Malicious Brotli data can make an application on an official build of Node.js run attacker-supplied code, security researchers at Imperva have demonstrated. Their "Node2Shell" proof of concept ran code on the official Node.js 24.22.0 image for Linux arm64, with no debugger or custom build, by feeding crafted data to the bundled Brotli decoder... Weiterlesen: Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using…
Intelligence View
⚡ tsecurity.de Intelligence
Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data
Malicious Brotli data can make an application on an official build of Node.js run attacker-supplied code, security researchers at Imperva have demonstrated.…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1190TA0001 · Initial Access
Exploit Public-Facing Application
Mitigation: M1042 Network Segmentation & WAF Rule Enforcement
Quelle: Kontext-Klassifikation des Artikeltextes
Initial Access
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
21 Quellen
CVE-2023-24995 | Siemens Tecnomatix Plant Simulation 16.0.5 SPP File out-of-bounds write (ssa-847261)
20 weitere Quellen
VVulDB Updates4 uur geledenCVE-2023-24993 | Siemens Tecnomatix Plant Simulation 16.0.5 SPP File out-of-bounds write (ssa-847261) VVulDB Updates4 uur geledenCVE-2023-24989 | Siemens Tecnomatix Plant Simulation 16.0.5 SPP File out-of-bounds write (ssa-847261) VVulDB Updates4 uur geledenCVE-2023-24987 | Siemens Tecnomatix Plant Simulation 16.0.5 SPP File out-of-bounds write (ssa-847261) VVulDB Updates4 uur geledenCVE-2023-24984 | Siemens Tecnomatix Plant Simulation 16.0.5 SPP File out-of-bounds write (ssa-847261) VVulDB Updates4 uur geledenCVE-2023-24981 | Siemens Tecnomatix Plant Simulation 16.0.5 SPP File out-of-bounds write (ssa-847261) VVulDB Updates4 uur geledenCVE-2023-24982 | Siemens Tecnomatix Plant Simulation 16.0.5 SPP File out-of-bounds write (ssa-847261)
+14
12 Quellen
Windows Server 2016: Das finale Support-Ende steht kurz bevor - WinFuture.de
11 weitere Quellen
WWinFuture News3 uur geledenWindows Server 2016: Das finale Support-Ende steht kurz bevor VVulDB Updates12 uur geledenCVE-2026-102208 | Microsoft Windows up to Server 2022 Win32 Kernel Subsystem use after free (EUVD-2026-100362) VVulDB Updates12 uur geledenCVE-2026-83862 | Microsoft Windows up to Server 2025 Network Load Balancing use after free (EUVD-2026-99392) VVulDB Updates12 uur geledenCVE-2026-108471 | Microsoft Windows 10 1809/Server 2019 Enclave null pointer dereference (EUVD-2026-100456) VVulDB Updates12 uur geledenCVE-2026-108136 | Microsoft Windows up to Server 2025 Search use after free (EUVD-2026-100455) VVulDB Updates12 uur geledenCVE-2026-108132 | Microsoft Windows up to Server 2025 Kerberos double free (EUVD-2026-100451)
+5
11 Quellen
CVE-2022-47758 | Nanoleaf up to 7.1.1 certificate validation (EUVD-2022-50516)
10 weitere Quellen
VVulDB Updates11 uur geledenCVE-2022-47766 | PopojiCMS 2.0.1 Backend Plugin unrestricted upload (Issue 35 / EUVD-2022-50523) VVulDB Updates11 uur geledenCVE-2022-47767 | Solar-Log Gateway up to 4.2.7/5.1.1 slcore backdoor (EUVD-2022-50524) VVulDB Updates11 uur geledenCVE-2022-47770 | Serenissima Informatica Fast Checkin 1.0 sql injection (EUVD-2022-50527) VVulDB Updates10 uur geledenCVE-2022-47780 | Bangresto 1.0 itemID sql injection (EUVD-2022-50537) VVulDB Updates10 uur geledenCVE-2022-47790 | SourceCodester Dynamic Transaction Queuing System 1.0 index.php?page=display id sql injection (EUVD-2022-50547) VVulDB Updates10 uur geledenCVE-2022-31259 | beego up to 2.0.2 Route Lookup /p1/p2/:name access control (Issue 4946 / EUVD-2022-5053)
+4
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/nl/4291954/it-beveiligingsnieuws/researchers-demonstrate-node2shell-rce-exploit-on-nodejs-build-using-crafted-brotli-data/