Tools

hamzamalik3461/cve-2026-20841

🛠 Demonstrate remote code execution in Windows Notepad via markdown links exploiting unsecured URL protocols.

v3s9er/cve-2026-52886

Notepad++ CVE-2026-52886 — session.xml backupFilePath starts_with() path traversal (GHSA-rqfm-pw34-r7j6)

v3s9er/cve-2026-52885

Technical analysis of CVE-2026-52885: a TOCTOU race condition in Notepad++ v8.9.6.2 allowing arbitrary command execution via HMAC integrity bypass.…

kavin-jindal/cve-2026-48800-poc

Proof-of-concept exploit for CVE-2026-48800 demonstrating arbitrary code execution in Notepad++ ≤ 8.9.6 via malicious shortcuts.xml. Includes trigger…

kavin-jindal/cve-2026-48778-poc

Proof-of-concept exploit for CVE-2026-48778, demonstrating arbitrary code execution in Notepad++ ≤ 8.9.6 via the 'Open Containing Folder' feature.…

xk3nf4/cve-2026-48778

Notepad++ RCE via config.xml commandLineInterpreter

atiilla/notepad-8.9.6-poc

Proof-of-concept scripts for three vulnerabilities in Notepad++ <= 8.9.6, patched in v8.9.6.1 (2026-05-26) CVE-2026-48770 / CVE-2026-48778 /…

llgsjsm/cve-2026-3008

Technical analysis and proof-of-concept for CVE-2026-3008, a format string injection in Notepad++ 8.9.3 via nativeLang.xml, enabling denial of…

whiskeylab/notepad_cve_2026_20841

Exploit code for CVE-2026-20841, a vulnerability in Notepad, providing proof-of-concept for security testing.

havertz2110/cve-2025-49144-poc

This is my reproduce PoC for CVE-2025-49144

luisyapura/analisis-y-explotacion-de-cve-2025-5548

Educational lab for analyzing and exploiting CVE-2025-5548 (FreeFloat FTP Server buffer overflow) with step-by-step guides, debugger setup, and…

elenichristopoulou/poc-cve-2026-20841

Proof-of-concept exploit for CVE-2026-20841, a Windows Notepad remote code execution vulnerability, using a crafted .md file and social engineering…

hackfaiz/cve-2026-20841-poc

Proof of concept demonstrating command execution in Microsoft Notepad via crafted files, enabling arbitrary code execution and system compromise.

securewithumer/cve-2026-20841

PoC for a remote code execution flaw in Windows Notepad's markdown renderer. The markdown engine does not restrict URL protocols, allowing arbitrary…

dogukankurnaz/cve-2026-20841-poc

Proof-of-concept demonstrating command injection in Windows Notepad via crafted Markdown links, enabling remote code execution. Includes attack…

atiilla/cve-2026-20841

Proof-of-concept exploit for CVE-2026-20841, a Windows Notepad RCE via markdown links. Generates crafted .md files to trigger remote payloads, app…

uky007/cve-2026-20841_notepad_analysis

Investigates Microsoft Notepad RCE vulnerability CVE-2026-20841 through binary analysis and PoC exploit development for educational purposes.