Tools

atiilla/notepad-8.9.6-poc

Proof-of-concept scripts for three vulnerabilities in Notepad++ <= 8.9.6, patched in v8.9.6.1 (2026-05-26) CVE-2026-48770 / CVE-2026-48778 /…

404godd/cve-2026-20841-poc

🛠 Demonstrate remote code execution in Windows Notepad versions below 11.2510 using the CVE-2026-20841 proof of concept.

bttea/cve-2026-20841-poc

Proof-of-concept exploit for CVE-2026-20841 demonstrating remote code execution in Windows Notepad before version 11.2510, intended for vulnerability…

mekitoci/cve-2023-6401

CVE-2023-6401 is a DLL hijacking vulnerability that allows attackers to execute arbitrary code by placing a malicious `dbghelp.dll` file in the…

elenichristopoulou/poc-cve-2026-20841

Proof-of-concept exploit for CVE-2026-20841, a Windows Notepad remote code execution vulnerability, using a crafted .md file and social engineering…

vr00mm/cve-2025-49144

PoC CVE-2025-49144

v3s9er/cve-2026-52886

Notepad++ CVE-2026-52886 — session.xml backupFilePath starts_with() path traversal (GHSA-rqfm-pw34-r7j6)

atiilla/cve-2026-20841

Proof-of-concept exploit for CVE-2026-20841, a Windows Notepad RCE via markdown links. Generates crafted .md files to trigger remote payloads, app…

hamzamalik3461/cve-2026-20841

🛠 Demonstrate remote code execution in Windows Notepad via markdown links exploiting unsecured URL protocols.

tangent65536/cve-2026-20841

PoC for the "Windows Notepad RCE"

rajauzairabdullah/cve-2026-20841

Proof-of-concept exploit for CVE-2026-20841, a remote code execution vulnerability in Windows Notepad, demonstrating file-based trigger and execution…

luisyapura/analisis-y-explotacion-de-cve-2025-5548

Educational lab for analyzing and exploiting CVE-2025-5548 (FreeFloat FTP Server buffer overflow) with step-by-step guides, debugger setup, and…

llgsjsm/cve-2026-3008

Technical analysis and proof-of-concept for CVE-2026-3008, a format string injection in Notepad++ 8.9.3 via nativeLang.xml, enabling denial of…

securewithumer/cve-2026-20841

PoC for a remote code execution flaw in Windows Notepad's markdown renderer. The markdown engine does not restrict URL protocols, allowing arbitrary…

cdacesec/cve-2022-31902

Proof-of-concept for CVE-2022-31902, a denial-of-service vulnerability in Notepad++ (x86) triggered by the Find All feature on crafted text files,…

assad12341/notepad-v8.8.1-lpe-cve-

CVE-2025-49144 * Notepad++ v8.8.1 * SYSTEM-level POC

b0ysie7e/notepad-8.8.1_cve-2025-49144

Proof of Concept (PoC) that exploits the CVE-2025-49144 vulnerability in the Notepad++ 8.8.1 installer.

hackfaiz/cve-2026-20841-poc

Proof of concept demonstrating command execution in Microsoft Notepad via crafted files, enabling arbitrary code execution and system compromise.