CVE-2025-41677

A high privileged remote attacker can exhaust critical system resources by sending specifically crafted POST requests to the send-mail action in fast succession...

CVE-2025-41676

A high privileged remote attacker can exhaust critical system resources by sending specifically crafted POST requests to the send-sms action in fast succession...

CVE-2025-41677

A high privileged remote attacker can exhaust critical system resources by sending specifically crafted POST requests to the send-mail action in fast succession...

CVE-2025-41678

A high privileged remote attacker can alter the configuration database via POST requests due to improper neutralization of special elements used in a SQL statement...

CVE-2025-41673

A high privileged remote attacker can execute arbitrary system commands via POST requests in the sendsms action due to improper neutralization of special elements used in an OS command...

CVE-2025-41681 Persistent Cross-Site Scripting via POST Requests Due to Improper Neutralization of Input

A high privileged remote attacker can gain persistent XSS via POST requests due to improper neutralization of special elements used to create dynamic content...

CVE-2025-41678 SQL Injection via POST Requests Allowing Configuration Database Manipulation

A high privileged remote attacker can alter the configuration database via POST requests due to improper neutralization of special elements used in a SQL statement...

CVE-2025-41677 Resource Exhaustion via POST Requests to send-mail Action

A high privileged remote attacker can exhaust critical system resources by sending specifically crafted POST requests to the send-mail action in fast succession...

CVE-2025-41677

CVE-2025-41677 describes a resource exhaustion vulnerability in MB CONNECT LINE mbNET.mini (and related Helmholz/mbNET.mini variants) where an attacker with high privileges can remotely exhaust critical system resources by sending specifically crafted POST requests to the send-mail action in rapi...

CVE-2025-41677 Resource Exhaustion via POST Requests to send-mail Action

A high privileged remote attacker can exhaust critical system resources by sending specifically crafted POST requests to the send-mail action in fast succession...

CVE-2025-41676

The CVE-2025-41676 entry describes a resource-exhaustion vulnerability in MB CONNECT LINE mbNET.mini (industrial router) where a high-privilege remote attacker can overwhelm system resources by sending specially crafted POST requests to the send-sms action in rapid succession. Connected sources c...

CVE-2025-41676 Resource Exhaustion via POST Requests to send-sms Action

A high privileged remote attacker can exhaust critical system resources by sending specifically crafted POST requests to the send-sms action in fast succession...

CVE-2025-41676 Resource Exhaustion via POST Requests to send-sms Action

A high privileged remote attacker can exhaust critical system resources by sending specifically crafted POST requests to the send-sms action in fast succession...

PT-2025-30256 · Helmholz +1 · Rex100 +1

Name of the Vulnerable Software and Affected Versions: versions prior to 2025-41681 Description: A high privileged remote attacker can gain persistent cross-site scripting XSS via POST requests due to improper neutralization of special elements used to create dynamic content. Recommendations: At...

CVE-2025-41676: Uncontrolled Resource Consumption

A high privileged remote attacker can exhaust critical system resources by sending specifically crafted POST requests to the send-sms action in fast succession...

CVE-2025-41681: Improper Neutralization of Input During Web Page Generation

A high privileged remote attacker can gain persistent XSS via POST requests due to improper neutralization of special elements used to create dynamic content...

PT-2025-30253 · Fast · Fast

Name of the Vulnerable Software and Affected Versions: versions prior to 2025-41677 Description: A high privileged remote attacker can exhaust critical system resources by sending specifically crafted POST requests to the send-mail action in fast succession. Recommendations: At the moment, there ...

PT-2025-30252 · Sendsms · Sendsms

Name of the Vulnerable Software and Affected Versions: versions prior to 2025-41676 Description: A high privileged remote attacker can exhaust critical system resources by sending specifically crafted POST requests to the send-sms action in fast succession. Recommendations: At the moment, there i...

CVE-2025-41677: Uncontrolled Resource Consumption

A high privileged remote attacker can exhaust critical system resources by sending specifically crafted POST requests to the send-mail action in fast succession...

MB Connect Line mbNET.mini 资源管理错误漏洞

The mbNET.mini from MB CONNECT LINE is an industrial router designed for industrial scenarios and is primarily used to enable secure remote connections to machines and systems. A resource management error vulnerability exists in MB CONNECT LINE mbNET.mini that originates from exhausting critical...