310 matches found
Ciphey
Ciphey Paste in text that's been encoded or encrypted. Ciphey works out how and hands you the plaintext. No key, no cipher name, no hints. Base64, hex, Caesar/ROT13, Vigenère, Morse code and 19 more, several layers deep. Install · Quick start · Features · Library · MCP · Docs · Discord ▶ Watch th...
CVE-2025-65321
CVE-2025-65321 The Language Sloth Discord bot is vulnerable to Directory Traversal in the gif and png functions. The functions build file paths using unsanitized user input for the 'name' parameter, allowing attackers to reference files outside the intended resource directories. The functions "gi...
SMSBotBypass
SMSBotBypass Bypass SMS verifications from Paypal, Instagram, Snapchat, Google, 3D Secure, and many others... using a Discord Bot or the private API. It's really simple. Imagine that your friend got a Snapchat account, you try to reset his password using the sms system : he's gonna receive the sm...
otp-bot
SMSBotBypass Bypass SMS verifications from Paypal, Instagram, Snapchat, Google, 3D Secure, and many others... using a Discord Bot or the private API. It's really simple. Imagine that your friend got a Snapchat account, you try to reset his password using the sms system : he's gonna receive the sm...
CVE-2026-41303
🔐 CVE-2026-41303: Authorization Bypass in OpenClaw Discord Bot -red?style=flat&logo=owasp Complete technical documentation on the authorization bypass vulnerability in OpenClaw 📋 Table of Contents General Description Technical Details Security Impact Proof of Concept Exploitation Methodology...
Idisagree
Idisagree v1.0 Control remote computers using discord bot and python 3. ! If your target is a windows system, you may want to compile your payload. Do this with py2exe or pyinstaller. MAINTAINERS Alisson Moretto | Twitter: @UndeadSec Github: @UndeadSec PREREQUISITES Python 3.x pip3 subprocess fro...
spyboy-productions
Spyo Powerful CyberSecurity Bot. Invite Bot | Discord Server | Website join our cybersec Discord server join here 🌐 Our Blog: https://spyboy.blog/ People behind bot ╰Founder: spyboy ╰Co-Founder: sudo whoami Contributors: Awesome developers who helped us and made some new commands for bot • Taj •...
DiscordRAT
DiscordRAT V2 Discord Remote Administration Tool fully written in Python3. This is a RAT controlled over Discord with over 20 post exploitation modules. Disclaimer: This tool is for educational use only, the author will not be held responsible for any misuse of this tool. Setup Guide: You will...
CVE-2026-61840: vantern-org questbot: Quest Bot is an opensource Discord Bot
Quest Bot is an opensource Discord Bot. Prior to 1.1.9, the image to GIF command uses a request helper that validates a hostname's public IP addresses but then sends the actual request by hostname, causing a second DNS lookup. An attacker controlling a domain can return a public address during...
MAL-2026-17861 Malicious code in sysdiagd (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fe803d7d432e77b73f1005478bc0215255ec42c4f90836b7256e0661e35d2bf Package sysdiagd version 1.2.3 on PyPI was examined but no concrete installer-harm fingerprint hardcoded C2 endpoint, credential-path read,...
Malicious code in sysdiagd (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fdb099f519e4b3349d3800684dd052bd2eef6149061f36587fe69ffab780397 Package sysdiagd version 1.2.2 on PyPI was examined across 15 files. No a static rule matches were produced and no concrete behavioral findings are...
Ciphey v0.12.1
Ciphey Paste in text that's been encoded or encrypted. Ciphey works out how and hands you the plaintext. No key, no cipher name, no hints. Base64, hex, Caesar/ROT13, Vigenère, Morse code and 19 more, several layers deep. Install · Quick start · Features · Library · MCP · Docs · Discord ▶ Watch th...
Malicious code in happy-dlscord.js (npm)
Source: amazon-inspector 2d183bf51c0f2be0102a7a7aeeda661f895e3b075f183d76d5f0f77c09c70860 The package name 'happy-dlscord.js' is a one-character edit of the top-tier npm package 'discord.js' and ships a near-verbatim fork of the upstream library with an injected payload in src/client/Client.js. I...
Malicious code in readosso (PyPI)
Source: kam193 67ade73536cb4834ba05b33797c1cadcddbf7d90fc099bd6e53f94b9deec4f66 Package automatically starts a Discord bot waiting for instructions to download and start a remote executable --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...
Malicious code in noteasonfnsource (PyPI)
Source: kam193 fa2242ec1849ffa55a55c85b7781623cdc7147b8568b3beaa5d2b3b956c04e17 Code provides a Discord bot, which - once a generic command is called - performs malicious action against the Discord server: deletes all channels, renames the server, and then starts a loop that creates spamming...
Malicious code in d1snakegame (PyPI)
Source: kam193 8023a44d657b04f09628c938fa7fb4fbd8c1300f630aff31837b32f2337ce65f The package starts a Discord bot that waits for messages and automatically executes any file sent as an attachment, effectively turning the package into a RAT. --- Category: MALICIOUS - The campaign has clearly...
PYSEC-2026-1865 Red-DiscordBot vulnerable to Incorrect Authorization in commands API
Impact Due to a bug in Red's Core API, 3rd-party cogs using the @commands.canmanagechannel command permission check without additional permission controls may authorize a user to run a command even when that user doesn't have permissions to manage a channel. None of the core commands or core cogs...
Red-DiscordBot vulnerable to Incorrect Authorization in commands API
ImpactDue to a bug in Red's Core API, 3rd-party cogs using the @commands.canmanagechannel command permission check without additional permission controls may authorize a user to run a command even when that user doesn't have permissions to manage a channel.None of the core commands or core cogs a...
CVE-2026-47195
Quest Bot is an opensource Discord Bot. Prior to version 1.1.6, the purge and slowmode commands check only guild-level permissions on the invoking member. They do not check the member’s effective permissions in the channel where the command is run. A user denied channel-level moderation permissio...