Node2Shell / HTTP2Shell (CVE-2026-111497): Brotli Library RCE
On October 21, 2026, Node.js fixed CVE-2026-111497, a critical vulnerability now known as Node2Shell and, since October 24,…
Tag
Zero-Day Vulnerability
12 articles
PHP2Shell (CVE-2026-109618 & CVE-2026-109619): Pre-Auth RCE in PHP Core Puts Web Servers at Risk
PHP2Shell abuses PHP’s session upload progress feature. Learn the signs of exploitation, php.ini hardening steps, and how AppTrana…
Windows Shell Zero-Day and 1,413 Fixes: Microsoft October 2026 Security Update
Microsoft’s October 2026 Patch Tuesday fixes 1,413 vulnerabilities, including exploited Windows Shell zero-day CVE-2026-96951. See AppTrana coverage.
CVE-2026-35273: ShinyHunters Resumes Oracle PeopleSoft Exploitation with WAF Bypass
ShinyHunters now bypasses WAF rules to exploit Oracle PeopleSoft CVE-2026-35273. See the new attack chain, detection steps, and…
Oracle’s July 2026 CPU: Critical Unauth Vulnerabilities in PeopleSoft, WebLogic, and E-Business Suite
Oracle's largest-ever CPU patches critical unauthenticated flaws in PeopleSoft, WebLogic, and E-Business Suite. See AppTrana's coverage for each.
CVE-2025-59287: Critical WSUS Vulnerability Exploited in the Wild
Critical WSUS RCE (CVE-2025-59287) actively exploited. Learn how to patch WSUS, detect compromise, and stop lateral movement with…
Cl0p Exploits Critical Oracle E-Business Suite Zero-Day (CVE-2025-61882)
Critical Oracle EBS zero-day (CVE-2025-61882) exploited by Cl0p allows RCE, data theft, and persistent access impacts 12.2.0–12.2.14 and…
Credential Coercion Vulnerabilities in Ivanti Endpoint Manager
Discover how AppTrana WAAP blocked credential coercion vulnerabilities in Ivanti Endpoint Manager, providing proactive day 0 security against…
![Zero-day Vulnerability – Examples, Detection & Prevention [+ Monthly 0-day Reports]](https://www.indusface.com/wp-content/uploads/2014/07/What-is-Zero-Day-Vulnerability-1-768x308.png)
Zero-day Vulnerability – Examples, Detection & Prevention [+ Monthly 0-day Reports]
Zero-day vulnerabilities refer to unpatched flaws exploited by attackers before fixes, posing significant security risks to both software…
What is a Zero-Day Exploit?
As cybercrime is rising by the hour, security is a huge concern for everyone today. One of the…
Apache Web Server Path Traversal and File Disclosure Vulnerability (CVE-2021-41773)
What is the CVE-2021-41773 vulnerability? Apache Software has released the fix for zero-day vulnerability in the Apache HTTP…
New Zero-Day Vulnerability found in Internet Explorer: Targeting Versions 6 to 11
New critical zero-day vulnerability found in Internet Explorer 6 to 11- this is the news that we woke…