SharpShares

SharpShares Multithreaded C .NET Assembly to enumerate accessible network shares in a domain Built upon djhohnstein's SharpShares project .\SharpShares.exe help Usage: SharpShares.exe /threads:50 /ldap:servers /ou:"OU=Special Servers,DC=example,DC=local" /filter:SYSVOL,NETLOGON,IPC$,PRINT$ /verbo...

CVE-2026-126134

A flaw was found in Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Thunderbird allowed feed subscriptions to file: URLs that point to a network share. If a user was tricked into subscribing to such a URL, Thunderbird connected to the attacker's server when...

CVE-2025-24071_PoCExtra

CVE-2025-24071PoCExtra Alternative CVE-2025-24071PoC Original Code https://github.com/0x6rss/CVE-2025-24071PoC When testing with another similar extension, I tried ".searchconnector-ms" using the same structure, but the issue with the first PoC also affected it. python poc2.py Enter the IP addres...

DEBIAN-CVE-2026-126134

Thunderbird allowed feed subscriptions to file: URLs that point to a network share. If a user was tricked into subscribing to such a URL, Thunderbird connected to the attacker's server when fetching the feed. Windows then sent the user's NTLM credentials to that server. This bug only affects...

SUSE CVE-2026-118177

When looking for calendars in a directory on a server, during account setup or when adding a new network calendar, Thunderbird accepted calendar locations pointing to other servers, local files or network shares. A malicious server, or a network attacker when the lookup used plain HTTP, could mak...

CVE-2026-118180 Matrix homeserver could redirect the chat session to a local file or network share

When logging in to a Matrix account, Thunderbird used the homeserver address provided in the server's login response without validating it. A malicious or compromised homeserver could provide a file: URL, causing Thunderbird to send all further Matrix requests of that session to local files or, o...

CVE-2026-118180

Thunderbird is vulnerable to a flaw where it fails to validate the homeserver address provided during Matrix account login . A malicious or compromised homeserver can provide a file: URL , redirecting subsequent Matrix requests to local files or, on Windows , to an attacker-controlled network sha...

CVE-2026-118177 Calendar discovery accepted local file and remote network share locations

When looking for calendars in a directory on a server, during account setup or when adding a new network calendar, Thunderbird accepted calendar locations pointing to other servers, local files or network shares. A malicious server, or a network attacker when the lookup used plain HTTP, could mak...

CVE-2026-118177

A flaw in Thunderbird allows a malicious server or network attacker (via plain HTTP) to trick the application into subscribing to unintended calendar locations, such as local files, network shares, or external servers. On Windows , this could lead to the leakage of NTLM credentials during every c...

CVE-2026-118178 RSS feed could redirect its subscription to a local file or network share

A remote RSS feed could use the itunes:new-feed-url or newLocation element to permanently change its stored subscription URL to a file: URL. Thunderbird then read that location on every feed update. This allowed a malicious feed, or an attacker able to modify a feed delivered over HTTP, to make...

CVE-2026-118178

The Thunderbird mail client is vulnerable to a flaw where a remote RSS feed can use the itunes:new-feed-url or newLocation element to change its stored subscription URL to a file: URL. This allows a malicious feed or an attacker capable of modifying an HTTP-delivered feed to force Thunderbird to ...

EUVD-2026-111354

When looking for calendars in a directory on a server, during account setup or when adding a new network calendar, Thunderbird accepted calendar locations pointing to other servers, local files or network shares. A malicious server, or a network attacker when the lookup used plain HTTP, could mak...

CVE-2026-118178 RSS feed could redirect its subscription to a local file or network share

A remote RSS feed could use the itunes:new-feed-url or newLocation element to permanently change its stored subscription URL to a file: URL. Thunderbird then read that location on every feed update. This allowed a malicious feed, or an attacker able to modify a feed delivered over HTTP, to make...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack via the subPath symlink resolver in the Windows kubelet. An attacker can obtain the NetNTLMv2 hash of the account running kubelet by supplying a pod volumeMount subPath that is a symbolic link to an attacker-controlled UN...

PT-2026-127206

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 153.6 Thunderbird versions prior to 159 Description Thunderbird accepts calendar locations pointing to external servers, local files, or network shares during account setup or when adding a new network calendar. A...

CVE-2026-76654

An NTLM coercion vulnerability exists on Windows nodes when the subPath supplied in a pod's volumeMounts is set to a symbolic link that points to an attacker-controlled network share. When a kubelet resolves symlinks, it does not reject a target that resolves to a UNC path. As a result, the kubel...

CVE-2026-84579

A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Opening a file referencing a network share may lead to unexpected software execution...

CVE-2026-84579

A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Opening a file referencing a network share may lead to unexpected software execution...

CVE-2026-84579

A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Opening a file referencing a network share may lead to unexpected software execution...

CVE-2026-84579

A logic issue in macOS versions prior to Golden Gate 27 , Sequoia 15.8 , and Tahoe 26.7 can lead to unexpected software execution when opening a file that references a network share. The vulnerability is caused by a logic flaw and has been addressed with improved checks in the updated versions. R...