A critical flaw dubbed 'HTTP2Shell' in Brotli, the C decoder library built into Node.js, could allow attackers to corrupt memory and access sensitive data.
Will your skill script run as-is on a different OS?When I rebuilt my sales skill for sale, I had to re-evaluate the language ...
CISA has added the Node2Shell flaw, tracked as CVE-2026-111497, to its Known Exploited Vulnerabilities catalog. Attackers are already sending live exploit traffic at Node.js servers, so teams should ...
SafeBreach Coverage for the Actively Exploited Brotli RCE Learn how SafeBreach maps CVE-2026-111497 to simulations that test ...
An out-of-bounds write in Google’s Brotli decoder affects multiple software ecosystems, prompting security updates for .NET, Node.js and two Python packages.
PHP2Shell refers to two vulnerabilities in the PHP runtime (CVE-2026-109618 and CVE-2026-109619), each rated 9.2 (Critical) ...
When building AI agents, it doesn't end with just "making the LLM think." You eventually want to execute some kind of program ...
New research from cloud security firm Wiz reveals that 91% of cloud environments contain resources vulnerable to CVE-2026-111497, a dangerous flaw in Google’s widely-used Brotli compression technology ...
The Node2Shell vulnerability in Brotli is under active attack. Patch Node.js to 26.12.1, 24.22.1 or 22.23.4 now.
Proof-of-concept for CVE-2026-111497 in Google Brotli 1.0.3–1.2.0 (bundled inside Node.js). CVSS 4.0: 9.2 Critical. Affected: Python brotli 1.0.3–1.2.0 · Node.js 22.x < 22.23.4 · 24.x < 24.22.1 · 26.x ...
Insignary, a global open-source security company, today released insignary-chk, a free tool that checks for PHP2Shell and ...
Use this repository only with the included loopback labs or systems you are explicitly authorized to test. See AUTHORIZED_USE.md. This Express result is profile specific and probabilistic. It depends ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results