Intel Exchange

Browse public community intelligence reports, source analysis, and threat research.

Cover image for Node2Shell: Node.js Brotli Remote Code Execution Vulnerability

Node2Shell: Node.js Brotli Remote Code Execution Vulnerability

A high-severity out-of-bounds write vulnerability in the Node.js Brotli decoder (Node2Shell) allows remote code execution when processing malformed compressed data.

avatar
Tim Peck@timpeck10 hours ago

2 intel reports

BPFDoor and AVERAT Target Telecom Network Edge

Adversaries are deploying modular Linux implants including BPFDoor, Rekoobe, and the new AVERAT RAT against telecom edge appliances, utilizing SMTP-disguised C2 and BPF packet filtering to evade detection.

avatar
Tim Peck@timpeck
21 days ago
9
SharePoint RCE Chain CVE-2026-55040 and CVE-2026-63520

Adversaries are chaining a JWT authentication bypass with unsafe .NET type instantiation in SharePoint's Business Connectivity Services to achieve remote code execution.

avatar
Tim Peck@timpeck
2 months ago
11