CVE-2023-34758High· 8.1▾ TwilightSilver vulnerable to MitM attack against implants due to a cryptography vulnerability
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 44.6 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Aug 1.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via OSV
Last analysed / modified upstream
0.6%
The current cryptography implementation in Sliver up to version 1.5.39 allows a MitM with access to the corresponding implant binary to execute arbitrary codes on implanted devices via intercepted and crafted responses. (Reserved CVE ID: CVE-2023-34758)
Please see the PoC repo.
Please also see the PoC repo. To setup a simple PoC environment,
notepad.exe window should pop up on the implanted VM.A successful attack grants the attacker permission to execute arbitrary code on the implanted device.
https://github.com/BishopFox/sliver/blob/master/implant/sliver/cryptography/implant.go
https://github.com/BishopFox/sliver/blob/master/implant/sliver/cryptography/crypto.go
https://github.com/tangent65536/Slivjacker
Ting-Wei Hsieh from CHT Security Co. Ltd.
github.com/bishopfox/sliver >= 1.5.0, < 1.5.40Upgrade to a patched release:
github.com/bishopfox/sliver 1.5.40Connected by shared product, vendor, weakness, or advisory.
CVE-2026-77622HighSliver: Unauthenticated Memory Exhaustion Denial of Service in Sliver HTTP(S) Listener PNG Decoder
CVE-2026-53649Critical· 9.6Joro is a web exploitation framework
CVE-2026-102507Medium· 5.7Sliver C2 framework version 1.7.7 and earlier contains an unhandled panic vulnerability in the operator gRPC handler that allows an attacker controlling a compromised implant to crash the entire teamserver by returning a malformed or emp…
CVE-2026-34227High· 8.8Sliver is a command and control framework that uses a custom Wireguard netstack