Vulnerabilities in BishopFox

9 results

Vexday analysis

Bishop Fox apresenta um perfil de risco baixo com 8 vulnerabilidades catalogadas, nenhuma delas sob ataque ativo ou com severidade crítica. A fraqueza predominante é autenticação insuficiente (CWE-306), típica de ferramentas de segurança, porém sem evidência de exploração recente ou em larga escala.

CVE-2024-41111HIGHBishopFox Sliver Authenticated Remote Code ExecutionEPSS 0.7%CVE-2025-27090MEDIUMServer-Side Request Forgery (SSRF) in sliver teamserverEPSS 0.6%CVE-2026-29781LOWSliver: Authenticated Nil-Pointer Dereference in HandlersEPSS 0.5%CVE-2026-25760MEDIUMWebsite Path Traversal / Arbitrary File Read (Authenticated) in SliverEPSS 0.5%CVE-2026-25791HIGHSliver has a DNS C2 OTP Bypass Allows Unauthenticated Session Flooding and Denial of ServiceEPSS 0.4%CVE-2026-34227MEDIUMSliver One-Click Remote Access: Insecure CORS & Unauthenticated MCP InterfaceEPSS 0.4%CVE-2026-32941MEDIUMSliver Vulnerable to Authenticated OOM via Memory Exhaustion in mTLS/WireGuard TransportsEPSS 0.3%CVE-2025-27093MEDIUMSliver does not restricted traffic between Wireguard clients.EPSS 0.2%CVE-2026-53649CRITICALJoro: Unauthenticated Cross-Origin Plugin Upload Leads to RCEEPSS 0.2%