Skip to content
OpenAdvisories

Vendor

Cog-Creators

5 known vulnerabilities.

Products

Red-DiscordBot 4 Red-Dashboard 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.7
    CVE-2020-26249

    Remote Code Execution (RCE) Exploit on Cross Site Scripting (XSS) Vulnerability

    Red Discord Bot Dashboard is an easy-to-use interactive web dashboard to control your Redbot. In Red Discord Bot before version 0.1.7a an RCE exploit has been discovered. This exploit allows Discord users with specially crafted Server names and Usernames/Nick…

    Cog-Creators Red-Dashboard red-dashboard PyPI
  • High 7.7
    CVE-2020-15278

    Unauthorized privilege escalation in Mod module

    Red Discord Bot before version 3.4.1 has an unauthorized privilege escalation exploit in the Mod module. This exploit allows Discord users with a high privilege level within the guild to bypass hierarchy checks when the application is in a specific condition …

    Cog-Creators Red-DiscordBot red-discordbot PyPI
  • High 8.5
    CVE-2020-15147

    Remote Code Execution in Red Discord Bot

    Red Discord Bot before versions 3.3.12 and 3.4 has a Remote Code Execution vulnerability in the Streams module. This exploit allows Discord users with specifically crafted "going live" messages to inject code into the Streams module's going live message. By a…

    Cog-Creators Red-DiscordBot red-discordbot PyPI
  • High 8.2
    CVE-2020-15140

    Remote Code Execution in Red Discord Bot

    In Red Discord Bot before version 3.3.11, a RCE exploit has been discovered in the Trivia module: this exploit allows Discord users with specifically crafted usernames to inject code into the Trivia module's leaderboard command. By abusing this exploit, it's …

    Cog-Creators Red-DiscordBot red-discordbot PyPI