[vim-security] Ex Command Execution via Cargo Quickfix Hooks in Vim < 9.2.1201
Vim before 9.2.1201 can run Ex commands through Cargo quickfix hooks, a medium command-injection flaw.
40
- Mentions · 7d0
- Mentions · 30d3
- All mentions6
- First seenSep 8, 2026
- Last mentioned15d ago
Timeline
6 articles · newest first[vim-security] Command Execution via Rmd Syntax Highlighting in Vim < 9.2.1178
Vim before 9.2.1178 can run OS commands via R Markdown syntax highlighting; no CVE yet.
52
[vim-security] Arbitrary Code Execution via Ruby Omni-Completion in Vim < 9.2.1177
Vim before 9.2.1177 allows arbitrary code execution through Ruby omni-completion; no CVE yet.
50
Microsoft Warns NeedyMantis Malware Enables Persistent Network Access
Microsoft warns China-linked NeedyMantis malware maintains persistent access in telecom, university, and government networks.
78
NeedyMantis: Unpacking a post-compromise malware family used in targeted operations
Microsoft details NeedyMantis, modular post-compromise malware used in targeted intrusions linked to China-based operators.
66
USN-8679-2: Vim vulnerability
Ubuntu's USN-8679-2 updates Vim for Ubuntu 26.04 LTS, fixing a tags-file handling flaw that could allow arbitrary code execution.
22
Appears with
- Vimvendor · 3
- curlproduct · 2
- TightVNCproduct · 2
- Vimorganization · 2
- Microsoftvendor · 2
- Poeditproduct · 2
- universitiesvictim · 2
- Storm-3069threat actor · 2
- NeedyMantismalware · 2
- Microsoftorganization · 2
- medical nonprofitsvictim · 1
- telecommunications organizationsvictim · 1
- Kasperskyvendor · 1
- Kasperskyorganization · 1
- Microsoft Officeproduct · 1
- DAEMON Toolsproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.