CVE-2021-21433criticalCWE-94

CVE-2021-21433: fallo crítico en DEMON1A Discord-Recon

Remote code execution on discord-recon .dirsearch and .arjun commands due to improper input validation

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Discord-Recon

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

28Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 9.9epss 3.3%
Discord Recon Server is a bot that allows you to do your reconnaissance process from your Discord. Remote code execution in version 0.0.1 would allow remote users to execute commands on the server resulting in serious issues. This flaw is patched in 0.0.2.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H
Productos afectados
DEMON1A · Discord-Recon
CVEs relacionadas — DEMON1A Discord-Recon

En el mismo producto, de las más peligrosas a las menos.

CVE-2021-29461HIGHLFI and possible code execution on discord-recon using tools argumentsEPSS 2.6%CVE-2021-29465HIGHRemote file overwrite on discord-recon can result in DoS and Remote Code ExecutionEPSS 2.0%CVE-2021-29466MEDIUMPath Traversal at Discord-Recon .recon Command PathEPSS 1.6%CVE-2024-21663CRITICALRemote code execution on ReconServer due to improper input sanitization on the prips commandEPSS 1.5%