Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added yesterday4 views

OliveTin OS Command Injection via Custom regex: Argument Type Bypassing Shell Safety Check

Summary OliveTin's checkShellArgumentSafety function maintains a blocklist of argument types unsafe for Shell mode actions, but does not include regex:-prefixed types. Because regex: support was added independently via typeSafetyCheckRegex, any Shell mode action using a regex:-typed argument...

6.6CVSS6.7AI score0.00995EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder