Intel Exchange

Browse public community intelligence reports, source analysis, and threat research.

Cover image for Node2Shell: Node.js Brotli Remote Code Execution Vulnerability

Node2Shell: Node.js Brotli Remote Code Execution Vulnerability

A high-severity out-of-bounds write vulnerability in the Node.js Brotli decoder (Node2Shell) allows remote code execution when processing malformed compressed data.

avatar
Tim Peck@timpeck23 hours ago

1 intel report

Amazon Kiro IDE Data Exfiltration via Prompt Injection

An attacker can exfiltrate sensitive local data from Amazon Kiro IDE by using malicious repository content to influence the AI agent into modifying configuration settings and triggering outbound network requests.

avatar
Ethan Andrews@eandrews
2 months ago
9