CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

7 matches found

CVE•added 2026/02/25 2:52 a.m.•9 views

CVE-2026-27632

Talishar (fan-made Flesh and Blood project) has a CSRF vulnerability in state-changing endpoints such as SubmitChat.php prior to commit 6be3871a14c192d1fb8146cdbc76f29f27c1cf48. An attacker who knows the gameName and playerID and the user is browsing a malicious site can forge requests to perform...

3.1CVSS5.6AI score0.00024EPSS

Exploits1References1Affected Software1

ATTACKERKB•added 2026/02/25 2:52 a.m.•3 views

CVE-2026-27632

Talishar is a fan-made Flesh and Blood project. Prior to commit 6be3871a14c192d1fb8146cdbc76f29f27c1cf48, the Talishar application lacks Cross-Site Request Forgery CSRF protections on critical state-changing endpoints, specifically within SubmitChat.php and other game interaction handlers. By...

3.1CVSS5.5AI score0.00024EPSS

Exploits1References2

OSV•added 2026/02/25 2:52 a.m.•2 views

CVE-2026-27632 Talishar Vulnerable to Cross-Site Request Forgery (CSRF)

2.6CVSS5.8AI score0.00024EPSS

Exploits1References3

NVD•added 2009/12/28 7:30 p.m.•12 views

CVE-2009-4007

Unspecified vulnerability in the NormaliseTrainConsist function in src/traincmd.cpp in OpenTTD before 0.7.5-RC1 allows remote attackers to cause a denial of service daemon crash via certain game actions involving a wagon and a dual-headed engine...

5CVSS6.4AI score0.01657EPSS

Exploits0References11