[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"all-banners":3,"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0":75,"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU":82,"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU":88,"vulnerability-29480":95},[4,15,23,28,36,42,48,54,60,66],{"title":5,"slug":6,"text":7,"link":8,"external":9,"targets":10,"cta":12,"variant":13,"campaign_id":14},"wp2shell (Vuln DB homepage)","wp2shell-vuln-db","Emergency CVE response: detection & exploitation now available for *wp2shell*, the critical WP RCE chain","https://pentest-tools.com/vulnerabilities-exploits/wordpress-core-69-701-pre-auth-blind-sql-injection-batch-route-confusion_29451",false,[11],"/vulnerabilities-exploits/","See CVE details","secondary","wp2shell",{"title":16,"slug":17,"text":18,"link":19,"external":9,"targets":20,"cta":22,"variant":13,"campaign_id":14},"wp2shell (CVE page - exploitation)","wp2shell-cve-page-exploit","Validate wp2shell exposure & mitigation! Detect with any plan. Exploit with Pentest Suite.","https://pentest-tools.com/pricing",[21],"/vulnerabilities-exploits/wp2shell-wordpress-core-690-694-and-700-701-pre-auth-batch-route-confusion-leading-to-sql-injection_29452","Explore plans",{"title":24,"slug":25,"text":18,"link":19,"external":9,"targets":26,"cta":22,"variant":13,"campaign_id":14},"wp2shell (CVE page - detection)","wp2shell-cve-page",[27],"/vulnerabilities-exploits/wordpress-core-69-701-pre-auth-blind-sql-injection-batch-route-confusion_29451",{"title":29,"slug":30,"text":31,"link":32,"external":9,"targets":33,"cta":35,"variant":13,"campaign_id":30},"Compliance - Page Launch - Homepage","compliance-pages-launch","Turn confirmed vulnerabilities into evidence your auditor accepts. Testing requirements for DORA, NIS2, SOC 2, ISO 27001, and CRA.","https://pentest-tools.com/usage/compliance",[34],"/","Get compliance evidence",{"title":37,"slug":38,"text":39,"link":32,"external":9,"targets":40,"cta":35,"variant":13,"campaign_id":30},"Compliance - Page Launch - Sniper","compliance-pages-launch-sniper","Five compliance framework pages now reference Sniper as the source of validated exploitability evidence. See them all.",[41],"/exploit-helpers/sniper",{"title":43,"slug":44,"text":45,"link":32,"external":9,"targets":46,"cta":35,"variant":13,"campaign_id":30},"Compliance - Page Launch - Network Scanner","compliance-pages-launch-network-scanner","Scheduled scans are the spine of every compliance framework. Are you audit-ready?",[47],"/network-vulnerability-scanning/network-security-scanner-online",{"title":49,"slug":50,"text":51,"link":32,"external":9,"targets":52,"cta":35,"variant":13,"campaign_id":30},"Compliance - Page Launch - Website Scanner","compliance-pages-launch-website-scanner","Authenticated web-app scans show up in SOC 2, NIS2, and CRA Annex I. See why this is crucial for the business.",[53],"/website-vulnerability-scanning/website-scanner",{"title":55,"slug":56,"text":57,"link":32,"external":9,"targets":58,"cta":35,"variant":13,"campaign_id":30},"Compliance - Page Launch - Integrations","compliance-pages-launch-integrations","Vanta, Jira, webhooks - they all route back to DORA, NIS2, SOC 2, ISO 27001, CRA. See why this is crucial for the business.",[59],"/features/integrations",{"title":61,"slug":62,"text":63,"link":32,"external":9,"targets":64,"cta":35,"variant":13,"campaign_id":30},"Compliance - Page Launch - Advanced Pentest Reporting","compliance-pages-launch-reporting","Editable DOCX. Immutable PDF. JSON for the GRC tool. See why these formats are on every auditor's checklist.",[65],"/features/pentest-reporting",{"title":67,"slug":68,"text":69,"link":70,"external":71,"targets":72,"cta":74,"variant":13,"campaign_id":68},"Office Hours #10 - DEF CON and Black Hat","office-hours-10","[Live Office Hours, Wed Aug 26] What DEF CON and Black Hat told us about AI pentesting","https://zoom.us/webinar/register/5117815316917/WN_m3AgyHW2TxSFuHr1J5mQZA",true,[34,73],"/insights/ai-pentesting-survey","Save your spot",["Island",76],{"key":77,"params":78,"result":80},"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0",{"props":79},"{}",{"head":81},{},["Island",83],{"key":84,"params":85,"result":86},"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU",{"props":79},{"head":87},{},["Island",89],{"key":90,"params":91,"result":93},"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU",{"props":92},"{\"text-color\":\"gray\"}",{"head":94},{},{"id":96,"detectable_with":97,"vuln_details":104,"vuln_id":120,"name":121,"published":122,"updated":105},29480,{"tool":98,"engine":101},{"id":99,"name":100},1,"Network Scanner",{"id":102,"name":103},2,"Nuclei",{"id":96,"codename":105,"description":105,"severity":106,"risk_description":107,"public_description":108,"public_recommendation":109,"recommendation":105,"references":110,"cvssv3":114,"epss_score":115,"epss_percentile":116,"cve":117,"in_cisa_catalog":9,"date":119,"software_type":105,"vendor":105,"product":105,"ptt_exploit_capabilities":105},null,"critical","An unauthenticated attacker with knowledge of a valid file UUID can replace the contents of an existing Directus file, potentially leading to defacement, data tampering, or stored XSS if the file is served to other users.","Directus versions from 10.8.0 before 11.9.3 allow unauthenticated attackers to modify the contents of an existing file when a valid file UUID is known. The PATCH /files/{id} endpoint processes multipart file uploads without proper authentication, allowing file content replacement despite returning a 403 status code. This template requires a known, controlled Directus file UUID provided via the file_id variable.","Upgrade Directus to version 11.9.3 or later.",[111,112,113],"https://github.com/advisories/GHSA-mv33-9f6j-pfmc","https://github.com/directus/directus/commit/d84dcc36f75fc5c858d43746b8f9c426c38d696b","https://nvd.nist.gov/vuln/detail/CVE-2025-55746",9.3,0.01334,0.68981,[118],"CVE-2025-55746","2025-08-20T00:00:00Z","NETSCAN-NUCLEI-CVE-CVE-2025-55746","Directus - Unauthenticated File Modification","2026-07-23T00:00:00Z"]