{"vulnerability": "cve-2022-2890", "sightings": [{"uuid": "4564b7d8-0a4c-41b9-afbb-b4902b854e65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-28906", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ltzsfqwusi2w", "content": "", "creation_timestamp": "2025-07-15T21:02:19.517356Z"}, {"uuid": "356f98e6-43c8-4f62-9010-f59d790aaf50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-28907", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ltzsfqzx6x2f", "content": "", "creation_timestamp": "2025-07-15T21:02:20.125862Z"}, {"uuid": "8699f6fd-554a-467f-bc1b-767524bccb91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-28907", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-13)", "content": "", "creation_timestamp": "2025-07-13T00:00:00.000000Z"}, {"uuid": "db5d2d85-d105-479b-8aa0-50a06ee5549a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-28907", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-14)", "content": "", "creation_timestamp": "2025-07-14T00:00:00.000000Z"}, {"uuid": "35c8c207-2457-4fdb-a513-479c61b6a6d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-28907", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-21)", "content": "", "creation_timestamp": "2025-07-21T00:00:00.000000Z"}, {"uuid": "660a9d50-43c4-40f9-800d-fca1baeb1342", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-28908", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lunw54xgs52h", "content": "", "creation_timestamp": "2025-07-23T21:02:21.756756Z"}, {"uuid": "ce36e806-57a6-4669-b99a-0cb97e5dbd49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2890", "type": "seen", "source": "https://t.me/cibsecurity/48481", "content": "\u203c CVE-2022-2890 \u203c\n\nCross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-08-22T18:20:35.000000Z"}, {"uuid": "6ea2cc5c-c2fc-4463-82e8-0c0c0965211e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-28906", "type": "seen", "source": "https://t.me/cibsecurity/42256", "content": "\u203c CVE-2022-28906 \u203c\n\nTOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the langtype parameter in /setting/setLanguageCfg.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-10T18:34:29.000000Z"}, {"uuid": "d5f3d1e2-64ff-4955-b668-5c16c2988135", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-28907", "type": "seen", "source": "https://t.me/cibsecurity/42245", "content": "\u203c CVE-2022-28907 \u203c\n\nTOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the hosttime function in /setting/NTPSyncWithHost.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-10T18:34:12.000000Z"}, {"uuid": "5e09a14a-9f96-4582-bad8-8bac49657d0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-28909", "type": "seen", "source": "https://t.me/cibsecurity/42244", "content": "\u203c CVE-2022-28909 \u203c\n\nTOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the webwlanidx parameter in /setting/setWebWlanIdx.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-10T18:34:10.000000Z"}, {"uuid": "4482791c-2347-4c35-a0ed-9dde93fbb839", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-28901", "type": "seen", "source": "https://t.me/cibsecurity/42246", "content": "\u203c CVE-2022-28901 \u203c\n\nA command injection vulnerability in the component /SetTriggerLEDBlink/Blink of D-Link DIR882 DIR882A1_FW130B06 allows attackers to escalate privileges to root via a crafted payload.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-10T18:34:14.000000Z"}, {"uuid": "3615fb14-e62a-4c42-a4f4-e1b4ff4bb8d6", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-28907", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e2d5c3db-ed3c-4717-b5af-08b92b5c6d9c", "content": "", "creation_timestamp": "2026-06-23T14:06:15.941286Z"}, {"uuid": "d44db825-0dc1-4555-8197-fcca2681ca54", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-28906", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d508f8f0-e417-49f8-89cf-fcfecec09b9c", "content": "", "creation_timestamp": "2026-06-23T14:06:16.014984Z"}, {"uuid": "9f2dc3fb-0333-44b6-ac65-90d192b4de5b", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-28908", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f004326b-3257-4ea8-ad62-3479a1856388", "content": "", "creation_timestamp": "2026-06-23T14:06:15.863650Z"}, {"uuid": "49602971-08ae-4213-92dc-85001b197c1a", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2022-28906", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fa5be590-533e-4b7b-af9a-250a33da052c", "content": "", "creation_timestamp": "2026-06-30T11:39:49.290788Z"}, {"uuid": "117357ed-c94f-43b7-8470-bbc8379b2d37", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2022-28907", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b6b9e27a-cfe4-4b8d-86fa-72b81a4e92c8", "content": "", "creation_timestamp": "2026-06-30T11:39:49.531320Z"}, {"uuid": "989dcf7f-e396-41d0-94a3-29c721671a77", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2022-28908", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c2dfee1f-d380-44d8-821f-adea4cae60eb", "content": "", "creation_timestamp": "2026-06-30T11:39:53.018078Z"}, {"uuid": "9b7111e5-2add-46cf-970a-68a07bd45965", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-28906", "type": "seen", "source": "Telegram/rpxQrde5C3QRNvZwgV3wnpJTDTukLKxeiiPOPNL_I7MqRI0", "content": "", "creation_timestamp": "2026-08-25T17:00:04.405394Z"}, {"uuid": "50630f5c-5edf-4e45-8533-6e60d689aa6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-28906", "type": "seen", "source": "https://t.me/GithubRedTeam/99612", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #POC #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2022-28906-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a finnvle\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-25 