<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: cogboard</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2020-26249: Red Discord Bot Dashboard is an easy-to-use interactive web dashboard to control your Redbot</title><link>https://patchthecve.com/cve/CVE-2020-26249.html</link><guid>https://patchthecve.com/cve/CVE-2020-26249.html</guid><pubDate>Wed, 17 Jun 2026 03:07:55 +0000</pubDate><description>HIGH 7.7: Red Discord Bot Dashboard is an easy-to-use interactive web dashboard to control your Redbot. In Red Discord Bot before version 0.1.7a an RCE exploit has been discovered. This exploit allows Discord users with specially crafted Server names and Usernames/Nicknames to inject code into the webserver f</description></item><item><title>CVE-2020-15278: Red Discord Bot before version 3.4.1 has an unauthorized privilege escalation exploit in the Mod module</title><link>https://patchthecve.com/cve/CVE-2020-15278.html</link><guid>https://patchthecve.com/cve/CVE-2020-15278.html</guid><pubDate>Wed, 17 Jun 2026 02:56:24 +0000</pubDate><description>HIGH 7.7: Red Discord Bot before version 3.4.1 has an unauthorized privilege escalation exploit in the Mod module. This exploit allows Discord users with a high privilege level within the guild to bypass hierarchy checks when the application is in a specific condition that is beyond that user&#x27;s control. By ab</description></item><item><title>CVE-2020-15147: Red Discord Bot before versions 3.3.12 and 3.4 has a Remote Code Execution vulnerability in the Streams module</title><link>https://patchthecve.com/cve/CVE-2020-15147.html</link><guid>https://patchthecve.com/cve/CVE-2020-15147.html</guid><pubDate>Wed, 17 Jun 2026 02:56:08 +0000</pubDate><description>HIGH 8.5: Red Discord Bot before versions 3.3.12 and 3.4 has a Remote Code Execution vulnerability in the Streams module. This exploit allows Discord users with specifically crafted &quot;going live&quot; messages to inject code into the Streams module&#x27;s going live message. By abusing this exploit, it&#x27;s possible to per</description></item><item><title>CVE-2020-15140: In Red Discord Bot before version 3.3.11, a RCE exploit has been discovered in the Trivia module: this exploit</title><link>https://patchthecve.com/cve/CVE-2020-15140.html</link><guid>https://patchthecve.com/cve/CVE-2020-15140.html</guid><pubDate>Wed, 17 Jun 2026 02:56:07 +0000</pubDate><description>HIGH 8.2: In Red Discord Bot before version 3.3.11, a RCE exploit has been discovered in the Trivia module: this exploit allows Discord users with specifically crafted usernames to inject code into the Trivia module&#x27;s leaderboard command. By abusing this exploit, it&#x27;s possible to perform destructive actions a</description></item></channel></rss>