Skip to content
OpenAdvisories

Vendor

Talishar

4 known vulnerabilities.

Products

Talishar 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-28428

    Talishar: Authentication Bypass via Empty authKey Parameter Allows Unauthenticated Game Actions

    Talishar is a fan-made Flesh and Blood project. Prior to commit a9c218e, an authentication bypass vulnerability in Talishar's game endpoint validation logic allows any unauthenticated attacker to perform authenticated game actions — including sending chat mes…

    Talishar Talishar
  • Medium 5.3
    CVE-2026-25144

    Talishar has a Stored XSS which can lead to data exfiltration & user impersonation

    Talishar is a fan-made Flesh and Blood project. A Stored XSS exists in the chat in-game system. The playerID parameter in SubmitChat.php and is saved without sanitization and executed whenever a user view the current page game. This vulnerability is fixed by …

    Talishar Talishar