CVE Vulnerability Catalog

CVE-2025-56568 describes an assertion failure vulnerability in the PCO (Protocol Configuration Options) parser in the SMF (Session Management Function) component of Open5GS before version 2.7.5. This allows remote attackers to cause denial of service via specially crafted NGAP messages containing malformed length fields in protocol configuration data.

An issue in open5gs v.2.7.3 allows a remote attacker to cause a denial of service via a crafted PDU Session Modification Request.

The FSx Windows File Server volume mounting component in Amazon ECS Agent before version 1.103.0 has improper neutralization of inputs used in OS commands. This may allow a remote authenticated threat actor to execute shell commands with SYSTEM privileges on the underlying host.

In version 4.9.0 of Chartbrew, a vulnerability allows low-privileged attackers to access data from other projects within the same team. This vulnerability enables reading, executing, creating, updating, and deleting datasets and data requests that the attacker should not have access to.

In version 4.9.0 of Chartbrew, a vulnerability exists that allows access to the POST /api/chart/:chart_id/query endpoint without authentication. An attacker who knows the chart identifier can trigger a data refresh and access private charts.

In version 4.9.0 of Chartbrew, authenticated users with access to one project can update or delete a SharePolicy record belonging to another project. The issue arises from the lack of verification that policy_id belongs to the specified project.

In version 4.9.0 of Chartbrew, there is a vulnerability that allows public access to chart data, even if they are hidden. This issue arises from improper verification of access permissions for charts in public projects.

An XXE vulnerability in the /designer/loadReport endpoint of SpringBlade v4.8.0 allows authenticated attackers to execute arbitrary code via injecting a crafted payload.

JeeSite version 5.15.1 contains a vulnerability in the fileEntityId parameter in the /a/file/upload endpoint, allowing authenticated attackers with file upload permissions to perform a path traversal attack and write arbitrary files with whitelisted suffixes to arbitrary filesystem locations.

A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may cause information disclosure or denial of service.

CryptPad version 2025.3.1 allows unbounded WebSocket frame flood. A remote, unauthenticated attacker can significantly degrade or deny service for all users of a CryptPad instance.

Weaver (Fanwei) E-cology w wersjach 9.5 przed 10.52 zawiera podatność na odczyt dowolnych plików w interfejsie XmlRpcServlet na końcówce XML-RPC. Umożliwia to nieautoryzowanym atakującym zdalne odczytywanie plików, podając ścieżki plików do metod WorkflowService.getAttachment i WorkflowService.LoadTemplateProp.

There is an improper input validation vulnerability in MOVEit Automation that allows for privilege escalation.

The web management interface of the U-SPEED N300 Router V1.0.0 lacks CSRF protection mechanisms like anti-CSRF tokens or strict Origin/Referer validation. An attacker can craft a malicious webpage that sends forged HTTP requests to configuration endpoints. If an authenticated administrator visits the page, the browser includes the valid session cookie, allowing unauthorized administrative actions.

Wersja 2.1.5 systemu Krayin CRM zawiera lukę, która umożliwia zdalnemu atakującemu wykonanie dowolnego kodu poprzez funkcję komponowania wiadomości e-mail. Problem został naprawiony w wersji 2.1.6.

The U-SPEED N300 router version V1.0.0 does not implement rate limiting or account lockout protections on the /api/login endpoint. This allows an attacker on the local network to perform unlimited authentication attempts, enabling brute-force attacks against the administrator account and potential unauthorized access to the router management interface.

A denial-of-service vulnerability exists in the U-SPEED N300 V1.0.0 wireless router. By sending a large number of concurrent HTTP requests to random or non-existent endpoints on the web management interface, an attacker can exhaust system resources in the embedded Boa HTTP server. This causes the router web interface to become unresponsive and may require manual reboot to restore normal operation.

The Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router V1.0.0 is vulnerable to Denial of Service via the boa web server URI handler. A high-volume flood of HTTP GET requests to non-existent URIs exhausts critical system resources, including file descriptors and memory buffers.

A Cross-Site Request Forgery (CSRF) vulnerability exists in the web management interface of the Dbit N300 T1 Pro wireless router V1.0.0 due to missing anti-CSRF tokens and Origin/Referer validation. An attacker can trick an authenticated administrator into visiting a malicious page that sends forged requests to configuration endpoints like /api/setWlan.

This CVE record was assigned not following CNA/CVE rules and is not considered a valid vulnerability by the Pallets Click project. The original CVE record description is preserved below: Pallets Click, versions 8.3.2 and below, contain a command injection vulnerability in the click.edit() function, allowing attackers to pass arbitrary OS commands from an unprivileged account.