Veille live
Veille CyberInfra — Veille cybersecurite : Default ‘admin:admin’ Server Password Helps Researchers Hack Two Automakers, Unlock and Start Cars Veille CyberInfra — Veille cybersecurite : Binance denies data breach after alleged ShinyHunters claims Veille CyberInfra — Veille cybersecurite : Bitter Hackers Deploy New PapRAT Backdoor in Cyberespionage Campaign Targeting South Asia Veille CyberInfra — Veille cybersecurite : Taiwan-Based Hacker Used BOSSAI AI Agents to Steal Taipei Emergency Dispatch Records Veille CyberInfra — Veille cybersecurite : LNbits Urges All Operators to Shut Down Their Bitcoin Lightning Wallet Servers Amid Attacks Veille CyberInfra — Veille cybersecurite : Web3Auth Flaw Exploited to Steal Keplr Crypto, Provider Empties Other Wallets for Safety Veille CyberInfra — Veille cybersecurite : Default ‘admin:admin’ Server Password Helps Researchers Hack Two Automakers, Unlock and Start Cars Veille CyberInfra — Veille cybersecurite : Binance denies data breach after alleged ShinyHunters claims Veille CyberInfra — Veille cybersecurite : Bitter Hackers Deploy New PapRAT Backdoor in Cyberespionage Campaign Targeting South Asia Veille CyberInfra — Veille cybersecurite : Taiwan-Based Hacker Used BOSSAI AI Agents to Steal Taipei Emergency Dispatch Records Veille CyberInfra — Veille cybersecurite : LNbits Urges All Operators to Shut Down Their Bitcoin Lightning Wallet Servers Amid Attacks Veille CyberInfra — Veille cybersecurite : Web3Auth Flaw Exploited to Steal Keplr Crypto, Provider Empties Other Wallets for Safety

Veille cybersecurite : Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data

23/10/2026

Source : The Hacker News

Malicious Brotli data can make an application on an official build of Node.js run attacker-supplied code, security researchers at Imperva have demonstrated.

Their « Node2Shell » proof of concept ran code on the official Node.js 24.22.0 image for Linux arm64, with no debugger or custom build, by feeding crafted data to the bundled Brotli decoder (CVE-2026-111497). Node.js disclosed the flaw

Lire l’article original

Vous vous demandez si votre entreprise est exposee a ce type de faille ? Reservez un appel decouverte gratuit.

← Retour au blog