360 matches found
CVE-2024-48645
In Minecraft mod "Command Block IDE" up to and including version 0.4.9, a missing authorization CWE-862 allows any user to modify "function" files used by the game when installed on a dedicated server...
CVE-2024-48645
In Minecraft mod "Command Block IDE" up to and including version 0.4.9, a missing authorization CWE-862 allows any user to modify "function" files used by the game when installed on a dedicated server...
CVE-2024-48645
CVE-2024-48645 affects the Minecraft mod Command Block IDE (versions up to and including 0.4.9). The root cause is missing authorization (CWE-862) that lets any user on a dedicated server modify the mod’s game function files. Multiple connected records corroborate the basic vulnerability details ...
CVE-2024-48645
In Minecraft mod "Command Block IDE" up to and including version 0.4.9, a missing authorization CWE-862 allows any user to modify "function" files used by the game when installed on a dedicated server...
CVE-2024-48645
In Minecraft mod "Command Block IDE" up to and including version 0.4.9, a missing authorization CWE-862 allows any user to modify "function" files used by the game when installed on a dedicated server...
Cross-Site Scripting (XSS)
dev-lancer/minecraft-motd-parser is vulnerable to cross-site scripting XSS. The vulnerability is due to the lack of proper input validation and sanitization in the HtmlGenerator class, allowing attackers to inject malicious HTML into a web page through a malformed Minecraft server MOTD...
GHSA-Q898-FRWQ-F3QP Minecraft MOTD Parser's HtmlGenerator vulnerable to XSS
Summary The HtmlGenerator class is subject to potential cross-site scripting XSS attack through a parsed malformed Minecraft server MOTD. Context Minecraft server owners can set a so-called MOTD Message of the Day for their server that appears next to the server icon and below the server name on...
Minecraft MOTD Parser's HtmlGenerator vulnerable to XSS
Summary The HtmlGenerator class is subject to potential cross-site scripting XSS attack through a parsed malformed Minecraft server MOTD. Context Minecraft server owners can set a so-called MOTD Message of the Day for their server that appears next to the server icon and below the server name on...
CVE-2024-47765
Minecraft MOTD Parser is a PHP library to parse minecraft server motd. The HtmlGenerator class is subject to potential cross-site scripting XSS attack through a parsed malformed Minecraft server MOTD. The HtmlGenerator iterates through objects of MotdItem that are contained in an object of...
CVE-2024-47765
The CVE-2024-47765 entry describes an XSS vulnerability in the Minecraft MOTD Parser’s HtmlGenerator. The HtmlGenerator builds HTML from MotdItem/MotdItemCollection objects without escaping the color and text inputs, enabling injection of malicious HTML through a crafted MOTD. This affects the Ht...
CVE-2024-47765 Minecraft MOTD Parser's HtmlGenerator vulnerable to XSS
Minecraft MOTD Parser is a PHP library to parse minecraft server motd. The HtmlGenerator class is subject to potential cross-site scripting XSS attack through a parsed malformed Minecraft server MOTD. The HtmlGenerator iterates through objects of MotdItem that are contained in an object of...
CVE-2024-47765 Minecraft MOTD Parser's HtmlGenerator vulnerable to XSS
Minecraft MOTD Parser is a PHP library to parse minecraft server motd. The HtmlGenerator class is subject to potential cross-site scripting XSS attack through a parsed malformed Minecraft server MOTD. The HtmlGenerator iterates through objects of MotdItem that are contained in an object of...
CVE-2024-47765 Minecraft MOTD Parser's HtmlGenerator vulnerable to XSS
Minecraft MOTD Parser is a PHP library to parse minecraft server motd. The HtmlGenerator class is subject to potential cross-site scripting XSS attack through a parsed malformed Minecraft server MOTD. The HtmlGenerator iterates through objects of MotdItem that are contained in an object of...
Minecraft MOTD Parser 安全漏洞
Minecraft MOTD Parser is a PHP library for parsing Minecraft servers by an individual developer jgniecki. A security vulnerability exists in Minecraft MOTD Parser 1.0.5 and earlier versions, which stems from a vulnerability in the HtmlGenerator class that is susceptible to cross-site scripting XS...
PT-2024-32803 · Unknown · Minecraft Motd Parser
Name of the Vulnerable Software and Affected Versions: Minecraft MOTD Parser versions prior to 1.0.6 Description: The HtmlGenerator class in the Minecraft MOTD Parser library is subject to a potential cross-site scripting XSS attack through a parsed malformed Minecraft server MOTD. An attacker ca...
Necro Android Malware Found in Popular Camera and Browser Apps on Play Store
Altered versions of legitimate Android apps associated with Spotify, WhatsApp, and Minecraft have been used to deliver a new version of a known malware loader called Necro. Kaspersky said some of the malicious apps have also been found on the Google Play Store. They have been cumulatively...
CVE-2024-41565
JustEnoughItems JEI 19.5.0.33 and before contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability. The specific issue is a failure to validate slot index in JEI for Minecraft, which allows in-game item duplication...
CVE-2024-41564
EMI v.1.1.10 and before, fixed in v.1.1.11, contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability. The specific issue is a failure to validate slot index and decrement stack count in EMI mod for Minecraft, which allows in-game item duplication...
CVE-2024-41564
EMI v.1.1.10 and before, fixed in v.1.1.11, contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability. The specific issue is a failure to validate slot index and decrement stack count in EMI mod for Minecraft, which allows in-game item duplication...
CVE-2024-41564
EMI v.1.1.10 and before, fixed in v.1.1.11, contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability. The specific issue is a failure to validate slot index and decrement stack count in EMI mod for Minecraft, which allows in-game item duplication...