CVE-2025-15556

The repository contains a functional SQL injection exploit for CVE-2025-10042, targeting WordPress Quiz Maker plugin versions <= 6.7.0.56. The exploit uses time-based blind SQLi to extract admin credentials and hashes.

This PoC demonstrates a man-in-the-middle attack against Notepad++'s WinGUp updater by serving a malicious update.xml file that bypasses integrity checks, leading to arbitrary code execution. The exploit includes a Python-based MITM proxy and a DNS spoofing simulation script.

This repository is a comprehensive writeup and IoC collection for CVE-2025-15556, detailing a supply chain attack on Notepad++ via its WinGUp updater. It includes infection chains, detection methods, and threat hunting queries but does not contain exploit code.