BishopFox kayıtları
bishopfox üreticisine ait 8 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %75
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-306 Missing Authentication for Critical Function2
- CWE-327 Use of a Broken or Risky Cryptographic Algorithm1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')1
- CWE-770 Allocation of Resources Without Limits or Throttling1
- CWE-918 Server-Side Request Forgery (SSRF)1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
8 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
32İzleyin | CVE-2023-34758İstismar yok | Sliver from v1.5.x to v1.5.39 has an improper cryptographic implementation, which allows attackers to execute a man-in-the-middle attack viabishopfox · sliver · CWE-327 | Yüksek8,1 | — | %0,6 | 28 Ağu 2023 |
30İzleyin | CVE-2026-25791İstismar yok | Sliver has a DNS C2 OTP Bypass Allows Unauthenticated Session Flooding and Denial of Servicebishopfox · sliver · CWE-306 | Yüksek7,5 | — | %0,5 | 9 Şub 2026 |
28İzleyin | CVE-2024-41111İstismar yok | BishopFox Sliver Authenticated Remote Code Executionbishopfox · sliver · CWE-74 | Yüksek7,2 | — | %0,7 | 18 Tem 2024 |
27İzleyin | CVE-2025-27090İstismar yok | Server-Side Request Forgery (SSRF) in sliver teamserverbishopfox · sliver · CWE-918 | Orta6,9 | — | %0,6 | 19 Şub 2025 |
26İzleyin | CVE-2026-25760İstismar yok | Website Path Traversal / Arbitrary File Read (Authenticated) in Sliverbishopfox · sliver · CWE-22 | Orta6,5 | — | %0,5 | 6 Şub 2026 |
23İzleyin | CVE-2026-34227Kavram kanıtı | Sliver One-Click Remote Access: Insecure CORS & Unauthenticated MCP Interfacebishopfox · sliver · CWE-306 | Orta5,9 | — | %0,5 | 31 Mar 2026 |
22İzleyin | CVE-2026-32941Kavram kanıtı | Sliver Vulnerable to Authenticated OOM via Memory Exhaustion in mTLS/WireGuard Transportsbishopfox · sliver · CWE-770 | Orta5,7 | — | %0,4 | 20 Mar 2026 |
8İzleyin | CVE-2026-29781Kavram kanıtı | Sliver: Authenticated Nil-Pointer Dereference in Handlersbishopfox · sliver · CWE-476 | Düşük2,1 | — | %0,5 | 7 Mar 2026 |
- CVE-2023-3475832İzleyin
Sliver from v1.5.x to v1.5.39 has an improper cryptographic implementation, which allows attackers to execute a man-in-the-middle attack via
YüksekCVSS 8,1İstismar yokEPSS %1bishopfox · sliver28 Ağu 2023
- CVE-2026-2579130İzleyin
Sliver has a DNS C2 OTP Bypass Allows Unauthenticated Session Flooding and Denial of Service
YüksekCVSS 7,5İstismar yokEPSS %1bishopfox · sliver9 Şub 2026
- CVE-2024-4111128İzleyin
BishopFox Sliver Authenticated Remote Code Execution
YüksekCVSS 7,2İstismar yokEPSS %1bishopfox · sliver18 Tem 2024
- CVE-2025-2709027İzleyin
Server-Side Request Forgery (SSRF) in sliver teamserver
OrtaCVSS 6,9İstismar yokEPSS %1bishopfox · sliver19 Şub 2025
- CVE-2026-2576026İzleyin
Website Path Traversal / Arbitrary File Read (Authenticated) in Sliver
OrtaCVSS 6,5İstismar yokEPSS %1bishopfox · sliver6 Şub 2026
- CVE-2026-3422723İzleyin
Sliver One-Click Remote Access: Insecure CORS & Unauthenticated MCP Interface
OrtaCVSS 5,9Kavram kanıtıEPSS %0bishopfox · sliver31 Mar 2026
- CVE-2026-3294122İzleyin
Sliver Vulnerable to Authenticated OOM via Memory Exhaustion in mTLS/WireGuard Transports
OrtaCVSS 5,7Kavram kanıtıEPSS %0bishopfox · sliver20 Mar 2026
- CVE-2026-297818İzleyin
Sliver: Authenticated Nil-Pointer Dereference in Handlers
DüşükCVSS 2,1Kavram kanıtıEPSS %1bishopfox · sliver7 Mar 2026