07:48:18\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2022-28906 Proof of concept in Python3\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-25T19:00:03.818298Z"}, {"uuid": "52952ff2-69eb-43d9-8fc5-cc59b8bff15c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-28906", "type": "published-proof-of-concept", "source": "Telegram/rpxQrde5C3QRNvZwgV3wnpJTDTukLKxeiiPOPNL_I7MqRI0", "content": "", "creation_timestamp": "2026-08-26T00:00:09.818799Z"}, {"uuid": "4acab136-8984-40ff-bd12-44c563c303d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-28906", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99612", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #POC #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2022-28906-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a finnvle\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-25 07:48:18\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2022-28906 Proof of concept in Python3\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-26T00:00:09.392273Z"}, {"uuid": "5cc52bd6-2904-4d73-91b5-837191e0ea12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2890", "type": "seen", "source": "https://gist.github.com/zhuozhenwei/8abee5d7d62d8dcacc7d233fbaaa3d0a", "content": "Command:\n./nvim-0.8.3 -u NONE -i NONE -n -m -X -V20 -e -s -S poc -c :qa!\n\nOutput:\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-2980)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-2980)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-2980)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-2980)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-2980)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-2980)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-2980)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-2980)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-2980)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-2980)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-2980)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-2980)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-2980)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-2980)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-2980)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-2980)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-2980)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-2980)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-2980)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-2980)\nExecuting:     aunmenu *\n\nExecuting:     vnoremenu PopUp.Cut                     \"+x\n\nExecuting:     vnoremenu PopUp.Copy                    \"+y\n\nExecuting:     anoremenu PopUp.Paste                   \"+gP\n\nExecuting:     vnoremenu PopUp.Paste                   \"+P\n\nExecuting:     vnoremenu PopUp.Delete                  \"_x\n\nExecuting:     nnoremenu PopUp.Select\\ All             ggVG\n\nExecuting:     vnoremenu PopUp.Select\\ All             gg0oG$\n\nExecuting:     inoremenu PopUp.Select\\ All             VG\n\nExecuting:     anoremenu PopUp.-1-                     \n\nExecuting:     anoremenu PopUp.How-to\\ disable\\ mouse  help disable-mouse\n\nExecuting:   \n\nExecuting: so poc\n\nline 0: sourcing \"poc\"\nline 1: tabnew\n\nline 1: unlet! b:keymap_name\n\nline 2: se mouse=a\n\nline 3: fu C00000xpr()\n\nline 6: nn< C00000xpr()\n\nline 7: norm<\n\ncalling C00000xpr()\n\nline 1: retu\"\\\"\n\nC00000xpr returning '<80>,'\n\ncontinuing in /home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-2980/CVE-2022-2980\nAddressSanitizer:DEADLYSIGNAL\n=================================================================\n==11414==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000004 (pc 0x0000008d0bb7 bp 0x7ffca9397bb0 sp 0x7ffca9397960 T0)\n==11414==The signal is caused by a READ memory access.\n==11414==Hint: address points to the zero page.\n    #0 0x8d0bb7 in do_mouse /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:1747:43\n    #1 0x8ea965 in nv_mouse /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:3442:9\n    #2 0x8db560 in normal_execute /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:1172:3\n    #3 0x8da5c8 in normal_cmd /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:7420:9\n    #4 0x73b1e3 in exec_normal /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:6446:5\n    #5 0x73b079 in exec_normal_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:6429:3\n    #6 0x73ff27 in ex_normal /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:6361:7\n    #7 0x7316ed in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #8 0x72925b in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2275:7\n    #9 0x72400a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:584:20\n    #10 0x9cbc85 in do_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:2036:5\n    #11 0x9ca538 in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:1618:14\n    #12 0x9ca41e in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:1626:3\n    #13 0x7316ed in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #14 0x72925b in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2275:7\n    #15 0x72400a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:584:20\n    #16 0x726921 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:287:10\n    #17 0x826e2b in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1807:5\n    #18 0x821a00 in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:534:5\n    #19 0x7f7a1c520082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n    #20 0x466f8d in _start (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.8.3-ASAN+0x466f8d)\n\nAddressSanitizer can not provide additional info.\nSUMMARY: AddressSanitizer: SEGV /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:1747:43 in do_mouse\n==11414==ABORTING\n\n\n\nCommand:\n./nvim-0.7.0 -u NONE -i NONE -n -m -X -V20 -e -s -S poc -c :qa!\n\nOutput:\nExecuting: augroup nvim_terminal\n\nExecuting: autocmd BufReadCmd term://* ++nested if !exists('b:term_title')|call termopen(matchstr(expand(\"\"), '\\c\\mterm://\\%(.\\{-}//\\%(\\d\\+:\\)\\?\\)\\?\\zs.*'), {'cwd': expand(get(matchlist(expand(\"\"), '\\c\\mterm://\\(.\\{-}\\)//'), 1, ''))})|endif\n\nExecuting: augroup END\n\nExecuting: augroup nvim_cmdwin\n\nExecuting: autocmd! CmdwinEnter [:>] syntax sync minlines=1 maxlines=1\n\nExecuting: augroup END\n\nExecuting: so poc\n\nline 0: sourcing \"poc\"\nline 1: tabnew\n\nline 1: unlet! b:keymap_name\n\nline 2: se mouse=a\n\nline 3: fu C00000xpr()\n\nline 6: nn< C00000xpr()\n\nline 7: norm<\n\ncalling function C00000xpr()\n\nline 1: retu\"\\\"\n\nfunction C00000xpr returning '<80>,'\n\ncontinuing in /home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-2980/CVE-2022-2980\nAddressSanitizer:DEADLYSIGNAL\n=================================================================\n==11673==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000004 (pc 0x000000c510f6 bp 0x7ffdf7053720 sp 0x7ffdf7052860 T0)\n==11673==The signal is caused by a READ memory access.\n==11673==Hint: address points to the zero page.\n    #0 0xc510f6 in do_mouse /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:1713:43\n    #1 0xc8cb6a in nv_mouse /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:3476:9\n    #2 0xc69241 in normal_execute /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:1166:3\n    #3 0xc65b56 in normal_cmd /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:7645:9\n    #4 0x96add0 in exec_normal /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:8743:5\n    #5 0x96ab16 in exec_normal_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:8726:3\n    #6 0x98360a in ex_normal /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:8658:7\n    #7 0x942784 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1972:5\n    #8 0x934ab2 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:595:20\n    #9 0x928fcf in do_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2086:5\n    #10 0x926742 in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:1678:14\n    #11 0x9267c0 in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:1659:3\n    #12 0x942784 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1972:5\n    #13 0x934ab2 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:595:20\n    #14 0x938453 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:279:10\n    #15 0xb234ce in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1846:5\n    #16 0xb18d4f in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:520:5\n    #17 0x7f835966e082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n    #18 0x460f7d in _start (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.7.0-ASAN+0x460f7d)\n\nAddressSanitizer can not provide additional info.\nSUMMARY: AddressSanitizer: SEGV /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:1713:43 in do_mouse\n==11673==ABORTING\n\n\n\n\nCommand:\n./nvim-0.3.0 -u NONE -i NONE -n -m -X -V20 -e -s -S poc -c :qa!\n\nOutput:\nline 0: so poc\n\nline 0: sourcing \"poc\"\nline 1: tabnew\n\nline 1: unlet! b:keymap_name\n\nline 2: se mouse=a\n\nline 3: fu C00000xpr()\n\nline 6: nn< C00000xpr()\n\nline 7: norm<\n\ncalling function C00000xpr()\n\nline 1: retu\"\\\"\n\nfunction C00000xpr returning '<80>,'\n\ncontinuing in /home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-2980/CVE-2022-2980\nAddressSanitizer:DEADLYSIGNAL\n=================================================================\n==11515==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000004 (pc 0x000000a6110a bp 0x7ffc0e647870 sp 0x7ffc0e646a40 T0)\n==11515==The signal is caused by a READ memory access.\n==11515==Hint: address points to the zero page.\n    #0 0xa6110a in do_mouse /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:2385:43\n    #1 0xa99d5a in nv_mouse /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:4022:9\n    #2 0xa7508c in normal_execute /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:1137:3\n    #3 0xa71b46 in normal_cmd /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:7993:9\n    #4 0x810a29 in exec_normal /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:8213:5\n    #5 0x810776 in exec_normal_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:8196:3\n    #6 0x82d61a in ex_normal /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:8110:7\n    #7 0x7f7008 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2238:5\n    #8 0x7e584e in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:602:20\n    #9 0x7db169 in do_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2973:3\n    #10 0x7d9348 in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2718:14\n    #11 0x7d93c0 in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2699:3\n    #12 0x7f7008 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2238:5\n    #13 0x7e584e in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:602:20\n    #14 0x7e91f3 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:278:10\n    #15 0x97c7a7 in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1664:5\n    #16 0x974315 in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:515:5\n^[[A    #17 0x7f1453791082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n    #18 0x44ed5d in _start (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.3.0-ASAN+0x44ed5d)\n\nAddressSanitizer can not provide additional info.\nSUMMARY: AddressSanitizer: SEGV /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:2385:43 in do_mouse\n==11515==ABORTING", "creation_timestamp": "2026-09-20T02:40:29.220305Z"}]}