CVE-2021-21433criticalCWE-94

CVE-2021-21433: critical vulnerability in DEMON1A Discord-Recon

Remote code execution on discord-recon .dirsearch and .arjun commands due to improper input validation

Published · Updated

Follow this CVE+ Monitor Discord-Recon

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.9epss 3.3%
Discord Recon Server is a bot that allows you to do your reconnaissance process from your Discord. Remote code execution in version 0.0.1 would allow remote users to execute commands on the server resulting in serious issues. This flaw is patched in 0.0.2.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H
Affected products
DEMON1A · Discord-Recon
Related CVEs — DEMON1A Discord-Recon

In the same product, most dangerous first.

CVE-2021-29461HIGHLFI and possible code execution on discord-recon using tools argumentsEPSS 2.6%CVE-2021-29465HIGHRemote file overwrite on discord-recon can result in DoS and Remote Code ExecutionEPSS 2.0%CVE-2021-29466MEDIUMPath Traversal at Discord-Recon .recon Command PathEPSS 1.6%CVE-2024-21663CRITICALRemote code execution on ReconServer due to improper input sanitization on the prips commandEPSS 1.5%