CISA warns of hackers now exploiting critical Node2Shell flaw
Teaser from the source
On Tuesday, the US Cybersecurity and Infrastructure Security Agency (CISA) confirmed that hackers have begun exploiting a critical Brotli vulnerability known as Node2Shell, Broccoli2Shell, and HTTP2Shell. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerMore on exploiting
Other advisories
- Not ratedosv:CLEANSTART-2024-SA80955By exploiting an Open Redirect vulnerability on a website, an attacker could have spoofed the site displayed in the download file dialog to show the original site (the one suffering from the open r...
- Not ratedosv:CLEANSTART-2024-VZ65902attacker with the ability to generate session IDs or password reset tokens, either by being able to authenticate or by exploiting OSA-2020-09, may be able to predict other users session IDs, passwo...
- Not ratedosv:CLEANSTART-2025-WO88765By flooding the target resolver with queries exploiting this flaw an attacker can significantly impair the resolver's performance, effectively denying legitimate clients access to the DNS resolutio...
- Not ratedosv:CLEANSTART-2024-FL99345By exploiting an Open Redirect vulnerability on a website, an attacker could have spoofed the site displayed in the download file dialog to show the original site (the one suffering from the open r...
- CriticalCVE-2026-22313The device has a webserver that exposes a REST API authenticated with a token on the management network. By exploiting an OS command injection vulnerability …
- MediumCVE-2022-41656Missing Authorization vulnerability in Bizswoop Account Manager for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.
- MediumCVE-2026-49054Missing Authorization vulnerability in Mamunur Rashid The Post Grid allows Exploiting Incorrectly Configured Access Control Security Levels.
- HighCVE-2026-48545Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform cross-Space session fixation by exploiting a s…
Other news entries
- 5 Active Cyber Threats That Put US Enterprises at Risk in October 2026NewsThe Hacker News
- CISA flags WordPress RCE flaw as actively exploited in attacksNewsBleepingComputer
- CISA Confirms Hackers Exploiting WordPress Core Flaw During Software UpgradesNewsThe Hacker News
- Synology NAS Devices Targeted in Ransomware Attacks Exploiting Patched DSM FlawNewsThe Hacker News
- CISA says max severity GitLab flaw now exploited in the wildNewsBleepingComputer
- Drupal warns of critical Commerce Core flaw exploited in attacksNewsBleepingComputer
- Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass FlawNewsThe Hacker News
- Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malwareNewsBleepingComputer
ID