CVE-2024-25255

Sublime Text 4 was discovered to contain a command injection vulnerability via the New Build System module. NOTE: multiple third parties report that this is intended behavior...

Sublime Text Privilege Vulnerability

Sublime Text is a cross-platform, extensible text editor. A power lifting vulnerability exists in Sublime Text 3 32-bit Windows platform version 3.1.1 build 3176, which can be exploited by an attacker by placing a malicious pi-ms-win-core-fibers-l1-1-1.dll or api-ms-win-core-localization-l1-2-1...

CVE-2019-9116

DLL hijacking is possible in Sublime Text 3 version 3.1.1 build 3176 on 32-bit Windows platforms because a Trojan horse api-ms-win-core-fibers-l1-1-1.dll or api-ms-win-core-localization-l1-2-1.dll file may be loaded if a victim uses sublimetext.exe to open a .txt file within an attacker's...

CVE-2019-9116

DLL hijacking is possible in Sublime Text 3 version 3.1.1 build 3176 on 32-bit Windows platforms because a Trojan horse api-ms-win-core-fibers-l1-1-1.dll or api-ms-win-core-localization-l1-2-1.dll file may be loaded if a victim uses sublimetext.exe to open a .txt file within an attacker's...

Code injection

DISPUTED DLL hijacking is possible in Sublime Text 3 version 3.1.1 build 3176 on 32-bit Windows platforms because a Trojan horse api-ms-win-core-fibers-l1-1-1.dll or api-ms-win-core-localization-l1-2-1.dll file may be loaded if a victim uses sublimetext.exe to open a .txt file within an attacker'...

CVE-2019-9116

DLL hijacking is possible in Sublime Text 3 version 3.1.1 build 3176 on 32-bit Windows platforms because a Trojan horse api-ms-win-core-fibers-l1-1-1.dll or api-ms-win-core-localization-l1-2-1.dll file may be loaded if a victim uses sublimetext.exe to open a .txt file within an attacker's...

CVE-2019-9116

CVE-2019-9116 affects Sublime Text 3 (32‑bit Windows) 3.1.1 build 3176. A DLL hijack is possible if a Trojan horse api-ms-win-core-fibers-l1-1-1.dll or api-ms-win-core-localization-l1-2-1.dll is loaded when opening a .txt from an attacker-controlled %LOCALAPPDATA%\Temp\sublime_text. The vendor at...

CVE-2019-9116: Uncontrolled Search Path Element

DLL hijacking is possible in Sublime Text 3 version 3.1.1 build 3176 on 32-bit Windows platforms because a Trojan horse api-ms-win-core-fibers-l1-1-1.dll or api-ms-win-core-localization-l1-2-1.dll file may be loaded if a victim uses sublimetext.exe to open a .txt file within an attacker's...

PT-2019-19370 · Sublime Text · Sublime Text

Name of the Vulnerable Software and Affected Versions: Sublime Text 3 version 3.1.1 build 3176 Description: DLL hijacking is possible because a Trojan horse api-ms-win-core-fibers-l1-1-1.dll or api-ms-win-core-localization-l1-2-1.dll file may be loaded if a victim uses sublime text.exe to open a...

Sublime Text 3 v3.1.1 build 3176 suffers from DLL hijacking vulnerability

Sublime Text is a cross-platform, extensible text editor for code, markup, and more. A DLL hijacking vulnerability exists in Sublime Text 3 v3.1.1 build 3176. An attacker can exploit this vulnerability to elevate privileges...

Sublime Text Buffer Overflow Vulnerability

Sublime Text is a cross-platform, extensible text editor for code, markup, and more. A buffer overflow vulnerability exists in Sublime Text 3 Build 3126. The vulnerability can be exploited by an attacker to execute code with the help of specially crafted .mkv files...

CVE-2017-8368

Sublime Text 3 Build 3126 allows user-assisted attackers to cause a denial of service or possibly have unspecified other impact via a crafted .mkv file. One threat model is a victim who obtains an untrusted crafted file from a remote location and issues several user-defined commands, as...

Design/Logic Flaw

Sublime Text 3 Build 3126 allows user-assisted attackers to cause a denial of service or possibly have unspecified other impact via a crafted .mkv file. One threat model is a victim who obtains an untrusted crafted file from a remote location and issues several user-defined commands, as...

CVE-2017-8368

Sublime Text 3 Build 3126 allows user-assisted attackers to cause a denial of service or possibly have unspecified other impact via a crafted .mkv file. One threat model is a victim who obtains an untrusted crafted file from a remote location and issues several user-defined commands, as...

CVE-2017-8368

Sublime Text 3 Build 3126 is reported vulnerable to a user‑assisted DoS (and possibly other impact) via a crafted .mkv file. According to the sources, the issue can be triggered when a user opens a malicious MKV payload and issues commands such as Ctrl‑A, Delete, and Ctrl‑Z, with the exploit requ...

CVE-2017-8368: Improper Restriction of Operations within the Bounds of a Memory Buffer

Sublime Text 3 Build 3126 allows user-assisted attackers to cause a denial of service or possibly have unspecified other impact via a crafted .mkv file. One threat model is a victim who obtains an untrusted crafted file from a remote location and issues several user-defined commands, as...

PT-2017-18295

Name of the Vulnerable Software and Affected Versions Sublime Text version 3 Build 3126 Description The issue allows user-assisted attackers to cause a denial of service or possibly have unspecified other impact via a crafted .mkv file. A potential threat model involves a victim obtaining an...

Sublime Text Editor 3 DLL Hijacking

===================================================== Sublime Text Editor 3 - DLL Hijacking ===================================================== Vendor Homepage: https://www.sublimetext.com/ Date: 20 Oct 2016 Software Link : https://download.sublimetext.com/Sublime Text Build 3126 Setup.exe...

Androguard - Reverse engineering, Malware and goodware analysis of Android applications

Reverse engineering, Malware and goodware analysis of Android applications ... and more ninja ! Features Androguard is a full python tool to play with Android files. Map and manipulate DEX/ODEX/APK/AXML/ARSC format into full Python objects, Diassemble/Decompilation/Modification of DEX/ODEX/APK...

Reverse engineering, Malware and Goodware analysis of Android applications: Androguard

Androguard is a full python tool to play with Android files. DEX, ODEX APK Android’s binary xml Android resources Disassemble DEX/ODEX bytecodes Decompiler for DEX/ODEX files You can either use the cli or graphical frontend for androguard, or use androguard purely as a library for your own tools...