20 matches found
CVE-2023-36123
CVE-2023-36123 Только для демонстрационных целей. Эксплойт работает на всех версиях Plain Craft Launcher 2. Скачайте Custom.xaml и импортируйте его в Plain Craft Launcher 2, затем нажмите "Run Command". https://github.com/Hex-Dragon/PCL2/assets/140469824/636d1436-a26d-4f54-ad4f-a7b1bb123783...
EUVD-2025-10017
Malicious code in bioql PyPI...
EUVD-2023-40102
Malicious code in bioql PyPI...
CVE-2025-54120
PCL Plain Craft Launcher Community Edition is a Minecraft launcher. In PCL CE versions 2.12.0-beta.5 to 2.12.0-beta.9, the login credentials used during the third-party login process are accidentally recorded in the local log file. Although the log file is not automatically uploaded or shared, if...
CVE-2025-54120: Insertion of Sensitive Information into Log File
PCL Plain Craft Launcher Community Edition is a Minecraft launcher. In PCL CE versions 2.12.0-beta.5 to 2.12.0-beta.9, the login credentials used during the third-party login process are accidentally recorded in the local log file. Although the log file is not automatically uploaded or shared, if...
CVE-2025-31488
Plain Craft Launcher PCL is a launcher for Minecraft. PCL allows users to use homepages provided by third parties. If controls such as WebBrowser are used in the homepage, WPF will use Internet Explorer to load the specified webpage. If the user uses a malicious homepage, the attacker can use IE...
CVE-2025-31488
Plain Craft Launcher PCL is a launcher for Minecraft. PCL allows users to use homepages provided by third parties. If controls such as WebBrowser are used in the homepage, WPF will use Internet Explorer to load the specified webpage. If the user uses a malicious homepage, the attacker can use IE...
CVE-2025-31488
Plain Craft Launcher (PCL) is affected. When a homepage uses WebBrowser controls in its WPF UI, the app loads the page via Internet Explorer in the background, allowing an attacker with a malicious homepage to access the target webpage without user awareness. The issue is fixed in version 2.9.3.
CVE-2025-31488 Plain Craft Launcher's custom homepage can use Internet Explorer to load web pages with the help of controls such as WebBrowser
Plain Craft Launcher PCL is a launcher for Minecraft. PCL allows users to use homepages provided by third parties. If controls such as WebBrowser are used in the homepage, WPF will use Internet Explorer to load the specified webpage. If the user uses a malicious homepage, the attacker can use IE...
CVE-2025-31488 Plain Craft Launcher's custom homepage can use Internet Explorer to load web pages with the help of controls such as WebBrowser
Plain Craft Launcher PCL is a launcher for Minecraft. PCL allows users to use homepages provided by third parties. If controls such as WebBrowser are used in the homepage, WPF will use Internet Explorer to load the specified webpage. If the user uses a malicious homepage, the attacker can use IE...
CVE-2025-31488 Plain Craft Launcher's custom homepage can use Internet Explorer to load web pages with the help of controls such as WebBrowser
Plain Craft Launcher PCL is a launcher for Minecraft. PCL allows users to use homepages provided by third parties. If controls such as WebBrowser are used in the homepage, WPF will use Internet Explorer to load the specified webpage. If the user uses a malicious homepage, the attacker can use IE...
Plain Craft Launcher 输入验证错误漏洞
Plain Craft Launcher is an open source software by Hex Dragon. Plain Craft Launcher suffers from an input validation error vulnerability that stems from a malicious homepage that may use IE to access web pages in the background...
PT-2025-15121
Name of the Vulnerable Software and Affected Versions Plain Craft Launcher versions prior to 2.9.3 Description The issue arises when Plain Craft Launcher PCL uses Internet Explorer to load webpages from third-party homepages, potentially allowing attackers to access specified webpages without the...
CVE-2025-31488: Improper Input Validation
Plain Craft Launcher PCL is a launcher for Minecraft. PCL allows users to use homepages provided by third parties. If controls such as WebBrowser are used in the homepage, WPF will use Internet Explorer to load the specified webpage. If the user uses a malicious homepage, the attacker can use IE...
Directory traversal
Directory Traversal vulnerability in Hex-Dragon Plain Craft Launcher 2 version Alpha 1.3.9, allows local attackers to execute arbitrary code and gain sensitive information...
CVE-2023-36123
Directory Traversal vulnerability in Hex-Dragon Plain Craft Launcher 2 version Alpha 1.3.9, allows local attackers to execute arbitrary code and gain sensitive information...
CVE-2023-36123: Improper Limitation of a Pathname to a Restricted Directory
Directory Traversal vulnerability in Hex-Dragon Plain Craft Launcher 2 version Alpha 1.3.9, allows local attackers to execute arbitrary code and gain sensitive information...
Plain Craft Launcher Path Traversal Vulnerability
Plain Craft Launcher is a software. A security vulnerability exists in Plain Craft Launcher version 1.3.9 that originates from a vulnerability that could allow a local attacker to execute arbitrary code and obtain sensitive information...
CVE-2023-36123
CVE-2023-36123 concerns a Directory Traversal in Hex-Dragon Plain Craft Launcher 2, version Alpha 1.3.9. The connected documents identify the affected software as Hex-Dragon Plain Craft Launcher 2 and specify the vulnerability arises from a directory traversal flaw that enables local attackers to...