write-ups

• RCE in Github Desktop <v2.9.4
• RCE via gh run download (GitHub CLI)
• Claude Code: unsandboxed code execution from prompt injection via .git worktree confusion — CVE-2026-55607
• Cursor: sandbox bypass to code execution from prompt injection via git .git/commondir
• Oracle Autonomous AI Database: OS command execution as oracle via ORDS DataPump file_name → SQLcl HOST (ADBS-26.2.4.2)