CVE-2025-29784

NamelessMC is a free, easy to use & powerful website software for Minecraft servers. In version 2.1.4 and prior, the s parameter in GET requests for forum search functionality lacks length validation, allowing attackers to submit excessively long search queries. This oversight can lead to performance degradation and potential denial-of-service (DoS) attacks. This issue has been patched in version 2.2.0.

• CWE-20
• CWE-130
• CWE-1284

• https://github.com/NamelessMC/Nameless/commit/f5341e56930a98978171e0a871d60f19ab30ebddPatch
• https://github.com/NamelessMC/Nameless/releases/tag/v2.2.0Release Notes
• https://github.com/NamelessMC/Nameless/security/advisories/GHSA-4hrq-rf96-c2jmExploit, Vendor Advisory
• https://github.com/NamelessMC/Nameless/security/advisories/GHSA-4hrq-rf96-c2jmExploit, Vendor Advisory

Published

Apr 18, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-29779Post-Quantum Secure Feldman's Verifiable Secret Sharing prov…5.4
• CVE-2025-2978A vulnerability was found in WCMS 11. It has been rated as c…9.8
• CVE-2025-29780Post-Quantum Secure Feldman's Verifiable Secret Sharing prov…5.8
• CVE-2025-29781The Bare Metal Operator (BMO) implements a Kubernetes API fo…6.5
• CVE-2025-29782WeGIA is Web manager for charitable institutions A Stored Cr…5.4
• CVE-2025-29783vLLM is a high-throughput and memory-efficient inference and…9
• CVE-2025-29785quic-go is an implementation of the QUIC protocol in Go. The…7.5
• CVE-2025-29786Expr is an expression language and expression evaluation for…7.5
• CVE-2025-29787`zip` is a zip library for rust which supports reading and w…7.3
• CVE-2025-29788The Syliud PayPal Plugin is the Sylius Core Team’s plugin fo…6.5
• CVE-2025-29789OpenEMR is a free and open source electronic health records …7.5
• CVE-2025-2979A vulnerability classified as problematic has been found in …5.4