Skip to content
OpenAdvisories

Product · khyrenz

parseusbs

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.8
    CVE-2026-40030

    parseusbs < 1.9 Command Injection via Volume Path Argument

    parseusbs before 1.9 contains an OS command injection vulnerability where the volume listing path argument (-v flag) is passed unsanitized into an os.popen() shell command with ls, allowing arbitrary command injection via crafted volume path arguments contain…

    khyrenz parseusbs
  • High 7.8
    CVE-2026-40029

    parseusbs < 1.9 Command Injection via Crafted LNK Filename

    parseusbs before 1.9 contains an OS command injection vulnerability in parseUSBs.py where LNK file paths are passed unsanitized into an os.popen() shell command, allowing arbitrary command execution via crafted .lnk filenames containing shell metacharacters. …

    khyrenz parseusbs