Intel Exchange

Browse public community intelligence reports, source analysis, and threat research.

Cover image for Node2Shell: Node.js Brotli Remote Code Execution Vulnerability

Node2Shell: Node.js Brotli Remote Code Execution Vulnerability

A high-severity out-of-bounds write vulnerability in the Node.js Brotli decoder (Node2Shell) allows remote code execution when processing malformed compressed data.

avatar
Tim Peck@timpeck23 hours ago

82 intel reports

Russian CTRL .NET Toolkit for Persistent Access

A Russian-origin .NET remote access toolkit named CTRL uses weaponized LNK files to deploy modular payloads for credential theft, RDP session hijacking, and FRP-based reverse tunneling.

avatar
Tim Peck@timpeck
7 months ago
68
Azure Arc Windows Agent Local Privilege Escalation and Cloud Hijack

A vulnerability chain in Azure Arc for Windows allows low-privileged users to hijack service communications, escalate to SYSTEM and take over the machine's Azure cloud identity.

avatar
Tim Peck@timpeck
7 months ago
1,586
Page 9 of 9