Could file a CVE with Microsoft then, cause thats kinda what cmd.exe is doing: >... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

lyu07282 3 months ago | parent | context | favorite | on: Cursor 0day: When Full Disclosure Becomes the Only...

Could file a CVE with Microsoft then, cause thats kinda what cmd.exe is doing:

    > git clone git://evil evil
    > cd evil\
    > git status

The last line would execute git.exe from the cloned repo, wouldn't it?

frabera 3 months ago [–]

No, `git` uses the binary in path, to use the repo file it should be `./git.exe`

kubanczyk 3 months ago | [–]

On Linux.

Look for `NoDefaultCurrentDirectoryInExePath` if you want to learn about Windows.

Consider applying for YC's Winter 2027 batch! Applications are open till November 2.
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact