100 matches found
Microsoft Azure Bot Framework SDK authorization issue vulnerability
The Microsoft Azure Bot Framework SDK is a development framework for building, testing, and deploying enterprise-grade conversational AI bots with support for multi-channel integration and natural language processing from Microsoft USA. An authorization issue vulnerability exists in the Microsoft...
CVE-2025-30392: Improper Authorization
Improper authorization in Azure Bot Framework SDK allows an unauthorized attacker to elevate privileges over a network...
CVE-2025-26604
Discord-Bot-Framework-Kernel is a Discord bot framework built with interactions.py, featuring modular extension management and secure execution. Because of the nature of arbitrary user-submited code execution, this allows user to execute potentially malicious code to perform damage or extract...
CVE-2025-26604 Possibility to retrieve bot token by malicious module developers in Discord-Bot-Framework-Kernel
Discord-Bot-Framework-Kernel is a Discord bot framework built with interactions.py, featuring modular extension management and secure execution. Because of the nature of arbitrary user-submited code execution, this allows user to execute potentially malicious code to perform damage or extract...
CVE-2025-26604
Discord-Bot-Framework-Kernel is a Discord bot framework built with interactions.py, featuring modular extension management and secure execution. Because of the nature of arbitrary user-submited code execution, this allows user to execute potentially malicious code to perform damage or extract...
CVE-2025-26604 Possibility to retrieve bot token by malicious module developers in Discord-Bot-Framework-Kernel
Discord-Bot-Framework-Kernel is a Discord bot framework built with interactions.py, featuring modular extension management and secure execution. Because of the nature of arbitrary user-submited code execution, this allows user to execute potentially malicious code to perform damage or extract...
CVE-2025-26604 Possibility to retrieve bot token by malicious module developers in Discord-Bot-Framework-Kernel
Discord-Bot-Framework-Kernel is a Discord bot framework built with interactions.py, featuring modular extension management and secure execution. Because of the nature of arbitrary user-submited code execution, this allows user to execute potentially malicious code to perform damage or extract...
CVE-2025-26604
Discord-Bot-Framework-Kernel is affected by CVE-2025-26604 due to an arbitrary user-submitted code execution vulnerability. A malicious module can extract the bot token and, with high privileges, allow the attacker to impersonate the bot or gain near-full control; a blocking module can also be lo...
Discord Bot Framework Kernel Information Leak Vulnerability
Discord Bot Framework Kernel is a Discord Bot Framework kernel open sourced by Discord Agora. An information disclosure vulnerability exists in the Discord Bot Framework Kernel that stems from not properly handling user-submitted code. An attacker could exploit the vulnerability to extract...
CVE-2025-26604: Exposure of Sensitive Information to an Unauthorized Actor
Discord-Bot-Framework-Kernel is a Discord bot framework built with interactions.py, featuring modular extension management and secure execution. Because of the nature of arbitrary user-submited code execution, this allows user to execute potentially malicious code to perform damage or extract...
Bot Framework SDK Disclosure
The vulnerability of the Bot Framework SDK is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Microsoft Bot Framework SDK Remote Code Execution Vulnerability
The Microsoft Bot Framework SDK is a powerful framework for constructing bots that can handle free-form interactions and more guided conversations.The Microsoft Bot Framework SDK is vulnerable to remote code execution. An attacker could exploit this vulnerability to execute code on the target hos...
CVE-2021-43225
Bot Framework SDK Remote Code Execution Vulnerability...
CVE-2021-43225
Bot Framework SDK Remote Code Execution Vulnerability...
CVE-2021-43225
Bot Framework SDK Remote Code Execution Vulnerability...
Remote code execution
Bot Framework SDK Remote Code Execution Vulnerability...
CVE-2021-43225 Bot Framework SDK Remote Code Execution Vulnerability
...
CVE-2021-43225 Bot Framework SDK Remote Code Execution Vulnerability
...
CVE-2021-43225
CVE-2021-43225 affects the Microsoft Bot Framework SDK and is described as a remote code execution vulnerability. Multiple connected sources (CNVD-2021-101713, NVD entry, OSV) corroborate that the Bot Framework SDK is vulnerable to remote code execution; the CNVD entry explicitly references the M...