Lack of sanitization throughout Netrw can lead to arbitrary code execution upon opening a directory with a crafted name.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/68246/netrw-exec.txt
Source: https://packetstormsecurity.com/files/68246/netrw-exec.txt.html