tesla-security-research

테슬라 보안 연구 Tesla Model 3/Y 인포테인먼트 시스템Intel Atom MCU, Linux 4.14.235에 대한 취약점 연구로, Bugcrowd를 통해 Tesla에 책임감 있게 제보되었습니다. 생산 중인 Tesla Model 3에서 Tesla의 ODIN 진단 인터페이스의 명령어 주입 취약점을 통해 지속적인 루트 액세스를 획득했습니다CVE-2022-42008. 그로부터 펌웨어 업데이트 이후에도 지속되는 지속성 방법CVE-2022-42005, CVE-2022-42006과 월 보험료를 $130에서 $83으로 직접 낮춘...

GHSA-X6JW-M9V5-85VH simple-git unsafe-operation guard does not block trailer command configuration

Affected product The default blockUnsafeOperationsPlugin in simple-git when an application permits untrusted values to reach SimpleGitOptions.config or Git inline configuration arguments such as -c =. Summary trailer..cmd is not recognized as unsafe by the default guard. Therefore, a configured...

simple-git unsafe-operation guard does not block trailer command configuration

Affected product The default blockUnsafeOperationsPlugin in simple-git when an application permits untrusted values to reach SimpleGitOptions.config or Git inline configuration arguments such as -c =. Summary trailer..cmd is not recognized as unsafe by the default guard. Therefore, a configured...

EUVD-2026-89334

simple-git unsafe-operation guard does not block trailer command configuration...

NPM: simple-git unsafe-operation guard does not block trailer command configuration

NPM: simple-git unsafe-operation guard does not block trailer command configuration vulnerability discovered by ? in WordPress Npm simple-git versions = 3.15.0, 4.0.1...

GHSA-G4WM-2VF7-VFGR simple-git allows command execution through unblocked Git configuration includes

Summary An OS command injection vulnerability in git.clone allows any application that flows attacker-influenced data into customArgs to execute arbitrary code. simple-git 3.36.0 current latest on npm ships without any include.path entry in the blockUnsafeOperationsPlugin denylist. Passing -c...

EUVD-2026-89332

simple-git allows command execution through unblocked Git configuration includes...

NPM: simple-git allows command execution through unblocked Git configuration includes

NPM: simple-git allows command execution through unblocked Git configuration includes vulnerability discovered by ? in WordPress Npm simple-git versions = 3.36.0...

simple-git allows command execution through unblocked Git configuration includes

Summary An OS command injection vulnerability in git.clone allows any application that flows attacker-influenced data into customArgs to execute arbitrary code. simple-git 3.36.0 current latest on npm ships without any include.path entry in the blockUnsafeOperationsPlugin denylist. Passing -c...

GHSA-858H-WHJF-MVG5 simple-git: unsafe-operations plugin bypass via git long-option abbreviation (--receive-p/--exe) -> command execution (residual of CVE-2026-28291)

simple-git's blockUnsafeOperationsPlugin blocks dangerous git options --upload-pack/--receive-pack/--exec/... unless the consumer opts in via unsafe:allowUnsafePack:true. Detection @simple-git/argv-parser detectVulnerableFlags matches the parsed flag NAME against literal-spelling patterns:...

NPM: simple-git: unsafe-operations plugin bypass via git long-option abbreviation (--receive-p/--exe) -> command execution (residual of CVE-2026-28291)

NPM: simple-git: unsafe-operations plugin bypass via git long-option abbreviation --receive-p/--exe - command execution residual of CVE-2026-28291 vulnerability discovered by ? in WordPress Npm simple-git versions = 3.36.0...

EUVD-2026-89333

simple-git: unsafe-operations plugin bypass via git long-option abbreviation --receive-p/--exe - command execution residual of CVE-2026-28291...

simple-git: unsafe-operations plugin bypass via git long-option abbreviation (--receive-p/--exe) -> command execution (residual of CVE-2026-28291)

simple-git's blockUnsafeOperationsPlugin blocks dangerous git options --upload-pack/--receive-pack/--exec/... unless the consumer opts in via unsafe:allowUnsafePack:true. Detection @simple-git/argv-parser detectVulnerableFlags matches the parsed flag NAME against literal-spelling patterns:...

CVE-2022-36804

CVE-2022-36804 최근 Sangfor 보안 팀이 발견한 정보에 따르면, Bitbucket Server 및 Bitbucket Data Center 구성 요소에는 명령 주입 취약점이 있습니다. 공격자는 악성 HTTP 요청을 제출하여 임의 코드를 실행할 수 있으며, Bitbucket 비공개 또는 공개 저장소에 대한 읽기 권한이 있거나 쓰기 권한이 있는 공개 저장소에 접근할 수 있는 경우 최종적으로 서버에 대한 접근 권한을 얻을 수 있습니다. 이 저장소에는 이 취약점에 대한 페이로드 파일과 전체 POC가 포함되어 있습니다...

CVE-2007-2447_Samba_3.0.25rc3

CVE-2007-2447 '사용자 이름' 매핑 스크립트' 명령 실행 3.0.0 - 3.0.25rc3 3.0.20 - 3.0.25rc3 AMRIUNIX...

@nx/docker: OS command injection in the @nx/docker release pipeline

Summary The @nx/docker release pipeline builds its docker invocations as shell command strings, interpolating release.docker.repositoryName and registryUrl from Nx configuration into them. Because those strings are handed to /bin/sh -c, a crafted repository or registry name executes as a command...

EUVD-2026-91767

@nx/docker: OS command injection in the @nx/docker release pipeline...

GHSA-6VC5-VF29-FFR2 @nx/docker: OS command injection in the @nx/docker release pipeline

Summary The @nx/docker release pipeline builds its docker invocations as shell command strings, interpolating release.docker.repositoryName and registryUrl from Nx configuration into them. Because those strings are handed to /bin/sh -c, a crafted repository or registry name executes as a command...

NPM: Nx: OS command injection via git revisions and remote refs

NPM: Nx: OS command injection via git revisions and remote refs vulnerability discovered by ? in WordPress Npm nx versions = 14.0.0, 22.7.8...

Nx: OS command injection via git revisions and remote refs

Summary Nx core builds several git invocations as shell command strings with untrusted values interpolated into them, so a value that should be a git revision or ref is parsed by /bin/sh instead. Two entry points are reachable by an attacker: affected commands, where defaultBase /...