BomboBombone.exe BomboBombone research memory map
Post search results
ADDRESSPOSTBUG CLASS
0000000000431D00 CVE-2026-103585: Stored XSS in MediaSearch QuickView MediaSearch QuickView used an editor-controlled license URL as a link without restricting executable URL schemes. MediaWiki / XSS
0000000000431700 CVE-2026-103584: Unsafe license URLs in CommonsMetadata CommonsMetadata exposed editor-controlled license URLs in image metadata, which consuming interfaces could render as executable links. MediaWiki / XSS
0000000000436000 CVE-2026-102971: REST compatibility exposed hidden revision authors MediaWiki RESTBase compatibility returned a hidden revision author's numeric user ID. MediaWiki / Information disclosure
000000000042B000 CVE-2026-102973: API email sending skipped an authorization hook MediaWiki's email API omitted the EmailUserAuthorizeSend policy hook used by the web form. MediaWiki / Authorization
0000000000430D00 CVE-2026-103437: XSS through imported ReadingLists links ReadingLists used imported canonical URLs as card links without validating their URL scheme. MediaWiki / XSS
000000000042B600 CVE-2026-102975: RevisionDelete API could remove suppression without the required right The revision-delete API accepted suppress=no without checking suppressrevision. MediaWiki / Authorization
0000000000421F00 CVE-2026-103441: Wikibase deserialization enabled file deletion and RCE Unauthenticated PHP object injection through Wikibase parsing can reach file deletion and remote code execution gadget chains. MediaWiki / Deserialization
0000000000421900 CVE-2026-103440: PageTriage exposed suppressed reviewer usernames The public pagetriagelist API returned reviewer names and profile links even when the reviewer was suppressed. MediaWiki / Information Disclosure
0000000000422500 CVE-2026-103442: CentralAuth object injection and RCE A caller-controlled merge-session key enabled PHP object injection, file overwrite, and remote code execution gadget chains. MediaWiki / Object Injection
0000000000431200 CVE-2026-103445: Stored XSS in PageForms auto-edit links PageForms placed the #autoedit redirect value into a link without rejecting executable URL schemes. MediaWiki / XSS
000000000042BD00 CVE-2026-103446: Anonymous WikiLambda fragment execution An API authorization gap let anonymous users send unsaved Abstract Wikipedia fragments to the configured evaluator. MediaWiki / Authorization
0000000000430000 CVE-2026-100380: Reflected XSS in Wikibase SetLabel errors Special:SetLabel returned unescaped language-validation errors in its HTML response. MediaWiki / XSS
0000000000430600 CVE-2026-100381: DOM XSS in UploadWizard Flickr titles UploadWizard treated Flickr collection and set titles as HTML instead of text. MediaWiki / XSS
0000000000433100 CVE-2026-96874: Stored XSS in Cargo Drilldown tab names Cargo rendered a stored Drilldown tab name as raw HTML. MediaWiki / XSS
0000000000433E00 CVE-2026-96876: Anonymous reflected XSS in CargoExport errors CargoExport printed an invalid field alias from an exception message without HTML escaping. MediaWiki / XSS
0000000000434B00 CVE-2026-96878: Stored XSS through Cargo Exhibit field aliases Cargo's Exhibit format inserted field aliases into its HTML lens without escaping them. MediaWiki / XSS
0000000000434400 CVE-2026-96877: Reflected XSS in Cargo Drilldown full-text search Cargo copied a full-text search term into the Drilldown breadcrumb without escaping it. MediaWiki / XSS
0000000000433800 CVE-2026-96875: Reflected XSS in Cargo Drilldown hierarchy filters A request-controlled hierarchy filter was parsed as message markup and decoded into raw HTML. MediaWiki / XSS
0000000000432A00 CVE-2026-96873: Reflected XSS in CirrusSearch explain output An unauthenticated CirrusSearch diagnostic response rendered the original search term as HTML. MediaWiki / XSS
