Tootfinder

Opt-in global Mastodon full text search. Join the index!

@adlerweb@social.adlerweb.info
2025-12-03 16:12:35

Uff. Wenn man #curl in #powershell nutzt (aka: nicht das echte curl, sondern ein Wrapper von #Microsoft), dann wird zurückgegebenes Javascript einfach ohne Rückfrage ausgeführt. Was kan…

curl disclosed on HackerOne: runs javascript on powershell when it...
On windows, if I run a curl on powershell for a script that should show (script)alert(1)(/script) it just executes the script when it shouldn't. I did not use AI to find or report this bug. ## Affected version on CMD I ran curl --version `curl 8.16.0 (Windows) libcurl/8.16.0 Schannel zlib/1.3.1 WinIDN` on powershell it didn't recognise the --version flag. I haven't installed any specific curl...

@kurtsh@mastodon.social
2025-12-22 19:36:44

SharePoint admins might find this useful.
#sharepoint #Microsoft #microsoft365 #powershell