8 matches found
curl: Windows filename sanitizer misses Unicode COM/LPT reserved device names
Hi all, I found a way for a server-selected Windows filename to bypass curl's reserved DOS device-name sanitizer. With curl -O -J, a Content-Disposition filename such as COM¹, COM², COM³, LPT¹, LPT², or LPT³ is left unchanged, even though Windows treats all six as reserved device names. Curl...
Malicious code in @zalastax/nolb-com1 (npm)
The package @zalastax/nolb-com1 was found to contain malicious code...
MAL-2025-10966 Malicious code in @zalastax/nolb-com1 (npm)
The package @zalastax/nolb-com1 was found to contain malicious code...
AZL-37425 CVE-2023-45284 affecting package golang for versions less than 1.21.6-1
On Windows, The IsLocal function does not correctly detect reserved device names in some cases. Reserved names followed by spaces, such as "COM1 ", and reserved names "COM" and "LPT" followed by superscript 1, 2, or 3, are incorrectly reported as local. With fix, IsLocal now correctly reports the...
AZL-78944 CVE-2023-45284 affecting package golang 1.26.7-1
On Windows, The IsLocal function does not correctly detect reserved device names in some cases. Reserved names followed by spaces, such as "COM1 ", and reserved names "COM" and "LPT" followed by superscript 1, 2, or 3, are incorrectly reported as local. With fix, IsLocal now correctly reports the...
Panasonic FPG-COM1 Communications Adapter Detection
Binary data 755291.prm...
VMware Workstation - 'vprintproxy.exe' JPEG2000 Images Multiple Memory Corruptions
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=850 As already discussed in a number of reports in this tracker 285, 286, 287, 288, 289, 292, VMware Workstation current version 12.1.1 build-3770994 ships with a feature called "Virtual Printers", which enables the virtualized...