000000000042D300 CVE-2026-96872: WikiLambda nested Z825 bypassed the unsaved-code check A nested code implementation inside a Z825 composition bypassed WikiLambda's top-level unsaved-code check. MediaWiki / Authorization
0000000000428000 CVE-2026-73309: Empty OAuth2 credentials bypass Empty PKCE verifiers and client secrets bypassed OAuth2 credential checks. XenForo / OAuth2
0000000000428F00 CVE-2026-73311: OAuth2 authorization code replay The same XenForo OAuth authorization code could be redeemed more than once. XenForo / OAuth2
0000000000428800 CVE-2026-73310: OAuth2 redirect URI mismatch An OAuth code issued for callback A could be redeemed with callback B. XenForo / OAuth2
0000000000429600 CVE-2026-73312: Refresh token replay after access-token expiry An expired XenForo access token left its refresh token reusable. XenForo / OAuth2
000000000042A000 CVE-2026-73313: Passkey accepted for the wrong account A passkey from one XenForo account completed another account's pending login. XenForo / Authentication
000000000042E000 CVE-2026-73314: PayPal signature check bypass An unsupported PayPal signature algorithm caused webhook verification to return success. XenForo / Payments
000000000042F000 CVE-2026-73315: PayPal certificate URL SSRF A PayPal webhook header triggered an HTTP or HTTPS request to an attacker-selected URL. XenForo / SSRF
000000000042E700 CVE-2026-73316: PayPal webhook replay XenForo processed the same signed PayPal callback more than once. XenForo / Payments
000000000042C400 CVE-2026-73317: ACP rebuild authorization bypass A restricted ACP administrator could launch an approval job as another user. XenForo / Authorization
000000000042CC00 CVE-2026-73318: Missing permission checks on agreement resets A restricted ACP administrator could reset the board's agreement timestamps. XenForo / Authorization
0000000000432300 CVE-2026-73319: JavaScript URI in dynamic redirects A JavaScript URI passed same-host validation and executed after a confirmed redirect. XenForo / XSS
0000000000436700 CVE-2026-73320: Unauthenticated unfurl result disclosure Sequential result IDs exposed stored link previews without authentication. XenForo / Information disclosure
0000000000437000 CVE-2026-73321: Stack overflow in BBCode parsing Five thousand nested quote tags terminated a XenForo PHP worker with a stack overflow. XenForo / Denial of service
0000000000427000 CVE-2026-74239: Windows path traversal in style imports A backslash path escaped XenForo's style extraction directory on Windows. XenForo / Path traversal
0000000000422B00 Using AI to audit OSS, part 1: 14 CVEs How a weekend research effort turned into fourteen validated and fixed vulnerabilities AI / Vulnerability research
No posts found for “”. Try a CVE, title, bug class, or phrase from an article.
000000000040000000020000CODEER--.textSource codeMAPPED000000000042000000001000DATAR---.rdataAbout meMAPPED000000000042100000004000DATARW--.dataAll posts, A–Z · 35 postsMAPPED000000000042500000001000PTRR---.pdataMy projectsMAPPED000000000042600000001000PRVR---.rsrcResearch index · 34 CVEsMAPPED000000000042700000001000MAPERW-.web.rcePath traversal to code execution · 1 postMAPPED000000000042800000002000MAPER--.web.oauthOAuth2 · 4 postsMAPPED000000000042A00000001000MAPER--.web.authAuthentication · 1 postMAPPED000000000042B00000003000MAPER--.web.authzAuthorization · 6 postsMAPPED000000000042E00000001000MAPER--.web.payPayments · 2 postsMAPPED000000000042F00000001000MAPER--.web.ssrfServer-side request forgery · 1 postMAPPED000000000043000000006000MAPER--.web.xssCross-site scripting · 13 postsMAPPED000000000043600000001000MAPR---.web.infoInformation disclosure · 2 postsMAPPED000000000043700000001000MAPER--.web.dosDenial of service · 1 postMAPPED000000000043800000001000IMGER--.windowsWindows internalsUNMAPPED