PT-2021-24433

Name of the Vulnerable Software and Affected Versions: PocketMine-MP affected versions not specified Description: The issue arises from the way operator permissions are checked using the Config-exists function with lowercase=true. This allows a user to add their name to the ops.txt file with...

PT-2026-86514

Name of the Vulnerable Software and Affected Versions PocketMine-MP versions prior to 4.0.3 Description The removeOp function fails to perform case-insensitive matching when removing operator entries from the ops.txt file. While the function converts the supplied name to lowercase, it only remove...

Denial Of Service (DoS)

pocketmine/pocketmine-mp is vulnerable to denial of service DoS. The vulnerability exists as InventoryTransactionPackets can be used to cause an exponential computation to occur through InventoryTransaction-findResultItem...

PT-2020-21166

Name of the Vulnerable Software and Affected Versions PocketMine-MP versions prior to 3.15.4 Description The issue arises from specially crafted InventoryTransactionPackets sent by malicious clients, exploiting the behavior of InventoryTransaction-findResultItem and causing it to take an abnormal...

PocketMine-MP for Android - Base64 encoded String, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application PocketMine-MP for Android published at the 'play' market has multiple vulnerabilities...