CVE-2025-37161

A vulnerability in the web-based management interface of affected products could allow an unauthenticated remote attacker to cause a denial of service. Successful exploitation could allow an attacker to crash the system, preventing it from rebooting without manual intervention and disrupting...

CVE-2025-37161

CVE-2025-37161 describes an unauthenticated remote denial-of-service in the web-based management interface of affected products. Exploitation could crash the system and prevent reboot without manual intervention, disrupting network operations. The documents consistently specify a DoS impact but d...

METZ CONNECT EWIO2

SUMMARY A critical authentication bypass in EWIO-2 allows unauthenticated attackers with network access to gain administrative control over the device. Once compromised, an attacker can change configurations, manipulate data, disrupt services, and potentially render the device non-functional. 2...

CVE-2025-12524 Post Type Switcher <= 4.0.0 - Insecure Direct Object Reference to Authenticated (Author+) Post Type Change

The Post Type Switcher plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 4.0.0 due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Author-level access and above, to modify the post type...

EUVD-2025-197903

An uncontrolled resource consumption vulnerability in the web server of Zyxel DX3301-T0 firmware version 5.50ABVY.6.3C0 and earlier could allow an attacker to perform Slowloris‑style denial‑of‑service DoS attacks. Such attacks may temporarily block legitimate HTTP requests and partially disrupt...

Squid Proxy Heap Buffer Overflow DoS

The vulnerability of the asnbuildobjid function in the Squid proxy server is related to errors in data boundary checking during the processing of ASN.1-encoded long OID identifiers for SNMP. Exploiting this vulnerability can allow an attacker to cause service failures...

PT-2025-47243

Name of the Vulnerable Software and Affected Versions Post Type Switcher plugin for WordPress versions up to and including 4.0.0 Description The software contains an Insecure Direct Object Reference issue because of missing validation on a user-controlled key. Authenticated attackers with...

PT-2025-47396

Name of the Vulnerable Software and Affected Versions Affected versions not specified Description A flaw exists in the web-based management interface that may allow a remote attacker to cause a denial of service. Exploitation could lead to a system crash, requiring manual reboot and potentially...

CVE-2025-13165 Digiwin｜EasyFlow GP - Denial of service

EasyFlow GP developed by Digiwin has a Denial of service vulnerability, allowing unauthenticated remote attackers to send specific requests that result in denial of web service...

CVE-2025-13165

CVE-2025-13165 concerns Digiwin EasyFlow GP. The vulnerability is a Denial of Service via unauthenticated remote requests that can crash or deny the web service. The initial records attribute a high impact (availability) with network access and no privileges required, but exploitation details are...

Linux device support driver Heap Buffer Overflow DoS

The vulnerability of the dwc3gadgetfreeendpoints function in the drivers/usb/dwc3/gadget.c module of the Linux device support driver framework is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

TrueConf Server Command Execution DoS

The vulnerability of the TrueConf Server software is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely and cause service failures...

Zyxel Router URL Parser Code Execution

The vulnerability of the URL Parser component in the Zyxel router microprogramming software web server involves copying buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause service interruptions or execute arbitrary code by sending...

Linux kernel Ethernet adapter DoS

The vulnerability of the i40eclearinterruptScheme function in the drivers/net/ethernet/intel/i40e/i40emain.c file of the Linux kernel’s Ethernet driver module involves the use of an uninitialized resource. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux fs/ubifs/super.c Heap Buffer Overflow DoS

The vulnerability of the ubifsallocinode function in the fs/ubifs/super.c module of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Offensive Tool Determination Strategy R.I.D.D.L.E. + (C)

Intentional threats are a major risk factor related to vulnerabilities in critical infrastructure assets, and an accurate risk assessment is necessary to analyze threats, assess vulnerabilities, and evaluate potential impacts on assets and systems. This research proposes a methodology that can be...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the intoreg function in the drivers/hwmon/nct6775.c module of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel CAN driver Heap Buffer Overflow DoS

The vulnerability of the mcanpciprobe function in the drivers/net/can/mcan/mcanpci.c file of the Linux CAN device support driver is related to the lack of memory release after the effective lifespan of the function. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel dm_mq_queue_rq Heap Buffer Overflow DoS

The vulnerability of the dmmqqueuerq function in the drivers/md/dm-rq.c module of the support for multiple device types RAID and LVM in the Linux kernel is related to improper resource management. Exploiting this vulnerability can allow an attacker to cause service failures...

j1939_netdev_start() CAN Bus DoS

The vulnerability of the j1939netdevstart function in the net/can/j1939/main.c module, which supports J1939 CAN interfaces in Linux kernels, is related to incorrect resource locking. Exploiting this vulnerability could allow an attacker to cause a service failure...