When Filenames Become Attack Surfaces: Weaponizing NASA's CFITSIO Extended Filename Syntax