36 matches found
Command injection
tmerc-cogs are a collection of open source plugins for the Red Discord bot. A vulnerability has been found in the code that allows any user to access sensitive information by crafting a specific MassDM message. Issue is patched in commit 92325be650a6c17940cc52611797533ed95dbbe1. All users are...
CVE-2021-32646 Escalation of permissions in roomer
Roomer is a discord bot cog extension which provides automatic voice channel generation as well as private voice and text channels. A vulnerability has been discovered allowing discord users to get the manage channel permissions in a private VC they have joined. This allowed them to make changes ...
CVE-2021-32646
CVE-2021-32646 affects Roomer, a Discord bot cog that generates private voice/text channels. The vulnerability allows a user in a private voice channel to obtain the channel management permission, enabling them to modify or delete that specific channel. The flaw does not grant control over other ...
CVE-2021-29502
WarnSystem is a cog plugin for the Red discord bot. A vulnerability has been found in the code that allows any user to access sensible informations by setting up a specific template which is not properly sanitized. The problem has been patched in version 1.3.18. Users should update and type...
Command injection
WarnSystem is a cog plugin for the Red discord bot. A vulnerability has been found in the code that allows any user to access sensible informations by setting up a specific template which is not properly sanitized. The problem has been patched in version 1.3.18. Users should update and type...
Command injection
Ticketer is a command based ticket system cog plugin for the red discord bot. A vulnerability allowing discord users to expose sensitive information has been found in the Ticketer cog. Please upgrade to version 1.0.1 as soon as possible. As a workaround users may unload the ticketer cog to disabl...
CVE-2021-29501
CVE-2021-29501 affects the Ticketer cog (Red Discord Bot) and enables a vulnerability that allows exposure of sensitive information. The documented remediation is to upgrade to version 1.0.1; as a temporary workaround, unload the Ticketer cog to disable the exploitable code. Public disclosures ac...
PT-2021-18256 · Unknown · Red Discord Bot +1
Name of the Vulnerable Software and Affected Versions: Ticketer cog versions prior to 1.0.1 Description: A vulnerability has been found in the Ticketer cog, a command-based ticket system plugin for the red Discord bot, allowing Discord users to expose sensitive information. Recommendations: For...
PT-2021-18257 · Unknown · Red Discord Bot +1
Name of the Vulnerable Software and Affected Versions: WarnSystem versions prior to 1.3.18 Description: A vulnerability has been found in the WarnSystem cog for the Red discord bot, allowing any user to access sensitive information by setting up a specific template that is not properly sanitized...
Remote Code Execution in Red Discord Bot
Impact A RCE exploit has been discovered in the Trivia module: this exploit allows Discord users with specifically crafted usernames to inject code into the Trivia module's leaderboard command. By abusing this exploit, it's possible to perform destructive actions and/or access sensitive...
Xpdf CVE-2019-16115 Buffer Underflow Vulnerability
Description Xpdf is prone to a buffer-underflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to cause denial-of-service conditions. Due to the nature of this issue, arbitrary code execution may be possible but this ha...
cog-int.org XSS vulnerability
Vulnerable URL: http://cog-int.org/whois/whois.cgi Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP website status:| No Check...
[SECURITY] Fedora 18 Update: poppler-0.20.2-16.fc18
Poppler, a PDF rendering library, is a fork of the xpdf PDF viewer developed by Derek Noonburg of Glyph and Cog, LLC...
[SECURITY] Fedora 18 Update: poppler-0.20.2-10.fc18
Poppler, a PDF rendering library, is a fork of the xpdf PDF viewer developed by Derek Noonburg of Glyph and Cog, LLC...