الرئيسية
الرئيسية
الاتجاهات
الاتجاهات
الثغرات
الثغرات
الأخبار
الأخبار
الباحثون
الباحثون
لماذا dbugs؟
لماذا dbugs؟
الإعدادات

Kostamax27

#21092من 60,594
15إجمالي CVSS
الثغرات · 2
متوسطة
1
عالية
1
PT-2026-89002
2026-09-09
8.7
CVE-2026-86199
Pmmp
Pocketmine-Mp
An issue exists during offline login authentication where the software fails to properly validate the Certificate field. Unauthenticated players can exploit this to trigger an uninitialized property access error, which results in a server crash.
PT-2026-89006
2026-04-06
6.3
CVE-2026-86203
Pmmp
Pocketmine-Mp
The software fails to validate the despawn state of an entity when processing attack packets from clients. When an entity or player is flagged for despawn (such as during a disconnect sequence), it remains accessible in the `World` entity table. A race condition occurs when a client sends an attack packet at the exact moment an entity is disconnecting, allowing the death handler to execute multiple times. This results in the duplication of experience and inventory items, as they are dropped multiple times while the original items remain with the disconnecting player.