CVE-2026-46571

A flaw was found in ntfs-3g. This vulnerability allows an attacker to read sensitive data from process memory, resulting in information disclosure, by supplying a maliciously crafted NTFS filesystem image. When the system attempts to inspect a corrupted file within the image, an out-of-bounds rea...

Linux Distros Unpatched Vulnerability : CVE-2026-84838

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in rpmuncompress. This command injection vulnerability allows a local attacker to execute arbitrary commands. This occurs when rpmuncompress...

CVE-2026-79992

A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing maliciously crafted filenames. This occurs because TRAMP concatenates login arguments without proper sanitization, which are then passed to a local shell. Successful exploitation could lead to arbitra...

Linux Distros Unpatched Vulnerability : CVE-2026-79992

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing maliciously crafted filenames. This occurs because TRAMP...

[SECURITY] [DSA 6439-1] zip security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6439-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 14, 2026 https://www.debian.org/security/faq -...

PhpSpreadsheet SSRF Code Execution

The vulnerability of the functions File::prohibitWrappers and IOFactory::load in the PHP spreadsheet library PhpSpreadsheet is related to deficiencies in the deserialization mechanism when processing the parameter filename. Exploiting this vulnerability can allow an attacker to perform an SSRF...

Linksys FGW3000-AH Wi-Fi Router Command Execution

The vulnerability of the controlpanelsw function in the /cgi-bin/sysconf.cgi script of the Linksys FGW3000-AH and FGW3000-HK Wi-Fi routers is related to incorrect elimination of special elements in the output data when processing the parameter filename. Exploiting this vulnerability allows an...

CVE-2019-14021

Possible buffer overrun when processing EFS filename and payload sent over diag interface due to lack of check for filename length and payload size received in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in...

SUSE CVE-2005-4601

The delegate code in ImageMagick 6.2.4.5-0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in a filename that is processed by the display command...

PT-2017-6720

Name of the Vulnerable Software and Affected Versions xzgrep versions prior to 5.2.0 Description The issue allows remote attackers to execute arbitrary code by having a user run xzgrep on a crafted file name, due to improper processing of file names containing semicolons. Recommendations For...

Tryton directory traversal

Directory traversal on filename processing in server response parsing...

SmartFTP Filename Processing Unspecified Vulnerability

SmartFTP Client is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SmartFTP Filename Processing Unspecified Vulnerability

This host is installed with SmartFTP Client and is prone to unspecified vulnerability. OpenVAS Vulnerability Test $Id: gbsmartftpclientfilenamesunspecifiedvuln.nasl 7029 2017-08-31 11:51:40Z teissa $ SmartFTP Filename Processing Unspecified Vulnerability Authors: Antu Sanadi Copyright: Copyright ...

dTunes 2.72 - Filename Processing Local Format String (PoC)

dTunes 2.72 - Filename Processing Local Format String PoC !/usr/bin/perl dTunes 2.72 local format string PoC filename processing TheLeader, GSOG2009 st0p hotmail sp4m com ShoutZ to the wonderful ppl over at forums.hacking.org.il = Copy the file over to your device on /var/mobile/Library/Downloads...

dTunes 2.72 (Filename Processing) Local Format String PoC

Exploit for unknown platform in category dos / poc ========================================================= dTunes 2.72 Filename Processing Local Format String PoC ========================================================= !/usr/bin/perl dTunes 2.72 local format string PoC filename processing...

dTunes 2.72 (Filename Processing) Local Format String PoC

No description provided by source. !/usr/bin/perl dTunes 2.72 local format string PoC filename processing TheLeader, GSOG2009 st0p hotmail sp4m com ShoutZ to the wonderful ppl over at forums.hacking.org.il = Copy the file over to your device on /var/mobile/Library/Downloads/ and attempt playing...

Debian Security Advisory DSA 1440-1 (inotify-tools)

The remote host is missing an update to inotify-tools announced via advisory DSA 1440-1. OpenVAS Vulnerability Test $Id: deb14401.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1440-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian DSA-1440-1 : inotify-tools - buffer overflow

It was discovered that a buffer overflow in the filename processing of the inotify-tools, a command-line interface to inotify, may lead to the execution of arbitrary code. This only affects the internal library and none of the frontend tools shipped in Debian. The old stable distribution sarge do...

DSA-1440-1 inotify-tools

Bulletin has no description...

CVE-2007-5538: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Centralized TFTP File Locator Service in Cisco Unified Communications Manager CUCM, formerly CallManager 5.1 before 5.13, and Unified CallManager 5.0, allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors involving the...