[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"all-banners":3,"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0":67,"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU":74,"vulnerability-29883":80,"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU":108},[4,29,36,44,53,59],{"title":5,"slug":6,"text":7,"link":8,"external":9,"targets":10,"cta":27,"variant":28,"campaign_id":6},"PHP2Shell detection - top pages, pricing CTA","php2shell-rce","🚨 Detect PHP2Shell with any paid plan. Get proof now","https:\u002F\u002Fpentest-tools.com\u002Fpricing",true,[11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26],"\u002F","\u002Fport-scanner-online-nmap","\u002Fwebsite-vulnerability-scanning\u002Fwebsite-scanner","\u002Ffind-subdomains-of-domain","\u002Fdiscover-hidden-directories-and-files","\u002Fvulnerabilities-exploits\u002Fphp2shell-remote-code-execution-cve-2026-109618-and-cve-2026-109619_29870","\u002Ffor\u002Ffree","\u002Ffeatures\u002Fattack-surface","\u002Ffeatures\u002Fauthenticated-web-app-scanning","\u002Ffeatures\u002Finternal-network-scanning","\u002Ffeatures\u002Fvulnerability-monitoring","\u002Ffeatures\u002Fvulnerability-assessment-reporting","\u002Ffeatures\u002Fpentest-reporting","\u002Fsolutions\u002Ffor-it-teams","\u002Fsolutions\u002Ffor-msps","\u002Fsolutions\u002Ffor-security-teams","See pricing options","secondary",{"title":30,"slug":31,"text":32,"link":8,"external":9,"targets":33,"cta":35,"variant":28,"campaign_id":6},"PHP2Shell detection - NetScan on the NS page","php2shell-rce-netscan","🚨 Detect PHP2Shell with NetScan (from $96\u002Fmo for 16 assets)",[34],"\u002Fnetwork-vulnerability-scanning\u002Fnetwork-security-scanner-online","Pick NetScan",{"title":37,"slug":38,"text":39,"link":40,"external":41,"targets":42,"cta":40,"variant":28,"campaign_id":6},"PHP2Shell & Node2Shell detection - pricing page","php2shell-rce-pricing","PHP2Shell & Node2Shell detection live in every paid plan (unlimited rescans for patch validation)",null,false,[43],"\u002Fpricing",{"title":45,"slug":46,"text":47,"link":48,"external":9,"targets":49,"cta":52,"variant":28,"campaign_id":46},"Office Hours #14","office-hours-14","[Live Office Hours, Wed Oct 28] Check, patch, prove: PHP2Shell and other critical CVEs","https:\u002F\u002Fzoom.us\u002Fwebinar\u002Fregister\u002F5117815316917\u002FWN_xbwerEx9QFSjfNWIHcjtHw",[50,51],"\u002Fwebinars\u002Foffice-hours","\u002Fwebinars","Save your spot",{"title":54,"slug":55,"text":56,"link":8,"external":9,"targets":57,"cta":27,"variant":28,"campaign_id":6},"PHP2Shell detection - WP Scanner","php2shell-rce-pricing-1","Detect PHP2Shell with the WP Scanner! Available with every paid plan",[58],"\u002Fcms-vulnerability-scanning\u002Fwordpress-scanner-online-wpscan",{"title":60,"slug":61,"text":62,"link":8,"external":9,"targets":63,"cta":27,"variant":28,"campaign_id":61},"Node2Shell detection - Vuln DB homepage, product, CVE page","node2shell","🚨 Detect Node2Shell with any paid plan. Get proof now",[64,65,66],"\u002Fvulnerabilities-exploits","\u002Fproduct","\u002Fvulnerabilities-exploits\u002Fnode2shell-brotli-decoder-remote-code-execution_29896",["Island",68],{"key":69,"params":70,"result":72},"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0",{"props":71},"{}",{"head":73},{},["Island",75],{"key":76,"params":77,"result":78},"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU",{"props":71},{"head":79},{},{"id":81,"detectable_with":82,"vuln_details":89,"vuln_id":105,"name":106,"published":107,"updated":40},29883,{"tool":83,"engine":86},{"id":84,"name":85},1,"Network Scanner",{"id":87,"name":88},2,"Nuclei",{"id":81,"codename":40,"description":40,"severity":90,"risk_description":91,"public_description":92,"public_recommendation":93,"recommendation":40,"references":94,"cvssv3":98,"epss_score":99,"epss_percentile":100,"cve":101,"in_cisa_catalog":41,"date":103,"software_type":40,"vendor":104,"product":104,"ptt_exploit_capabilities":40},"critical","The risk exists that a remote unauthenticated attacker can fully compromise the server to steal confidential information, install ransomware, or pivot to the internal network.","Bricksforge WordPress plugin versions up to and including 3.1.8.9 are vulnerable to unauthenticated arbitrary file upload leading to remote code execution. An attacker obtains a wp_rest nonce via the bricksforge_regenerate_nonce AJAX action, uploads a GIF\u002FPHP polyglot through the form_file_upload REST endpoint with the nonce in the X-WP-Nonce header, then triggers form_submit to copy the file to the WordPress media uploads directory where it executes as PHP. Requires a published Bricks Pro Form with a file field on the target; the post_id, form_id, and field_id template variables must be set accordingly.","Update Bricksforge to version 3.1.8.10, 4.0.1, or later.",[95,96,97],"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-85097","https:\u002F\u002Fgithub.com\u002FBlackHatExploitation\u002FCVE-2026-85097","https:\u002F\u002Fpatchstack.com\u002Farticles\u002Fcritical-unauthenticated-arbitrary-file-upload-vulnerability-exploited-in-bricksforge-plugin\u002F",9.8,0.03287,0.88387,[102],"CVE-2026-85097","2026-10-08T00:00:00Z","bricksforge","NETSCAN-NUCLEI-CVE-CVE-2026-85097","Bricksforge WordPress Plugin \u003C=3.1.8.9 - Unauthenticated Arbitrary File Upload","2026-10-22T00:00:00Z",["Island",109],{"key":110,"params":111,"result":113},"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU",{"props":112},"{\"text-color\":\"gray\"}",{"head":114},{}]