Intel Exchange

Browse public community intelligence reports, source analysis, and threat research.

Cover image for Node2Shell: Node.js Brotli Remote Code Execution Vulnerability

Node2Shell: Node.js Brotli Remote Code Execution Vulnerability

A high-severity out-of-bounds write vulnerability in the Node.js Brotli decoder (Node2Shell) allows remote code execution when processing malformed compressed data.

avatar
Tim Peck@timpeck12 days ago

2 intel reports

Critical Unpatched Citrix NetScaler RCE Zero-Days Exploited

Unauthenticated remote code execution vulnerabilities in Citrix NetScaler ADC and Gateway are being actively exploited in the wild to deploy webshells and steal credentials.

Vikas Lokhande@vlokhande
21 days ago
351
SharePoint Pre-Auth RCE via EditingPageParser Type-Check Bypass

Exploitation of CVE-2026-65660 allows unauthenticated attackers to achieve Remote Code Execution on SharePoint servers by bypassing SafeControls type-checks using attribute injection in ToolPane markup.

avatar
Ankit Mehta@Secvyn
2 months ago
18