Skip to content
Threat Feed
Subscribe

Tag

C2-Infrastructure

2 briefs RSS
medium threat

Sliver Unauthenticated Memory Exhaustion DoS in PNG Decoder

Sliver is vulnerable to a denial-of-service attack due to a lack of size constraints during PNG image decoding in its HTTP(S) listener, allowing unauthenticated attackers to exhaust server memory.

Sliver BishopFox denial-of-service vulnerability c2-infrastructure
1t
critical advisory

CVE-2026-92717 Authentication Bypass in Covenant

Covenant versions 0.6 and earlier contain an authentication bypass vulnerability allowing unauthenticated remote actors to gain full operator API access via the CovenantHub SignalR hub.

Covenant authentication-bypass c2-infrastructure cve-2026-92717
1t 1c