txthinking vulnerabilities

Products

• github.com/txthinking/brook 1

Latest txthinking CVEs

Newest publication first

1. CVE-2023-33965 Brook's tproxy server is vulnerable to a drive-by command injection.

   Published 2023-06-01

   High·CVSS 8.8

   Brook is a cross-platform programmable network tool. The tproxy server is vulnerable to a drive-by command injection. An attacker may fool a victim into visiting a malicious web page which will trigger requests to the local tproxy service leading to remote code execution. A patch...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.