漏洞标题
在discord-recon上的远程文件覆盖可能导致拒绝服务（DoS）和远程代码执行。
漏洞描述信息
在discord-recon上的远程文件覆盖可能导致拒绝服务（DoS）和远程代码执行。
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
漏洞类别
N/A
漏洞标题
Remote file overwrite on discord-recon can result in DoS and Remote Code Execution
漏洞描述信息
Discord-Recon is a bot for the Discord chat service. Versions of Discord-Recon 0.0.3 and prior contain a vulnerability in which a remote attacker is able to overwrite any file on the system with the command results. This can result in remote code execution when the user overwrite important files on the system. As a workaround, bot maintainers can edit their `setting.py` file then add `<` and `>` into the `RCE` variable inside of it to fix the issue without an update. The vulnerability is patched in version 0.0.4.
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H
漏洞类别
对生成代码的控制不恰当(代码注入)
漏洞标题
Mohamed Dief Discord-Recon 操作系统命令注入漏洞
漏洞描述信息
Mohamed Dief Discord-Recon是Mohamed Dief开源的一个应用程序。用于从Discord中执行侦察过程b。 Mohamed Dief Discord-Recon 0.0.3版本及之前版本存在操作系统命令注入漏洞，远程攻击者可利用该漏洞能够用命令结果覆盖系统上的任何文件。
CVSS信息
N/A
漏洞类别
授权问题