Here are PoC exploits against various editors: http://www.openwall.com/lists/oss-security/2018/03/05/2 http://www.openwall.com/lists/oss-security/2018/03/05/2

Here are PoC exploits against various editors: http://www.openwall.com/lists/oss-security/2018/03/05/2 http://www.openwall.com/lists/oss-security/2018/03/05/2 Even pasting to cat(1) might be insecure. The paste can contain ^D, which will make cat quit; then the rest of the paste will be interpeted by shell.