الرئيسية
الرئيسية
الاتجاهات
الاتجاهات
الثغرات
الثغرات
الأخبار
الأخبار
الباحثون
الباحثون
لماذا dbugs؟
لماذا dbugs؟
الإعدادات

Zwuiix-Cmd

#21918من 60,594
14.2إجمالي CVSS
الثغرات · 2
عالية
2
PT-2026-89007
2026-04-06
7.1
CVE-2026-86204
Pmmp
Pocketmine-Mp
Authenticated players can cause a denial of service by sending `ModalFormResponsePacket` packets containing massive JSON arrays. The server fails to limit the JSON payload size, allowing an attacker to exhaust CPU and memory resources, which renders the server unresponsive. This occurs when the server processes the `formData` variable, especially if the `formId` provided does not correspond to an active form.
PT-2026-88991
2025-09-02
7.1
CVE-2025-71417
Pmmp
Pocketmine-Mp
An issue exists in the handling of `STATUS SEND PACKS` within the `ResourcePackClientResponsePacket` where the software fails to validate the uniqueness of pack UUIDs. An authenticated client using a non-standard Bedrock client can send a packet containing multiple duplicate valid pack UUIDs in the `packIds` array. This causes the server to process and send the same resource pack multiple times, leading to rapid memory exhaustion and a resulting denial of service that can freeze or crash the server.