[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"all-banners":3,"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0":61,"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU":68,"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU":74,"vulnerability-29589":81},[4,31,38,46,55],{"title":5,"slug":6,"text":7,"link":8,"external":9,"targets":10,"cta":29,"variant":30,"campaign_id":6},"PHP2Shell detection - top pages, pricing CTA","php2shell-rce","🚨 Detect PHP2Shell with any paid plan. Get proof now","https:\u002F\u002Fpentest-tools.com\u002Fpricing",true,[11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28],"\u002F","\u002Fport-scanner-online-nmap","\u002Fwebsite-vulnerability-scanning\u002Fwebsite-scanner","\u002Ffind-subdomains-of-domain","\u002Fdiscover-hidden-directories-and-files","\u002Fvulnerabilities-exploits\u002Fphp2shell-remote-code-execution-cve-2026-109618-and-cve-2026-109619_29870","\u002Fvulnerabilities-exploits","\u002Fproduct","\u002Ffor\u002Ffree","\u002Ffeatures\u002Fattack-surface","\u002Ffeatures\u002Fauthenticated-web-app-scanning","\u002Ffeatures\u002Finternal-network-scanning","\u002Ffeatures\u002Fvulnerability-monitoring","\u002Ffeatures\u002Fvulnerability-assessment-reporting","\u002Ffeatures\u002Fpentest-reporting","\u002Fsolutions\u002Ffor-it-teams","\u002Fsolutions\u002Ffor-msps","\u002Fsolutions\u002Ffor-security-teams","See pricing options","secondary",{"title":32,"slug":33,"text":34,"link":8,"external":9,"targets":35,"cta":37,"variant":30,"campaign_id":6},"PHP2Shell detection - NetScan on the NS page","php2shell-rce-netscan","🚨 Detect PHP2Shell with NetScan (from $96\u002Fmo for 16 assets)",[36],"\u002Fnetwork-vulnerability-scanning\u002Fnetwork-security-scanner-online","Pick NetScan",{"title":39,"slug":40,"text":41,"link":42,"external":43,"targets":44,"cta":42,"variant":30,"campaign_id":6},"PHP2Shell detection - pricing page","php2shell-rce-pricing","PHP2Shell detection live in every paid plan, incl. unlimited rescans for patch validation",null,false,[45],"\u002Fpricing",{"title":47,"slug":48,"text":49,"link":50,"external":9,"targets":51,"cta":54,"variant":30,"campaign_id":48},"Office Hours #14","office-hours-14","[Live Office Hours, Wed Oct 28] Check, patch, prove: PHP2Shell and other critical CVEs","https:\u002F\u002Fzoom.us\u002Fwebinar\u002Fregister\u002F5117815316917\u002FWN_xbwerEx9QFSjfNWIHcjtHw",[52,53],"\u002Fwebinars\u002Foffice-hours","\u002Fwebinars","Save your spot",{"title":56,"slug":57,"text":58,"link":8,"external":9,"targets":59,"cta":29,"variant":30,"campaign_id":6},"PHP2Shell detection - WP Scanner","php2shell-rce-pricing-1","Detect PHP2Shell with the WP Scanner! Available with every paid plan",[60],"\u002Fcms-vulnerability-scanning\u002Fwordpress-scanner-online-wpscan",["Island",62],{"key":63,"params":64,"result":66},"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0",{"props":65},"{}",{"head":67},{},["Island",69],{"key":70,"params":71,"result":72},"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU",{"props":65},{"head":73},{},["Island",75],{"key":76,"params":77,"result":79},"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU",{"props":78},"{\"text-color\":\"gray\"}",{"head":80},{},{"id":82,"detectable_with":83,"vuln_details":90,"vuln_id":97,"name":98,"published":99,"updated":42},29589,{"tool":84,"engine":87},{"id":85,"name":86},1,"Network Scanner",{"id":88,"name":89},2,"Nuclei",{"id":82,"codename":42,"description":42,"severity":91,"risk_description":92,"public_description":93,"public_recommendation":94,"recommendation":42,"references":95,"cvssv3":42,"epss_score":42,"epss_percentile":42,"cve":42,"in_cisa_catalog":43,"date":42,"software_type":42,"vendor":42,"product":42,"ptt_exploit_capabilities":42},"medium","The risk exists that an attacker can use the vulnerability identified to perform further attacks on the server.","An open redirect vulnerability exists in BentoML v1.3.9, where the file parameter in the \u002Fui\u002Fgradio_api\u002Ffile= endpoint can be manipulated to redirect users to malicious websites. This could facilitate phishing attacks by tricking users into visiting attacker-controlled URLs.","Update BentoML to a version newer than v1.3.9.",[96],"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F2a284ff6-cc6c-4a10-b72e-1bb31c842bca","NETSCAN-NUCLEI-VULNERABILITIES-BENTOML-OPEN-REDIRECT","BentoML v1.3.9 - Open Redirect","2026-08-17T00:00:00Z"]