Lucene search
+L

3 matches found

OSV
OSV
•added 2020/08/21 5:15 p.m.•17 views

PYSEC-2020-265

In Red Discord Bot before version 3.3.11, a RCE exploit has been discovered in the Trivia module: this exploit allows Discord users with specifically crafted usernames to inject code into the Trivia module's leaderboard command. By abusing this exploit, it's possible to perform destructive action...

9.6CVSS8.2AI score0.01156EPSS
SaveExploits0References2
PyPA
PyPA
•added 2020/08/21 5:15 p.m.•17 views

PYSEC-2020-265

In Red Discord Bot before version 3.3.11, a RCE exploit has been discovered in the Trivia module: this exploit allows Discord users with specifically crafted usernames to inject code into the Trivia module's leaderboard command. By abusing this exploit, it's possible to perform destructive action...

9.6CVSS7AI score0.01156EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/08/21 12:00 a.m.•4 views

CVE-2020-15140: Improper Neutralization of Special Elements in Output Used by a Downstream Component

In Red Discord Bot before version 3.3.11, a RCE exploit has been discovered in the Trivia module: this exploit allows Discord users with specifically crafted usernames to inject code into the Trivia module's leaderboard command. By abusing this exploit, it's possible to perform destructive action...

9.6CVSS5.8AI score0.01156EPSS
SaveExploits0References3
Rows per page
Query Builder