Skip to content
OpenAdvisories

Vendor

BishopFox

11 known vulnerabilities.

Products

sliver 10 joro 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.2
    CVE-2026-77622 Public exploit

    Sliver: Unauthenticated Memory Exhaustion Denial of Service in Sliver HTTP(S) Listener PNG Decoder

    Sliver is a command and control framework. Prior to 1.7.6, an HTTP(S) listener using the PNG encoder accepts attacker-controlled PNG dimensions without an effective decoded-size or pixel limit in util/encoders/images.go, while the listener nonce space impleme…

    BishopFox sliver github.com/bishopfox/sliver Go
  • High 7.5
    CVE-2026-25791

    Sliver has a DNS C2 OTP Bypass Allows Unauthenticated Session Flooding and Denial of Service

    Sliver is a command and control framework that uses a custom Wireguard netstack. Prior to 1.7.0, the DNS C2 listener accepts unauthenticated TOTP bootstrap messages and allocates server-side DNS sessions without validating OTP values, even when EnforceOTP is …

    BishopFox sliver github.com/bishopfox/sliver Go
  • High 7.2
    CVE-2024-41111

    BishopFox Sliver Authenticated Remote Code Execution

    Sliver is an open source cross-platform adversary emulation/red team framework, it can be used by organizations of all sizes to perform security testing. Sliver version 1.6.0 (prerelease) is vulnerable to RCE on the teamserver by a low-privileged "operator" u…

    BishopFox sliver github.com/bishopfox/sliver Go