Strike

• CVE-2022-42948 ↗⚠ actively exploitedCRITICAL 9.82023

  Cobalt Strike 4.7.1 fails to properly escape HTML tags when they are displayed on Swing components. By injecting crafted HTML code, it is possible to remotely execute code in the Cobalt Strike UI.

• CVE-2022-39197 ↗⚠ actively exploitedEPSS 46%MEDIUM 6.12022

  An XSS (Cross Site Scripting) vulnerability was found in HelpSystems Cobalt Strike through 4.7 that allowed a remote attacker to execute HTML on the Cobalt Strike teamserver. To exploit the vulnerabil…

• CVE-2021-36798 ↗HIGH 7.52021

  A Denial-of-Service (DoS) vulnerability was discovered in Team Server in HelpSystems Cobalt Strike 4.2 and 4.3. It allows remote attackers to crash the C2 server thread and block beacons' communicatio…

• …and 3 more

No datasheets, whitepapers, case studies, videos, or demos linked yet.

• Staris · Staris
• Start Left® IaC Security · Start Left® Security
• Start Left® Security DAST · Start Left® Security
• Start Left™ SaaS Security Mgmt Platform · Start Left® Security
• Strobes Application Security Posture Management · Strobes Security
• Swascan · Swascan
• SySS GmbH · SySS GmbH
• Symbiotic Security · Symbiotic Security