WS-2022-0270

A unauthenticated user can delete any book item of any user reading list in the system without any authentication or authorization verification, via the /api/readinglist/delete-item API endpoint...

PT-2026-86780

Name of the Vulnerable Software and Affected Versions PocketMine-MP versions prior to 3.26.5 PocketMine-MP versions 4.0.x prior to 4.0.5 Description The software fails to limit the length of book page text, the total page count, or the length of the author and title fields. An attacker with a...