194 matches found
CVE-2025-22142 Cross-site Scripting in NamelessMC
NamelessMC is a free, easy to use & powerful website software for Minecraft servers. In affected versions an admin can add the ability to have users fill out an additional field and users can inject javascript code into it that would be activated once a staffer visits the user's profile on staff...
CVE-2025-22142
CVE-2025-22142 concerns NamelessMC. The vulnerability allows cross-site scripting via an admin-enabled extra field where a user may inject JavaScript that executes when a staff member views the user’s profile on the staff panel. Affected version details are not all consistently stated across sour...
CVE-2025-22144 Account Takeover in NamelessMC
NamelessMC is a free, easy to use & powerful website software for Minecraft servers. A user with admincp.core.emails or admincp.users.edit permissions can validate users and an attacker can reset their password. When the account is successfully approved by email the reset code is NULL, but when t...
CVE-2025-22144
NamelessMC (web software for Minecraft servers) contains a vulnerability where a user with admincp.core.emails or admincp.users.edit permissions can manually validate another user, causing reset_code to become empty and enabling password reset via the forgot_password endpoint. This can allow an a...
CVE-2025-22144 Account Takeover in NamelessMC
NamelessMC is a free, easy to use & powerful website software for Minecraft servers. A user with admincp.core.emails or admincp.users.edit permissions can validate users and an attacker can reset their password. When the account is successfully approved by email the reset code is NULL, but when t...
CVE-2025-22144 Account Takeover in NamelessMC
NamelessMC is a free, easy to use & powerful website software for Minecraft servers. A user with admincp.core.emails or admincp.users.edit permissions can validate users and an attacker can reset their password. When the account is successfully approved by email the reset code is NULL, but when t...
NamelessMC 安全漏洞
NamelessMC is a free, easy to use and powerful website software from the NamelessMC team. For your Minecraft server, which contains tons of features. A security vulnerability exists in NamelessMC 2.1.2 and earlier versions, which stems from the ability of an administrator privileged user to...
PT-2025-4380 · Unknown · Namelessmc
Name of the Vulnerable Software and Affected Versions: NamelessMC versions prior to 2.1.3 Description: The issue allows an attacker to reset user passwords via the forgot password link. This can be achieved when a user with admincp.core.emails or admincp.users.edit permissions manually validates ...
NamelessMC 安全漏洞
NamelessMC is a free, easy to use and powerful website software from the NamelessMC team. For your Minecraft server, which contains tons of features. A security vulnerability previously existed in NamelessMC version 2.1.3, which stemmed from the ability for administrators to add functionality tha...
CVE-2022-2821
Missing Critical Step in Authentication in GitHub repository namelessmc/nameless prior to v2.0.2...
CVE-2022-2820
Session Fixation in GitHub repository namelessmc/nameless prior to v2.0.2...
CVE-2022-2820
Session Fixation in GitHub repository namelessmc/nameless prior to v2.0.2...
Authentication flaw
Missing Critical Step in Authentication in GitHub repository namelessmc/nameless prior to v2.0.2...
Session fixation
Session Fixation in GitHub repository namelessmc/nameless prior to v2.0.2...
CVE-2022-2820 Session Fixation in namelessmc/nameless
Session Fixation in GitHub repository namelessmc/nameless prior to v2.0.2...
CVE-2022-2820
CVE-2022-2820 affects NamelessMC (namelessmc/nameless) versions prior to 2.0.2. The vulnerability is a session fixation issue in the authentication/session handling, with root cause cited as improper session management prior to 2.0.2. Impact is described as elevated risk to user sessions (high co...
CVE-2022-2820 Session Fixation in namelessmc/nameless
Session Fixation in GitHub repository namelessmc/nameless prior to v2.0.2...
CVE-2022-2820 Session Fixation in namelessmc/nameless
Session Fixation in GitHub repository namelessmc/nameless prior to v2.0.2...
CVE-2022-2821
CVE-2022-2821 concerns NamelessMC (namelessmc/nameless) prior to version 2.0.2, where a missing critical step in authentication is the root cause. This weakness can enable an attacker to impersonate or hijack accounts, with a high impact on confidentiality and potential for unauthorized access. P...