Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-15556-Notepad-WinGUp-Updater-RCE — Proof-of-concept exploit for CVE-2025-15556, demonstrating update integrity bypass in Notepad++ WinGUp updater via MITM proxy or DNS spoofing, leading to arbitrary code execution. | Kitploit
Tools/GitHubGitHub/george0papasotiriou/cve-2025-15556-notepad-wingup-updater-rce
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingLearning & EducationRed Teaming
GitHubgeorge0papasotiriou/cve-2025-15556-notepad-wingup-updater-rce

CVE-2025-15556-Notepad-WinGUp-Updater-RCE

Proof-of-concept exploit for CVE-2025-15556, demonstrating update integrity bypass in Notepad++ WinGUp updater via MITM proxy or DNS spoofing, leading to arbitrary code execution.

View Repository
127 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

Affected Software: Notepad++ versions prior to 8.8.9 using the WinGUp updater.

Vulnerability Type: Update integrity verification bypass leading to arbitrary code execution.

Description: The WinGUp updater fails to properly verify the integrity of update metadata, allowing an attacker who can intercept or redirect update traffic to serve a malicious installer that will be executed with user privileges.

I also included exploit.py for reference (Man-in-the-Middle Proxy) and an HTB-Friendly version for fellow players (DNS Spoofing Simulation).

Download Tool