Lucene search
+L

1312427 matches found

Hacker One
Hacker One
•added 2026/09/18 6:05 p.m.•4 views

curl: Windows filename sanitizer misses Unicode COM/LPT reserved device names

Hi all, I found a way for a server-selected Windows filename to bypass curl's reserved DOS device-name sanitizer. With curl -O -J, a Content-Disposition filename such as COM¹, COM², COM³, LPT¹, LPT², or LPT³ is left unchanged, even though Windows treats all six as reserved device names. Curl...

5.9AI score
SaveExploits0
Rows per page
Query Builder