[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"all-banners":3,"vulnerability-27524":86,"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0":120,"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU":127,"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU":133},[4,13,23,35,43,50,57,65,70,75,79],{"title":5,"slug":6,"text":7,"link":8,"external":9,"targets":10,"cta":8,"variant":12,"priority":12,"campaign_id":6},"PHP2Shell, Node2Shell, *sshole detections - pricing page","node2shell-exploit","Detect PHP2Shell, Node2Shell & *sshole with every paid plan.",null,false,[11],"\u002Fpricing","secondary",{"title":14,"slug":15,"text":16,"link":17,"external":18,"targets":19,"cta":22,"variant":12,"priority":12,"campaign_id":15},"Office Hours #15","office-hours-15","[Live Office Hours, Wed Nov 18] Behind the login, beyond the scan","https:\u002F\u002Fzoom.us\u002Fwebinar\u002Fregister\u002F5117815316917\u002FWN_BUp1qET2THa_5h65whpx9g",true,[20,21],"\u002Fwebinars\u002Foffice-hours","\u002Fwebinars","Save your spot",{"title":24,"slug":25,"text":26,"link":27,"external":9,"targets":28,"cta":34,"variant":12,"priority":12,"campaign_id":25},"*sshole, PHP2Shell & Node2Shell - HP, Vuln DB, product page","sshole-detect-exploit","🚨 Detect *sshole & Node2Shell with any paid plan. Get proof with our Sniper exploit","https:\u002F\u002Fpentest-tools.com\u002Fpricing",[29,30,31,32,33],"\u002F","\u002Fvulnerabilities-exploits","\u002Fvulnerabilities-exploits\u002Fopenssh-musl-authentication-bypass-cve-2026-123158-sshole_29981","\u002Fvulnerabilities-exploits\u002Fnode2shell-http2shell-brotli-decoder-remote-code-execution_29896","\u002Fproduct","See pricing options",{"title":36,"slug":37,"text":38,"link":27,"external":9,"targets":39,"cta":41,"variant":12,"priority":12,"campaign_id":42},"*sshole - Exploit on Sniper: Auto-Exploiter page","sshole-exploit-sniper","🚨 Exclusive exploit for *sshole now live",[40],"\u002Fexploit-helpers\u002Fsniper","Use it with the Exploit plan","sshole-exploit",{"title":44,"slug":45,"text":46,"link":27,"external":18,"targets":47,"cta":49,"variant":12,"priority":12,"campaign_id":42},"*sshole exploit - Exploit on the NS page","sshole-exploit-ns","🚨 Go beyond *sshole detection: get proof of exploitation",[48],"\u002Fnetwork-vulnerability-scanning\u002Fnetwork-security-scanner-online","Pick the Exploit plan",{"title":51,"slug":52,"text":53,"link":27,"external":18,"targets":54,"cta":34,"variant":12,"priority":12,"campaign_id":42},"*sshole exploit - WS, free tools","sshole-exploit-mainpw","Detect *sshole with every paid plan. Prove it with Exploit.",[55,56],"\u002Fwebsite-vulnerability-scanning\u002Fwebsite-scanner","\u002Ffor\u002Ffree",{"title":58,"slug":59,"text":60,"link":27,"external":9,"targets":61,"cta":34,"variant":63,"priority":64,"campaign_id":59},"Apache HTTP\u002F2 RCE - HP, Vuln DB, product page","apache-rce-detection","🚨 Detect CVE-2026-119618 (Apache HTTP\u002F2 RCE) on your servers with any paid plan",[29,30,33,62],"\u002Fvulnerabilities-exploits\u002Fapache-http-server-race-condition_30011","primary","main",{"title":66,"slug":59,"text":67,"link":27,"external":18,"targets":68,"cta":69,"variant":63,"priority":64,"campaign_id":59},"Apache RCE detection - Detection on the NS page","🚨 Now in every paid plan: detection for CVE-2026-119618 (Apache HTTP\u002F2 RCE)",[48],"Pick your plan",{"title":71,"slug":59,"text":72,"link":27,"external":9,"targets":73,"cta":34,"variant":63,"priority":64,"campaign_id":59},"Apache HTTP\u002F2 RCE - Port Scanner page","🚨 Found Apache on your web ports? Check it for CVE-2026-119618 with any paid