Intel Exchange

Browse public community intelligence reports, source analysis, and threat research.

Cover image for Node2Shell: Node.js Brotli Remote Code Execution Vulnerability

Node2Shell: Node.js Brotli Remote Code Execution Vulnerability

A high-severity out-of-bounds write vulnerability in the Node.js Brotli decoder (Node2Shell) allows remote code execution when processing malformed compressed data.

avatar
Tim Peck@timpeck23 hours ago

2 intel reports

Ghost CMS SQL Injection Fueling ClickFix Campaigns

Attackers are exploiting a critical SQL injection vulnerability (CVE-2026-26980) in Ghost CMS to steal Admin API keys and inject malicious JavaScript for ClickFix social engineering attacks.

avatar
Tim Peck@timpeck
4 months ago
14
Ghost CMS Exploitation and ClickFix Malware Campaign

Threat actors including Aeternum are exploiting CVE-2026-26980 in Ghost CMS to inject malicious JavaScript loaders that facilitate ClickFix social engineering attacks and malware delivery.

avatar
Tim Peck@timpeck
5 months ago
582