Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Kostamax27

#21092of 60,594
15Total CVSS
Vulnerabilities · 2
Medium
1
High
1
PT-2026-89002
2026-09-09
8.7
CVE-2026-86199
Pmmp
Pocketmine-Mp
An issue exists during offline login authentication where the software fails to properly validate the Certificate field. Unauthenticated players can exploit this to trigger an uninitialized property access error, which results in a server crash.
PT-2026-89006
2026-04-06
6.3
CVE-2026-86203
Pmmp
Pocketmine-Mp
The software fails to validate the despawn state of an entity when processing attack packets from clients. When an entity or player is flagged for despawn (such as during a disconnect sequence), it remains accessible in the `World` entity table. A race condition occurs when a client sends an attack packet at the exact moment an entity is disconnecting, allowing the death handler to execute multiple times. This results in the duplication of experience and inventory items, as they are dropped multiple times while the original items remain with the disconnecting player.