Skip to content
OpenAdvisories

Package · Go

github.com/txthinking/brook

1 known vulnerabilities.

1 result · Feed

  • Critical 9.7

    Brook's tproxy server is vulnerable to a drive-by command injection.

    Brook is a cross-platform programmable network tool. The `tproxy` server is vulnerable to a drive-by command injection. An attacker may fool a victim into visiting a malicious web page which will trigger requests to the local `tproxy` service leading to remot…