Sliver is an open source cross-platform adversary emulation/red team framework, it can be used by organizations of all sizes to perform security testing.
CVSS 4.0MEDIUM 6.9·Network·No auth·No interaction·EPSS 0.00631·Published 2025-02-19·Fixed in 1.5.43CWE-918
Sliver from v1.5.x to v1.5.39 has an improper cryptographic implementation, which allows attackers to execute a man-in-the-middle attack via intercepted and crafted responses.
CVSS 3.1HIGH 8.1·Network·No auth·No interaction·EPSS 0.00588·Published 2023-08-28·Fixed in 1.5.40CWE-327
Sliver is an open source cross-platform adversary emulation/red team framework, it can be used by organizations of all sizes to perform security testing.
CVSS 3.1HIGH 7.2·Network·High privileges·No interaction·EPSS 0.0071·Published 2024-07-18·Fixed in 1.6.0CWE-74
Sliver C2 framework version 1.7.7 and earlier contains an unhandled panic vulnerability in the operator gRPC handler that allows an attacker controlling a compromised implant to crash the entire teamserver by returning a…