The latest articles on Forem by Tifix X (@tifix_x_162aa3b2bb4c91b7b). https://forem.com/tifix_x_162aa3b2bb4c91b7b https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3594000%2F44516242-53dd-4ae9-86ed-e23d76b17670.png https://forem.com/tifix_x_162aa3b2bb4c91b7b en Tifix X Mon, 03 Nov 2025 11:21:03 +0000 https://forem.com/tifix_x_162aa3b2bb4c91b7b/building-an-open-vulnerability-database-for-minecraft-servers-1dmn https://forem.com/tifix_x_162aa3b2bb4c91b7b/building-an-open-vulnerability-database-for-minecraft-servers-1dmn <h1> The Problem </h1> <p>I run several Minecraft servers, and tracking plugin vulnerabilities is a nightmare. Security info is scattered across:</p> <ul> <li>Random forum threads</li> <li>Discord servers</li> <li>Private DMs</li> <li>GitHub issues</li> </ul> <p>Most server admins learn about exploits AFTER being hacked.</p> <h1> The Solution </h1> <p>I built <strong>CraftSploitDB</strong> - an open database for Minecraft plugin exploits.</p> <p>🔗 Live site: <a href="https://csdb.dev" rel="noopener noreferrer">https://csdb.dev</a></p> <h2> Tech Stack </h2> <ul> <li>Next.js 16 (App Router)</li> <li>PostgreSQL + Prisma ORM</li> <li>Meilisearch (full-text search)</li> <li>NextAuth (authentication)</li> <li>Deployed on VPS with Nginx</li> </ul> <h2> Features </h2> <p>✅ Searchable exploit database with PoC<br> ✅ User submissions (moderated)<br> ✅ Free REST API<br> ✅ Gamification (reputation, badges)<br> ✅ Bilingual (EN/RU)</p> <h2> Current Exploits </h2> <ul> <li>CVE-2021-44228 (Log4Shell)</li> <li>CVE-2023-30859 (Triton RCE)</li> <li>BungeeCord misconfigurations</li> <li>BleedingPipe vulnerabilities</li> </ul> <h2> Looking For </h2> <ul> <li>Security researchers to contribute</li> <li>Feedback on the platform</li> <li>Plugin developers to help verify exploits</li> </ul> <h2> Responsible Disclosure </h2> <p>This is NOT about promoting hacking. It's about giving admins the information they need to protect their servers. Bad actors already know these exploits - we're leveling the playing field.</p> <h2> Try It </h2> <p>Visit <a href="https://csdb.dev" rel="noopener noreferrer">https://csdb.dev</a> and let me know what you think!</p> <p>Questions welcome in the comments. 👇</p> webdev programming security database