Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2023-002745)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002745 advisory. NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1531. Tenable has extracted the preceding description block directly from the Unity Linux security...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000566)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000566 advisory. Out-of-bounds Read in GitHub repository vim/vim prior to 8.2. Tenable has extracted the preceding description block directly from the Unity Linux security advisory...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2023-002721)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002721 advisory. Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846. Tenable has extracted the preceding description block directly from the Unity Linux...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2023-002326)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002326 advisory. Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0742. Tenable has extracted the preceding description block directly from the Unity Linux securi...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2023-002318)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002318 advisory. Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225. Tenable has extracted the preceding description block directly from the Unity Linux securi...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000534)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000534 advisory. Undefined Behavior for Input to API in GitHub repository vim/vim prior to 9.0.0100. Tenable has extracted the preceding description block directly from the Unity Lin...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000545)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000545 advisory. Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0. Tenable has extracted the preceding description block directly from the Unity Linux security...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2023-002720)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002720 advisory. Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1847. Tenable has extracted the preceding description block directly from the Unity Linux security...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000543)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000543 advisory. Out-of-bounds Read in GitHub repository vim/vim prior to 9.0. Tenable has extracted the preceding description block directly from the Unity Linux security advisory...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2023-002315)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002315 advisory. NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1392. Tenable has extracted the preceding description block directly from the Unity Linux security...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000576)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000576 advisory. NULL Pointer Dereference in function vimregexecstring at regexp.c:2729 in GitHub repository vim/vim prior to 8.2.4901. NULL Pointer Dereference in function...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000560)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000560 advisory. Use After Free in GitHub repository vim/vim prior to 8.2. Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note...

CVE-2019-12735

CVE-2019-12735 An Arbitrary Code Execution vulnerability through modeline in vim/neovim root@kitploit: Product: Vim 8.1.1365, Neovim 0.3.6 Type: Arbitrary Code Execution CVE: CVE-2019-12735 Date: 2019-06-04 Author: Arminius @rawsec Vim versions before 8.1.1365 and Neovim versions before 0.3.6 hav...

SimpleCTF-THM-Walkthrough

SimpleCTF-THM-Relatory First CTF successfully completed! This repo documents my walkthrough of TryHackMe's Simple CTF. It covers network reconnaissance Nmap, web exploitation CVE-2019-9053, and credential cracking. As a dev, it was great to pivot from SQLi to a Root shell by leveraging Sudo...

vim: command injection when decompressing .tgz archives

A flaw was found in Vim. When decompressing .tgz archives, the Vimuntar function builds shell commands using shellescape without the special flag. This allows a specially crafted archive filename to trigger Vim cmdline-special expansion and execute arbitrary commands in the context of the current...

vim: Vim: Out-of-bounds Write in Spell File Word Count

A flaw was found in Vim, an open-source command-line text editor. A remote attacker could exploit this vulnerability by tricking a user into loading a specially crafted spell file. When the user invokes spell suggestion, the editor attempts to process the malicious file, leading to an out-of-boun...

vim: arbitrary command execution via modeline sandbox bypass

A flaw was found in Vim. A modeline is used to set specific editor options directly from a text file. However, the complete, guitabtooltip, printheader options and the mapset function lack proper security checks, allowing an attacker to bypass restrictions and cause arbitrary OS command execution...

vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin

A flaw was found in Vim, an open-source command-line text editor. Specifically, an operating system OS command injection vulnerability exists in the netrw standard plugin. A remote attacker could exploit this by tricking a user into opening a specially crafted URL, such as one using the scp://...

vim: Vim: Denial of Service via stack out-of-bounds write in spell_soundfold_sofo()

A memory corruption flaw in Vim allows an attacker to cause a Denial of Service DoS. When a SOFO-based spell language is active, providing an excessively long word to the spell checker triggers a stack out-of-bounds write in the spellsoundfoldsofo function, causing the editor to crash...

vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion

A command injection vulnerability in Vim's C omni-completion script allows an attacker to execute arbitrary commands if a user is tricked into opening a maliciously crafted tags file and manually invoking the autocomplete feature...