Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 15

Export CSV
CVE-2025-41688

High Privilege RCE via LUA Sandbox Escape

A high privileged remote attacker can execute arbitrary OS commands using an undocumented method allowing to escape the implemented LUA sandbox.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Helmholz Mbconnectline
Products
Rex 200 Rex 300 Mbnet Hw1 and 1 more
CVE-2025-41673

Remote Command Injection in send_sms Action Due to Improper Input Neutralization

A high privileged remote attacker can execute arbitrary system commands via POST requests in the send_sms action due to improper neutralization of special elements used in an OS command.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Helmholz Mb Connect Line Mbconnectline
Products
Rex 100 Mbnet.mini Mbnet.mini and 1 more
CVE-2025-41674

Remote Command Injection in diagnostic Action Due to Improper Input Neutralization

A high privileged remote attacker can execute arbitrary system commands via POST requests in the diagnostic action due to improper neutralization of special elements used in an OS command.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Mbconnectline
Products
Mbnet.mini Mbnet.mini Firmware
CVE-2025-41675

Remote Command Injection via GET in Cloud Server Communication Script Due to Improper Input Neutralization

A high privileged remote attacker can execute arbitrary system commands via GET requests in the cloud server communication script due to improper neutralization of special elements used in an OS command.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Helmholz Mb Connect Line Mbconnectline
Products
Rex 100 Mbnet.mini Mbnet.mini and 1 more
CVE-2025-41678

SQL Injection via POST Requests Allowing Configuration Database Manipulation

A high privileged remote attacker can alter the configuration database via POST requests due to improper neutralization of special elements used in a SQL statement.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Mbconnectline
Products
Mbnet.mini Mbnet.mini Firmware
CVE-2025-41679

Unauthenticated Buffer Overflow in Conftool Service Leading to Denial of Service

An unauthenticated remote attacker could exploit a buffer overflow vulnerability in the device causing a denial of service that affects only the network initializing wizard (Conftool) service.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Helmholz Mb Connect Line Mbconnectline
Products
Rex 100 Mbnet.mini Mbnet.mini and 1 more
CVE-2025-41681

Persistent Cross-Site Scripting via POST Requests Due to Improper Neutralization of Input

A high privileged remote attacker can gain persistent XSS via POST requests due to improper neutralization of special elements used to create dynamic content.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Mbconnectline
Products
Mbnet.mini Mbnet.mini Firmware