atlas-tj-actions-poc

CVE-2025-54416: إثبات المفهوم لثغرة حقن الأوامر في tj-actions/branch-names يُوضح هذا المستودع CVE-2025-54416 ، وهي ثغرة حرجة في حقن الأوامر في tj-actions/branch-names تؤثر على أكثر من 5,000 مستودع عام. الثغرة يستخدم إجراء GitHub tj-actions/branch-names الإصدارات "$GITHUBOUTPUT" سلسلة الهجوم 1. ين...

Exploit for CVE-2025-54416

CVE-2025-54416: tj-actions/branch-names Command Injection PoC...

CVE-2025-54416

tj-actions/branch-names is a Github actions repository that contains workflows to retrieve branch or tag names with support for all events. In versions 8.2.1 and below, a critical vulnerability has been identified in the tj-actions/branch-names' GitHub Action workflow which allows arbitrary comma...

PT-2025-30953

Name of the Vulnerable Software and Affected Versions: tj-actions/branch-names versions 8.2.1 and below Description: A critical command injection vulnerability exists in the tj-actions/branch-names GitHub Action workflow. This flaw stems from inconsistent input sanitization and unescaped output,...

CVE-2023-49291 Improper Sanitization of Branch Name Leads to Arbitrary Code Injection

tj-actions/branch-names is a Github action to retrieve branch or tag names with support for all events. The tj-actions/branch-names GitHub Actions improperly references the github.event.pullrequest.head.ref and github.headref context variables within a GitHub Actions run step. The head ref variab...