Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A vulnerability was identified in vim 9.1.0000. Affected is the function __memmove_avx_unaligned_erms of the file memmove-vec-unaligned-erms.S. The manipulation leads to memory corruption. The attack needs to be performed locally. The exploit is publicly available and might be used. Some users are not able to reproduce this. One of the users mentions that this appears not to be working, "when coloring is turned on".

CVE-2025-9389 is a medium-severity memory corruption vulnerability identified in the text editor vim, specifically version 9.1.0000. The flaw exists in the function __memmove_avx_unaligned_erms within the assembly source file memmove-vec-unaligned-erms.S, which handles memory movement operations optimized with AVX instructions. The vulnerability arises from improper manipulation of memory during these operations, leading to potential memory corruption. This could cause unexpected behavior such as crashes or data corruption within the vim process. Exploitation requires local access and low privileges (PR:L), meaning an attacker must have the ability to execute code or commands on the target system but does not need elevated privileges. No user interaction is required, and the attack complexity is low, indicating that exploitation is relatively straightforward once local access is obtained. The vulnerability does not impact confidentiality, integrity, or availability beyond the local scope and does not propagate to other systems. Some users have reported difficulty reproducing the exploit, particularly when syntax coloring is enabled in vim, suggesting that certain runtime conditions or configurations may mitigate or affect exploitability. No public patches have been linked yet, and no known exploits are confirmed in the wild, although a public proof-of-concept exploit exists. The CVSS 4.0 base score is 4.8, reflecting a medium severity rating primarily due to the local attack vector and limited impact scope.

Detailed information about CVE-2025-9389: Memory Corruption in vim affecting null vim. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-9389: Memory Corruption in vim - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-9389: Memory Corruption in vim

Threats Tagged 'cve-2025-9389'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-9389'

Lead Pen Test Professional