PersonalStuff

PersonalStuff sax.tar.xz - Epic sax guy video in .m3u8 format. TelegramPrivacy.pdf - Privacy bug in Telegram. firefoxaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.lnk - Corpous for fuzzing liblnk. pack.sh - Standard packages to resolve common dependencies in Ubuntu 18.04. tcpcorpus.tar.xz - Corpous for...

CVE-2019-12735-VIM-NEOVIM

CVE-2019-12735-VIM-NEOVIM USAGE: Prerequisite: modeline feature must be enabled. For regular users, modeline is enabled by default, while for root users it is disabled by default. Use echo &modeline to check the status: 1 means enabled, 0 means disabled. If not, you can add set modeline to /.vimr...

vim security, bug fix, and enhancement update

An update is available for vim. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Vim Vi IMproved is an updated and improved version of the vi editor. Security...

RLSA-2026:98119 Important: vim security, bug fix, and enhancement update

Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Vimscript injection via unescaped filename in netrw s:NetrwMarkFile filter expression allows arbitrary code execution CVE-2026-43961 Bug Fixes and Enhancements: vim writes file in place even though creating ...

SimpleCTF-THM-Walkthrough

SimpleCTF-THM-Relatory First CTF successfully completed! This repo documents my walkthrough of TryHackMe's Simple CTF. It covers network reconnaissance Nmap, web exploitation CVE-2019-9053, and credential cracking. As a dev, it was great to pivot from SQLi to a Root shell by leveraging Sudo...

Important: Red Hat Security Advisory: vim security, bug fix, and enhancement update

An update for vim is now available for Red Hat Enterprise Linux 9.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...

vim: Vimscript injection via unescaped filename in netrw s:NetrwMarkFile() filter() expression allows arbitrary code execution

A flaw was found in Vim's netrw plugin. A crafted filename containing quote characters and expression fragments can break out of the quoted context during mark/unmark operations, allowing arbitrary Vimscript execution. This can be leveraged to run shell commands with the privileges of the user...

cve-2019-12735

cve-2019-12735 Docker image that lets me study the exploitation of the VIM exploit here Affected Software Vim 8.1.1365 up to and excluding NeoVim 0.3.6 up to and excluding Install on Host $ make build $ make run $ make attach This brings you into the container with the vulnerable Vim In docker...

CentOS Linux 8 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1794513408)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1794513408 advisory. - A flaw was found in Vim's netrw plugin. A crafted filename containing quote characters and expression fragments can break out o...

RHEL 9 : vim (RHSA-2026:99166)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:99166 advisory. Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Vimscript injection via unescaped filename in netrw...

RockyLinux 8 : vim (RLSA-2026:98119)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:98119 advisory. vim: Vimscript injection via unescaped filename in netrw s:NetrwMarkFile filter expression allows arbitrary code execution CVE-2026-43961 Bug Fixes and...

Important: Red Hat Security Advisory: vim security, bug fix, and enhancement update

An update for vim is now available for Red Hat Enterprise Linux 10.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

vim: Vimscript injection via unescaped filename in netrw s:NetrwMarkFile() filter() expression allows arbitrary code execution

A flaw was found in Vim's netrw plugin. A crafted filename containing quote characters and expression fragments can break out of the quoted context during mark/unmark operations, allowing arbitrary Vimscript execution. This can be leveraged to run shell commands with the privileges of the user...

CVE-2019-12735

CVE-2019-12735 An Arbitrary Code Execution vulnerability through modeline in vim/neovim Product: Vim 8.1.1365, Neovim 0.3.6 Type: Arbitrary Code Execution CVE: CVE-2019-12735 Date: 2019-06-04 Author: Arminius @rawsec Vim versions before 8.1.1365 and Neovim versions before 0.3.6 have a vulnerabili...

CTF-CVE-2019-9053-GTFOBins

CTF, CVE-2019-9053, GTFOBins I utilized the machines on https://tryhackme.com/ and my own Kali on WSL to do this exercise and it is part of the CTF challenge. The following information helped me solved the challenge: vim on https://gtfobins.github.io/gtfobins/vim/ and https://gtfobins.github.io/...

Important: Red Hat Security Advisory: vim security, bug fix, and enhancement update

An update for vim is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

vim: Vimscript injection via unescaped filename in netrw s:NetrwMarkFile() filter() expression allows arbitrary code execution

A flaw was found in Vim's netrw plugin. A crafted filename containing quote characters and expression fragments can break out of the quoted context during mark/unmark operations, allowing arbitrary Vimscript execution. This can be leveraged to run shell commands with the privileges of the user...

vim security, bug fix, and enhancement update

8.0.1763-34.0.1 - Remove upstream references Orabug: 31197557 - Added glibc-gconv-extra to common requires to provide ISO-8859-2 Orabug: 34114984 2:8.0.1763-34 - RHEL-285535 CVE-2026-43961 vim: Vimscript injection via unescaped filename in netrw s:NetrwMarkFile filter expression allows arbitrary...

RHEL 8 : vim (RHSA-2026:98119)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:98119 advisory. Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Vimscript injection via unescaped filename in netrw...

RHEL 10 : vim (RHSA-2026:99165)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:99165 advisory. Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Vimscript injection via unescaped filename in netrw...