Lucene search
+L

4 matches found

osv_pysec
osv_pysec
•added 2020/08/21 5:15 p.m.•28 views

PYSEC-2020-265

In Red Discord Bot before version 3.3.11, a RCE exploit has been discovered in the Trivia module: this exploit allows Discord users with specifically crafted usernames to inject code into the Trivia module's leaderboard command. By abusing this exploit, it's possible to perform destructive action...

9.6CVSS8.2AI score0.01156EPSS
SaveExploits0References2
PyPA
PyPA
•added 2020/08/21 5:15 p.m.•24 views

PYSEC-2020-265

In Red Discord Bot before version 3.3.11, a RCE exploit has been discovered in the Trivia module: this exploit allows Discord users with specifically crafted usernames to inject code into the Trivia module's leaderboard command. By abusing this exploit, it's possible to perform destructive action...

9.6CVSS7AI score0.01156EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2020/08/21 4:40 p.m.•13 views

CVE-2020-15140

In Red Discord Bot before version 3.3.11, a RCE exploit has been discovered in the Trivia module: this exploit allows Discord users with specifically crafted usernames to inject code into the Trivia module's leaderboard command. By abusing this exploit, it's possible to perform destructive action...

9.6CVSS0.01156EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/08/21 12:00 a.m.•9 views

CVE-2020-15140: Improper Neutralization of Special Elements in Output Used by a Downstream Component

In Red Discord Bot before version 3.3.11, a RCE exploit has been discovered in the Trivia module: this exploit allows Discord users with specifically crafted usernames to inject code into the Trivia module's leaderboard command. By abusing this exploit, it's possible to perform destructive action...

9.6CVSS5.8AI score0.01156EPSS
SaveExploits0References3
Rows per page
Query Builder