Skip to content
OpenAdvisories

Package · Go

github.com/jm33-m0/emp3r0r/core

2 known vulnerabilities.

2 results · Feed

  • High 7.5

    emp3r0r has an unauthenticated HTTP Polling DoS

    emp3r0r is a C2 designed by Linux users for Linux environments. Prior to version 4.2.5, the `http_poll` C2 transport accepts attacker-controlled HTTP polling sessions before CBOR `MsgAuth` authentication is completed. A remote unauthenticated attacker can cre…

  • High 7.0

    emp3r0r Affected by Concurrent Map Access DoS (panic/crash)

    emp3r0r is a C2 designed by Linux users for Linux environments. Prior to version 3.21.2, multiple shared maps are accessed without consistent synchronization across goroutines. Under concurrent activity, Go runtime can trigger `fatal error: concurrent map rea…