Browse public community intelligence reports, source analysis, and threat research.
3 intel reports
A high-severity out-of-bounds write vulnerability in the Node.js Brotli decoder (Node2Shell) allows remote code execution when processing malformed compressed data.
A critical pre-authentication vulnerability chain in WordPress Core allows attackers to escalate a reflected XSS into full RCE by abusing administrative application password flows.
The XSS2Shell (CVE-2026-64638) chain exploits a parser differential in WordPress Core to achieve unauthenticated reflected XSS, which can be escalated to full remote code execution through DOM clobbering and Same-Origin Method Execution.
