CVE-2022-23604: Improper Privilege Management

x26-Cogs is a repository of cogs made by Twentysix for the Red Discord bot. Among these cogs is the Defender cog, a tool for Discord server moderation. A vulnerability in the Defender cog prior to version 1.10.0 allows users with admin privileges to issue commands as other users who share the sam...

CVE-2021-37697

tmerc-cogs are a collection of open source plugins for the Red Discord bot. A vulnerability has been found in the code that allows any user to access sensitive information by crafting a specific membership event message. Issue is patched in commit d63c49b4cfc30c795336e4fff08cba3795e0fcc0. As a...

CVE-2021-37696

tmerc-cogs are a collection of open source plugins for the Red Discord bot. A vulnerability has been found in the code that allows any user to access sensitive information by crafting a specific MassDM message. Issue is patched in commit 92325be650a6c17940cc52611797533ed95dbbe1. All users are...

CVE-2021-37697

tmerc-cogs are a collection of open source plugins for the Red Discord bot. A vulnerability has been found in the code that allows any user to access sensitive information by crafting a specific membership event message. Issue is patched in commit d63c49b4cfc30c795336e4fff08cba3795e0fcc0. As a...

Design/Logic Flaw

tmerc-cogs are a collection of open source plugins for the Red Discord bot. A vulnerability has been found in the code that allows any user to access sensitive information by crafting a specific membership event message. Issue is patched in commit d63c49b4cfc30c795336e4fff08cba3795e0fcc0. As a...

Command injection

tmerc-cogs are a collection of open source plugins for the Red Discord bot. A vulnerability has been found in the code that allows any user to access sensitive information by crafting a specific MassDM message. Issue is patched in commit 92325be650a6c17940cc52611797533ed95dbbe1. All users are...

CVE-2021-32646

Roomer is a discord bot cog extension which provides automatic voice channel generation as well as private voice and text channels. A vulnerability has been discovered allowing discord users to get the manage channel permissions in a private VC they have joined. This allowed them to make changes ...

CVE-2021-32646 Escalation of permissions in roomer

Roomer is a discord bot cog extension which provides automatic voice channel generation as well as private voice and text channels. A vulnerability has been discovered allowing discord users to get the manage channel permissions in a private VC they have joined. This allowed them to make changes ...

CVE-2021-32646

CVE-2021-32646 affects Roomer, a Discord bot cog that generates private voice/text channels. The vulnerability allows a user in a private voice channel to obtain the channel management permission, enabling them to modify or delete that specific channel. The flaw does not grant control over other ...

PT-2021-19828

Name of the Vulnerable Software and Affected Versions Roomer versions prior to 1.0.1 Description A vulnerability has been discovered in the Roomer discord bot cog, allowing discord users to gain manage channel permissions in a private voice channel they have joined. This enables them to make...

CVE-2021-29502

WarnSystem is a cog plugin for the Red discord bot. A vulnerability has been found in the code that allows any user to access sensible informations by setting up a specific template which is not properly sanitized. The problem has been patched in version 1.3.18. Users should update and type...

Command injection

WarnSystem is a cog plugin for the Red discord bot. A vulnerability has been found in the code that allows any user to access sensible informations by setting up a specific template which is not properly sanitized. The problem has been patched in version 1.3.18. Users should update and type...

Command injection

Ticketer is a command based ticket system cog plugin for the red discord bot. A vulnerability allowing discord users to expose sensitive information has been found in the Ticketer cog. Please upgrade to version 1.0.1 as soon as possible. As a workaround users may unload the ticketer cog to disabl...

CVE-2021-29501

Ticketer is a command based ticket system cog plugin for the red discord bot. A vulnerability allowing discord users to expose sensitive information has been found in the Ticketer cog. Please upgrade to version 1.0.1 as soon as possible. As a workaround users may unload the ticketer cog to disabl...

CVE-2021-29501

CVE-2021-29501 affects the Ticketer cog (Red Discord Bot) and enables a vulnerability that allows exposure of sensitive information. The documented remediation is to upgrade to version 1.0.1; as a temporary workaround, unload the Ticketer cog to disable the exploitable code. Public disclosures ac...

PT-2021-18256 · Unknown · Red Discord Bot +1

Name of the Vulnerable Software and Affected Versions: Ticketer cog versions prior to 1.0.1 Description: A vulnerability has been found in the Ticketer cog, a command-based ticket system plugin for the red Discord bot, allowing Discord users to expose sensitive information. Recommendations: For...

PT-2021-18257 · Unknown · Red Discord Bot +1

Name of the Vulnerable Software and Affected Versions: WarnSystem versions prior to 1.3.18 Description: A vulnerability has been found in the WarnSystem cog for the Red discord bot, allowing any user to access sensitive information by setting up a specific template that is not properly sanitized...

CVE-2021-29501: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Ticketer is a command based ticket system cog plugin for the red discord bot. A vulnerability allowing discord users to expose sensitive information has been found in the Ticketer cog. Please upgrade to version 1.0.1 as soon as possible. As a workaround users may unload the ticketer cog to disabl...

Remote Code Execution in Red Discord Bot

Impact A RCE exploit has been discovered in the Trivia module: this exploit allows Discord users with specifically crafted usernames to inject code into the Trivia module's leaderboard command. By abusing this exploit, it's possible to perform destructive actions and/or access sensitive...

Xpdf CVE-2019-16115 Buffer Underflow Vulnerability

Description Xpdf is prone to a buffer-underflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to cause denial-of-service conditions. Due to the nature of this issue, arbitrary code execution may be possible but this ha...