Design/Logic Flaw

The Telnet service of Rubetek RV-3406, RV-3409, and RV-3411 cameras firmware versions v342, v339 can allow a remote attacker to gain access to RTSP and ONFIV services without authentication. Thus, the attacker can watch live streams from the camera, rotate the camera, change some settings...

CVE-2020-25747

The Telnet service of Rubetek RV-3406, RV-3409, and RV-3411 cameras firmware versions v342, v339 can allow a remote attacker to gain access to RTSP and ONFIV services without authentication. Thus, the attacker can watch live streams from the camera, rotate the camera, change some settings...

CVE-2020-25747

CVE-2020-25747 affects Rubetek RV-3406, RV-3409, and RV-3411 cameras (firmware v342, v339). The Telnet service allows remote unauthenticated access to RTSP and ONFIV services, enabling an attacker to view live streams, rotate the camera, modify settings (brightness, clarity, time), restart the de...

CVE-2020-6113

An exploitable vulnerability exists in the object stream parsing functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242 when updating its cross-reference table. When processing an object stream from a PDF document, the application will perform a calculation in order to allocate memory for...

Fedora: Security Advisory for golang-github-ulikunitz-xz (FEDORA-2020-e384830a0d)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for golang-github-ulikunitz-xz (FEDORA-2020-deff052e7a)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Huawei EulerOS: Security Advisory for libgit2 (EulerOS-SA-2020-1861)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 31 Update: golang-github-ulikunitz-xz-0.5.8-1.fc31

This Go language package supports the reading and writing of xz compressed streams. It includes also a gxz command for compressing and decompressing d ata. The package is completely written in Go and doesn't have any dependency on any C code...

[SECURITY] Fedora 32 Update: golang-github-ulikunitz-xz-0.5.8-1.fc32

This Go language package supports the reading and writing of xz compressed streams. It includes also a gxz command for compressing and decompressing d ata. The package is completely written in Go and doesn't have any dependency on any C code...

Remote Code Execution (RCE)

reddiscordbot is vulnerable to remote code execution RCE. The vulnerability exists through the value of mentionstr being formatted in the "going live" alertmsg message found in the Streams module, allowing an attacker to inject and execute arbitrary code via the affected parameter...

CVE-2020-15147

Red Discord Bot before versions 3.3.12 and 3.4 has a Remote Code Execution vulnerability in the Streams module. This exploit allows Discord users with specifically crafted "going live" messages to inject code into the Streams module's going live message. By abusing this exploit, it's possible to...

CVE-2020-15147

Red Discord Bot before versions 3.3.12 and 3.4 has a Remote Code Execution vulnerability in the Streams module. This exploit allows Discord users with specifically crafted "going live" messages to inject code into the Streams module's going live message. By abusing this exploit, it's possible to...

PYSEC-2020-266

Red Discord Bot before versions 3.3.12 and 3.4 has a Remote Code Execution vulnerability in the Streams module. This exploit allows Discord users with specifically crafted "going live" messages to inject code into the Streams module's going live message. By abusing this exploit, it's possible to...

PYSEC-2020-266

Red Discord Bot before versions 3.3.12 and 3.4 has a Remote Code Execution vulnerability in the Streams module. This exploit allows Discord users with specifically crafted "going live" messages to inject code into the Streams module's going live message. By abusing this exploit, it's possible to...

Remote code execution

Red Discord Bot before versions 3.3.12 and 3.4 has a Remote Code Execution vulnerability in the Streams module. This exploit allows Discord users with specifically crafted "going live" messages to inject code into the Streams module's going live message. By abusing this exploit, it's possible to...

CVE-2020-15147 Remote Code Execution in Red Discord Bot

Red Discord Bot before versions 3.3.12 and 3.4 has a Remote Code Execution vulnerability in the Streams module. This exploit allows Discord users with specifically crafted "going live" messages to inject code into the Streams module's going live message. By abusing this exploit, it's possible to...

CVE-2020-15147

CVE-2020-15147 affects Red Discord Bot prior to versions 3.3.12 and 3.4, where the Streams module is vulnerable to remote code execution via crafted going-live messages. The underlying issue allows an attacker (Discord user) to inject code into the Streams going-live message, enabling destructive...

Remote Code Execution in Red Discord Bot

Impact A RCE exploit has been discovered in the Streams module: this exploit allows Discord users with specifically crafted "going live" messages to inject code into the Streams module's going live message. By abusing this exploit, it's possible to perform destructive actions and/or access...

GHSA-7257-96VG-QF6X Remote Code Execution in Red Discord Bot

Impact A RCE exploit has been discovered in the Streams module: this exploit allows Discord users with specifically crafted "going live" messages to inject code into the Streams module's going live message. By abusing this exploit, it's possible to perform destructive actions and/or access...

CVE-2020-15147: Improper Control of Generation of Code

Red Discord Bot before versions 3.3.12 and 3.4 has a Remote Code Execution vulnerability in the Streams module. This exploit allows Discord users with specifically crafted "going live" messages to inject code into the Streams module's going live message. By abusing this exploit, it's possible to...