CVE-2026-25039

Summary (CVE-2026-25039): Parsec, a cloud-based file sharing app, does not sanitize the workspace name when creating a mountpoint in Windows, allowing a UNC path to be used as the workspace name. The root cause is that UNC paths may contain backslashes, and if the UNC target is invalid or unavail...

PT-2022-16734

Name of the Vulnerable Software and Affected Versions ACEweb Online Portal version 3.5.065 Description The issue allows unauthenticated SMB hash capture via UNC. By specifying the UNC file path of an external SMB share when uploading a file, an attacker can induce the victim server to disclose th...

CVE-2017-14971

Infocus Mondopad 2.2.08 is vulnerable to a Hashed Credential Disclosure vulnerability. The attacker provides a crafted Microsoft Office document containing a link that has a UNC pathname associated with an attacker-controller server. In one specific scenario, the attacker provides an Excel...