CGA-QR6J-FRR8-H7Q5

Bulletin has no description...

CGA-CPV4-M5R9-HRMR

Bulletin has no description...

CGA-2CVX-3MPQ-MF27

Bulletin has no description...

CGA-JCHG-R8VV-XPPR

Bulletin has no description...

CGA-43WC-9CCQ-3G7J

Bulletin has no description...

CGA-4V76-XX9P-9266

Bulletin has no description...

CGA-689G-V23Q-4WCR

Bulletin has no description...

CGA-8594-82P9-HP5G

Bulletin has no description...

CGA-M9PH-4GR3-2MMC

Bulletin has no description...

CGA-6W78-FV9M-4J6V

Bulletin has no description...

CGA-F32C-G38V-98J8

Bulletin has no description...

CVE-2024-58381

PocketMine-MP before 5.11.1 contains a denial of service vulnerability in LoginPacket JSON processing that allows remote attackers to crash the server by sending malformed JSON data. Attackers can exploit improper object initialization from scalar JSON types to trigger unset required properties,...

CGA-XQW9-8F39-3892

Bulletin has no description...

CGA-PFGX-6J3Q-QJ4P

Bulletin has no description...

CVE-2024-58380

PocketMine-MP versions before 5.11.2 contain a denial of service vulnerability in BookEditPacket handling that crashes the server when an invalid inventory slot value is provided. Attackers can send a crafted BookEditPacket with an inventory slot greater than 35 to trigger an unhandled exception...

CVE-2025-71418

PocketMine-MP versions before 5.25.2 fail to limit the explode function in packet parsing, allowing malicious clients to waste server resources. Attackers can send crafted packets with excessive delimiters to consume CPU and memory through sign editing, JWT parsing, and command parsing endpoints...

CVE-2023-54355

PocketMine-MP versions before 5.3.1 and 4.23.1 fail to validate that the identityPublicKey in LoginPacket uses the required secp384r1 elliptic curve. Attackers can provide LoginPackets with keys using different curves or non-EC key types to pass login verification but trigger an uncaught exceptio...

CVE-2023-54393

PocketMine-MP versions before 4.20.5 contain a denial of service vulnerability in LoginPacket JSON parsing due to improper validation in the JsonMapper dependency. Attackers can send malformed JSON structures in LoginPacket to crash the server...

CVE-2023-54396

PocketMine-MP versions before 4.8.1 fail to validate dye color IDs in banner NBT data during deserialization. Attackers can provide invalid color values in inventory transactions or via commands to trigger undefined offset errors and crash the server...

CVE-2023-54395

PocketMine-MP versions before 4.12.5 contain a denial-of-service vulnerability in ModalFormResponsePacket processing that allows attackers to cause server resource exhaustion by sending large JSON payloads. Attackers can send numerous oversized modal form response packets to consume CPU time and...