allows write access by arbitrary...

CVE-2025-56383

Notepad++ v8.8.3 has a DLL hijacking vulnerability, which can replace the original DLL file to execute malicious code. NOTE: this is disputed by multiple parties because the behavior only occurs when a user installs the product into a directory tree that allows write access by arbitrary...

PT-2025-39673

Name of the Vulnerable Software and Affected Versions Notepad++ versions 8.8.3 and earlier Description Notepad++ version 8.8.3 contains a DLL hijacking flaw. This allows an attacker to replace original DLL files, such as NppExport.dll, with malicious versions, leading to arbitrary code execution...

CVE-2025-56383

Notepad++ v8.8.3 is susceptible to a DLL hijacking vulnerability that allows an attacker to replace an original DLL file with a malicious one to execute arbitrary code. The vulnerability specifically involves the NppExport.dll file, which the application loads from the working directory. The impa...

CVE-2025-57927

Cross-Site Request Forgery CSRF vulnerability in Stephanie Leary Dashboard Notepad dashboard-notepad allows Cross Site Request Forgery.This issue affects Dashboard Notepad: from n/a through = 1.42...

WordPress Dashboard Notepad Plugin <= 1.42 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Que Thanh Tuan - Blue Rock in WordPress Plugin Dashboard Notepad versions = 1.42...

CVE-2025-57927

Cross-Site Request Forgery CSRF vulnerability in Stephanie Leary Dashboard Notepad dashboard-notepad allows Cross Site Request Forgery.This issue affects Dashboard Notepad: from n/a through = 1.42...

CVE-2025-57927 WordPress Dashboard Notepad Plugin <= 1.42 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Stephanie Leary Dashboard Notepad dashboard-notepad allows Cross Site Request Forgery.This issue affects Dashboard Notepad: from n/a through = 1.42...

CVE-2025-57927

Technical details about CVE-2025-57927 are not provided in the connected documents. The available data confirms a CSRF issue in Dashboard Notepad up to 1.42, but no vendor, impact, affected versions beyond that, or fixes are described here.

CVE-2025-57927 WordPress Dashboard Notepad Plugin <= 1.42 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Stephanie Leary Dashboard Notepad allows Cross Site Request Forgery. This issue affects Dashboard Notepad: from n/a through 1.42...

WordPress plugin Dashboard Notepad 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-site reques...

PT-2025-38778

Name of the Vulnerable Software and Affected Versions Dashboard Notepad versions through 1.42 Description A Cross-Site Request Forgery CSRF issue exists in Stephanie Leary Dashboard Notepad. This allows for the execution of unwanted actions on behalf of an authenticated user. Recommendations Upda...

CVE-2025-57927: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Stephanie Leary Dashboard Notepad dashboard-notepad allows Cross Site Request Forgery.This issue affects Dashboard Notepad: from n/a through = 1.42...

Exploit for CVE-2025-49144

🎯 CVE-2025-49144PoC - Test Your Security Skills Easily !Do...

The vulnerability of Notepad++ installer allows a hacker to elevate their privileges and write arbitrary files.

The vulnerability of the Notepad++ text editor is related to deficiencies in access control, resulting from uncontrolled access to search paths. Exploiting this vulnerability can allow attackers to enhance their privileges and write arbitrary files...

Exploit for CVE-2025-49144

CVE-2025-49144 – Exploit for Notepad++ 8.8.1 This repository...

Exploit for CVE-2025-49144

notepad-v8.8.1-LPE-CVE- CVE-2025-49144 Notepad++ v8.8.1 SY...

Notepad++ < 8.8.2 Privilege Escalation (CVE-2025-49144)

The version of Notepad++ installed on the remote host is prior to 8.8.2. It is, therefore, affected by a privilege escalation vulnerability: - Notepad++ is a free and open-source source code editor. In versions 8.8.1 and prior, a privilege escalation vulnerability exists in the Notepad++ v8.8.1...