plan",[74],"\u002Fnetwork-vulnerability-scanning\u002Fport-scanner-online-nmap",{"title":76,"slug":59,"text":77,"link":27,"external":18,"targets":78,"cta":34,"variant":63,"priority":64,"campaign_id":59},"Apache RCE detection - WS, free tools","🚨 Running your web app on Apache? Detect CVE-2026-119618 (HTTP\u002F2 RCE) with any paid plan",[55,56],{"title":80,"slug":59,"text":81,"link":27,"external":9,"targets":82,"cta":85,"variant":63,"priority":64,"campaign_id":59},"Apache HTTP\u002F2 RCE - URL fuzzer, Subdomain Finder","🚨 PHP2Shell, Node2Shell, *sshole & CVE-2026-119618 (Apache) detection in every paid plan, with unlimited rescans for patch validation",[83,84],"\u002Fwebsite-vulnerability-scanning\u002Fdiscover-hidden-directories-and-files","\u002Finformation-gathering\u002Ffind-subdomains-of-domain","Find out with any plan",{"id":87,"detectable_with":88,"vuln_details":95,"vuln_id":117,"name":118,"published":119,"updated":8},27524,{"tool":89,"engine":92},{"id":90,"name":91},1,"Network Scanner",{"id":93,"name":94},3,"OpenVAS",{"id":87,"codename":8,"description":8,"severity":96,"risk_description":97,"public_description":98,"public_recommendation":99,"recommendation":8,"references":100,"cvssv3":110,"epss_score":111,"epss_percentile":112,"cve":113,"in_cisa_catalog":9,"date":116,"software_type":8,"vendor":8,"product":8,"ptt_exploit_capabilities":8},"high","A mismatch caused by client-triggered server-sent stream resets between HTTP\u002F2 specifications and the internal architectures of some HTTP\u002F2 implementations may result in excessive server resource consumption leading to denial-of-service (DoS). By opening streams and then rapidly triggering the server to reset them, using malformed frames or flow control errors, an attacker can exploit incorrect stream accounting. Streams reset by the server are considered closed at the protocol level, even though backend processing continues. This allows a client to cause the server to handle an unbounded number of concurrent streams on a single connection.","Apache Tomcat is prone to is prone to a denial of service (DoS) vulnerability in the HTTP\u002F2 protocol dubbed MadeYouReset.","Update to version 9.0.108, 10.1.44, 11.0.10 or later.",[101,102,103,104,105,106,107,108,109],"https:\u002F\u002Flists.apache.org\u002Fthread\u002F9ydfg0xr0tchmglcprhxgwhj0hfwxlyf","https:\u002F\u002Flists.apache.org\u002Fthread\u002Fp09775q0rd185m6zz98krg0fp45j8kr0","https:\u002F\u002Ftomcat.apache.org\u002Fsecurity-9.html#Fixed_in_Apache_Tomcat_9.0.108","https:\u002F\u002Ftomcat.apache.org\u002Fsecurity-10.html#Fixed_in_Apache_Tomcat_10.1.44","https:\u002F\u002Ftomcat.apache.org\u002Fsecurity-11.html#Fixed_in_Apache_Tomcat_11.0.10","https:\u002F\u002Fgalbarnahum.com\u002Fposts\u002Fmade-you-reset-intro","https:\u002F\u002Fdeepness-lab.org\u002Fpublications\u002Fmadeyoureset\u002F","https:\u002F\u002Fkb.cert.org\u002Fvuls\u002Fid\u002F767506","https:\u002F\u002Fthehackernews.com\u002F2025\u002F08\u002Fnew-http2-madeyoureset-vulnerability.html",7.5,0.03768,0.90058,[114,115],"CVE-2025-8671","CVE-2025-48989","2025-08-13T00:00:00Z","NETSCAN-OPENVAS-1.3.6.1.4.1.25623.1.0.171673","Apache Tomcat HTTP\u002F2 Protocol DoS Vulnerability (MadeYouReset) - Windows","2025-08-19T00:00:00Z",["Island",121],{"key":122,"params":123,"result":125},"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0",{"props":124},"{}",{"head":126},{},["Island",128],{"key":129,"params":130,"result":131},"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU",{"props":124},{"head":132},{},["Island",134],{"key":135,"params":136,"result":138},"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU",{"props":137},"{\"text-color\":\"gray\"}",{"head":139},{}]