Intel Exchange

Browse public community intelligence reports, source analysis, and threat research.

Cover image for Node2Shell: Node.js Brotli Remote Code Execution Vulnerability

Node2Shell: Node.js Brotli Remote Code Execution Vulnerability

A high-severity out-of-bounds write vulnerability in the Node.js Brotli decoder (Node2Shell) allows remote code execution when processing malformed compressed data.

avatar
Tim Peck@timpeck19 hours ago

13 intel reports

ShinyHunters Exploits PeopleSoft Servers in Data Theft

The ShinyHunters extortion group is targeting Oracle PeopleSoft instances globally using a zero-day vulnerability (CVE-2026-35273) and credential spraying to steal data.

avatar
Ethan Andrews@eandrews
4 months ago
83
ShinyHunters Exploits PeopleSoft Zero-Day CVE-2026-35273

The ShinyHunters extortion group (UNC6240) is exploiting a critical remote code execution zero-day in Oracle PeopleSoft to breach over 100 organizations, primarily in the education sector.

avatar
Subash Ghimire@iamsubashg
4 months ago
26
UNC6240 ShinyHunters Exploiting Oracle PeopleSoft Zero-Day

UNC6240 (ShinyHunters) exploited CVE-2026-35273 as a zero-day to target Oracle PeopleSoft infrastructure, primarily in the higher education sector, for data exfiltration and extortion.

avatar
Tim Peck@timpeck
5 months ago
23
Page 2 of 2