15 matches found
MC-Log4j-Patcher
MC-Log4J-Patcher L'obiettivo di questo progetto è fornire ai giocatori di Minecraft e ai proprietari di server tranquillità riguardo all'exploit Log4J recentemente scoperto CVE-2021-44228. Attualmente questo progetto cerca qualsiasi stringa di formato Log4J, non solo jndi, e le sostituisce o le...
LogJackFix
LogJack Fix Un plugin per Spigot per risolvere la vulnerabilità di esecuzione remota di codice CVE-2021-44228 in Log4j, per proteggere i client Minecraft. Compilazione root@kitploit: gradle build Licenza Licenziato sotto GPLv3 Copyright c 2021 lordpipe Contributi Effettuando un contributo a quest...
Linux kernel 安全漏洞
The Linux kernel is the kernel used by the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the spigot topcliff-pch driver releasing and reusing resources after unbinding them. This...
CVE-2025-62784
InventoryGui is a library for creating chest GUIs for Bukkit/Spigot plugins. Versions before 1.6.5 contain a vulnerability where any plugin using a GUI with the GuiStorageElement and allows taking out items out of that element can allow item duplication when the experimental Bundle item feature i...
CVE-2025-62784
InventoryGui is a library for creating chest GUIs for Bukkit/Spigot plugins. Versions before 1.6.5 contain a vulnerability where any plugin using a GUI with the GuiStorageElement and allows taking out items out of that element can allow item duplication when the experimental Bundle item feature i...
CVE-2025-62784 InventoryGui allows item duplication in GUIs which use GuiStorageElement
InventoryGui is a library for creating chest GUIs for Bukkit/Spigot plugins. Versions before 1.6.5 contain a vulnerability where any plugin using a GUI with the GuiStorageElement and allows taking out items out of that element can allow item duplication when the experimental Bundle item feature i...
CVE-2025-62784 InventoryGui allows item duplication in GUIs which use GuiStorageElement
InventoryGui is a library for creating chest GUIs for Bukkit/Spigot plugins. Versions before 1.6.5 contain a vulnerability where any plugin using a GUI with the GuiStorageElement and allows taking out items out of that element can allow item duplication when the experimental Bundle item feature i...
PT-2025-44049
Name of the Vulnerable Software and Affected Versions InventoryGui versions prior to 1.6.5 Description InventoryGui is a library used for creating chest GUIs for Bukkit/Spigot plugins. A flaw exists in versions before 1.6.5 where item duplication can occur. This happens when a plugin utilizes a G...
EUVD-2023-35202
Malicious code in bioql PyPI...
CVE-2023-30859 Spigot Command Exploit in Triton
Triton is a Minecraft plugin for Spigot and BungeeCord that helps you translate your Minecraft server. The CustomPayload packet allows you to execute commands on the spigot/bukkit console. When you enable bungee mode in the config it will enable the bungee bridge and the server will begin to...
CVE-2023-30859 Spigot Command Exploit in Triton
Triton is a Minecraft plugin for Spigot and BungeeCord that helps you translate your Minecraft server. The CustomPayload packet allows you to execute commands on the spigot/bukkit console. When you enable bungee mode in the config it will enable the bungee bridge and the server will begin to...
CVE-2023-30859
Triton (Minecraft plugin for Spigot/BungeeCord) is affected. The vulnerability stems from the CustomPayload packet allowing execution of commands on the spigot/bukkit console when bungee mode is enabled, broadcasting the triton:main channel. Attackers could send a payload (byte 2 + string command...
PT-2023-23015 · Triton +2 · Triton +2
Name of the Vulnerable Software and Affected Versions: Triton versions prior to 3.8.4 Description: The issue affects the Triton Minecraft plugin for Spigot and BungeeCord, allowing execution of commands on the spigot/bukkit console through the CustomPayload packet. When bungee mode is enabled in...
JVN#53278122: Minecraft Java Edition vulnerable to directory traversal
Minecraft Java Edition provided by Mojang Studios contains a directory traversal vulnerability CWE-22. Impact Arbitrary JSON files on the system using the product may be deleted by an attacker. Solution Update Minecraft Update Minecraft to the latest version according to the information provided ...
