https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 22:48:47 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-25233 EUVD-2026-25233 https://cve.radiocsirt.org/vuln/euvd-2026-25233 https://cve.radiocsirt.org/vuln/fkie_cve-2021-26918 <p>The ProBot bot through 2021-02-08 for Discord might allow attackers to interfere with the intended purpose of the &#34;Send an image when a user joins the server&#34; feature (or possibly have unspecified other impact) because the uploader web service allows double extensions (such as .html.jpg) with the text/html content type. NOTE: there may not be cases in which an uploader web service is customer controlled; however, the nature of the issue has substantial interaction with customer controlled configuration. NOTE: the vendor states &#34;This is just an uploader (like any other one) which uploads files to cloud storage and accepts various file types. There is no kind of vulnerability and it won&#39;t compromise either the client side or the server side.</p> <p>The ProBot bot through 2021-02-08 for Discord might allow attackers to interfere with the intended purpose of the &#34;Send an image when a user joins the server&#34; feature (or possibly have unspecified other impact) because the uploader web service allows double extensions (such as .html.jpg) with the text/html content type. NOTE: there may not be cases in which an uploader web service is customer controlled; however, the nature of the issue has substantial interaction with customer controlled configuration. NOTE: the vendor states &#34;This is just an uploader (like any other one) which uploads files to cloud storage and accepts various file types. There is no kind of vulnerability and it won&#39;t compromise either the client side or the server side.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-26918 https://cve.radiocsirt.org/vuln/ghsa-ghmj-xphc-2mq4 <p>The ProBot bot through 2021-02-08 for Discord might allow attackers to interfere with the intended purpose of the &#34;Send an image when a user joins the server&#34; feature (or possibly have unspecified other impact) because the uploader web service allows double extensions (such as .html.jpg) with the text/html content type. NOTE: there may not be cases in which an uploader web service is customer controlled; however, the nature of the issue has substantial interaction with customer controlled configuration.</p> <p>The ProBot bot through 2021-02-08 for Discord might allow attackers to interfere with the intended purpose of the &#34;Send an image when a user joins the server&#34; feature (or possibly have unspecified other impact) because the uploader web service allows double extensions (such as .html.jpg) with the text/html content type. NOTE: there may not be cases in which an uploader web service is customer controlled; however, the nature of the issue has substantial interaction with customer controlled configuration.</p> https://cve.radiocsirt.org/vuln/ghsa-ghmj-xphc-2mq4 https://cve.radiocsirt.org/vuln/gsd-2021-26918 gsd-2021-26918 https://cve.radiocsirt.org/vuln/gsd-2021-26918