PocketMine-MP has potential memory/network vulnerability from repeated ResourcePackClientResponsePacket packets
### Summary During the resource pack stage of logging in, after the server sends `ResourcePackStackPacket`, a malicious
#cwe-837
共收录 7 条相关情报。
← 返回所有主题Payload is a free and open source headless content management system. In @payloadcms/plugin-ecommerce versions before 3.90.0 and canary versions before 4.0.0-canary.34, use of t...
CVE-2026-105850
Payload is a free and open source headless content management system. In @payloadcms/plugin-ecommerce versions before 3.
Payload Ecommerce has an order confirmation validation issue
CVE-2026-105850
## Impact When using the Stripe payment adapter, an order confirmation could be processed more than once under certain c
MyBB is free and open source forum software. Prior to 1.8.40, the built-in CAPTCHA does not consistently enforce single-use semantics, allowing remote attackers to bypass CAPTCH...
CVE-2026-45734
MyBB is free and open source forum software. Prior to 1.8.40, the built-in CAPTCHA does not consistently enforce single-
Grav is a file-based Web platform. Prior to 2.0.0-beta.2, a business logic vulnerability in the Grav Admin Panel allows a low-privileged user (with only user creation permission...
CVE-2026-42609
Grav is a file-based Web platform. Prior to 2.0.0-beta.2, a business logic vulnerability in the Grav Admin Panel allows
Tor before 0.4.9.7, when circuit queue memory pressure exists, can experience a client crash because of a double close of a circuit, aka TROVE-2026-009.
CVE-2026-44601
Tor before 0.4.9.7, when circuit queue memory pressure exists, can experience a client crash because of a double close o
Grav Vulnerable to Administrative Account Disruption and Privilege De-escalation via User Overwrite Logic
CVE-2026-42609
### Summary A business logic vulnerability in the Grav Admin Panel allows a low-privileged user (with only user creation