Photo: N509FZ · CC BY-SA 4.0 · Wikimedia Commons
Cybersecurity

Evolving Threat: http2shell is an RCE in node, Python, and more

A vulnerability named http2shell has been discovered in Node.js, Python, and other programming languages, allowing attackers to execute remote code on affected systems. The vulnerability affects multiple languages, including Node.js, Python, and Go, and can lead to remote code execution. Researchers at Aikido Security discovered the vulnerability and have released a proof-of-concept exploit. The exploit uses a malicious HTTP/2 server to send a specially crafted request to a vulnerable application, which can lead to code execution.

Read the full article at nitter.click →