CVE-2021-21433: falha crítica em DEMON1A Discord-Recon
Remote code execution on discord-recon .dirsearch and .arjun commands due to improper input validation
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.9epss 3.3%
Discord Recon Server is a bot that allows you to do your reconnaissance process from your Discord. Remote code execution in version 0.0.1 would allow remote users to execute commands on the server resulting in serious issues. This flaw is patched in 0.0.2.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H
Produtos afetados
DEMON1A · Discord-ReconCVEs relacionadas — DEMON1A Discord-Recon
No mesmo produto, das mais perigosas para as menos.
CVE-2021-29461HIGHLFI and possible code execution on discord-recon using tools argumentsEPSS 2.6%CVE-2021-29465HIGHRemote file overwrite on discord-recon can result in DoS and Remote Code ExecutionEPSS 2.0%CVE-2021-29466MEDIUMPath Traversal at Discord-Recon .recon Command PathEPSS 1.6%CVE-2024-21663CRITICALRemote code execution on ReconServer due to improper input sanitization on the prips commandEPSS 1.5%