[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"all-banners":3,"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0":67,"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU":74,"vulnerability-27509":80,"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU":106},[4,15,24,32,40,47],{"title":5,"slug":6,"text":7,"link":8,"external":9,"targets":10,"cta":13,"variant":14,"campaign_id":6},"Office Hours #14","office-hours-14","[Live Office Hours, Wed Oct 28] Check, patch, prove: PHP2Shell and other critical CVEs","https:\u002F\u002Fzoom.us\u002Fwebinar\u002Fregister\u002F5117815316917\u002FWN_xbwerEx9QFSjfNWIHcjtHw",true,[11,12],"\u002Fwebinars\u002Foffice-hours","\u002Fwebinars","Save your spot","secondary",{"title":16,"slug":17,"text":18,"link":19,"external":9,"targets":20,"cta":22,"variant":14,"campaign_id":23},"PHP2Shell detection - WP Scanner","php2shell-rce-pricing-1","Detect PHP2Shell with the WP Scanner! Available with every paid plan","https:\u002F\u002Fpentest-tools.com\u002Fpricing",[21],"\u002Fcms-vulnerability-scanning\u002Fwordpress-scanner-online-wpscan","See pricing options","php2shell-rce",{"title":25,"slug":26,"text":27,"link":28,"external":29,"targets":30,"cta":28,"variant":14,"campaign_id":23},"PHP2Shell & Node2Shell detection - pricing page","php2shell-rce-pricing","PHP2Shell & Node2Shell detection live in every paid plan (unlimited rescans for patch validation)",null,false,[31],"\u002Fpricing",{"title":33,"slug":34,"text":35,"link":19,"external":9,"targets":36,"cta":22,"variant":14,"campaign_id":34},"Node2Shell detection - Vuln DB homepage, product, CVE page","node2shell","🚨 Detect Node2Shell with any paid plan. Get proof now",[37,38,39],"\u002Fvulnerabilities-exploits","\u002Fproduct","\u002Fvulnerabilities-exploits\u002Fnode2shell-brotli-decoder-remote-code-execution_29896",{"title":41,"slug":42,"text":43,"link":19,"external":9,"targets":44,"cta":46,"variant":14,"campaign_id":23},"PHP2Shell detection - NetScan on the NS page","php2shell-rce-netscan","🚨 Detect Node2Shell + PHP2Shell with NetScan (from $96\u002Fmo for 16 assets)",[45],"\u002Fnetwork-vulnerability-scanning\u002Fnetwork-security-scanner-online","Pick NetScan",{"title":48,"slug":23,"text":49,"link":19,"external":9,"targets":50,"cta":22,"variant":14,"campaign_id":23},"PHP2Shell detection - top pages, pricing CTA","🚨 Detect Node2Shell + PHP2Shell with any paid plan. Get proof",[51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66],"\u002F","\u002Fport-scanner-online-nmap","\u002Fwebsite-vulnerability-scanning\u002Fwebsite-scanner","\u002Ffind-subdomains-of-domain","\u002Fdiscover-hidden-directories-and-files","\u002Fvulnerabilities-exploits\u002Fphp2shell-remote-code-execution-cve-2026-109618-and-cve-2026-109619_29870","\u002Ffor\u002Ffree","\u002Ffeatures\u002Fattack-surface","\u002Ffeatures\u002Fauthenticated-web-app-scanning","\u002Ffeatures\u002Finternal-network-scanning","\u002Ffeatures\u002Fvulnerability-monitoring","\u002Ffeatures\u002Fvulnerability-assessment-reporting","\u002Ffeatures\u002Fpentest-reporting","\u002Fsolutions\u002Ffor-it-teams","\u002Fsolutions\u002Ffor-msps","\u002Fsolutions\u002Ffor-security-teams",["Island",68],{"key":69,"params":70,"result":72},"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0",{"props":71},"{}",{"head":73},{},["Island",75],{"key":76,"params":77,"result":78},"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU",{"props":71},{"head":79},{},{"id":81,"detectable_with":82,"vuln_details":89,"vuln_id":103,"name":104,"published":105,"updated":28},27509,{"tool":83,"engine":86},{"id":84,"name":85},1,"Network Scanner",{"id":87,"name":88},2,"Nuclei",{"id":81,"codename":28,"description":28,"severity":90,"risk_description":91,"public_description":92,"public_recommendation":93,"recommendation":28,"references":94,"cvssv3":97,"epss_score":98,"epss_percentile":99,"cve":100,"in_cisa_catalog":29,"date":102,"software_type":28,"vendor":28,"product":28,"ptt_exploit_capabilities":28},"high","Attackers can inject malicious scripts through the provider parameter in OAuth login failures, executing JavaScript in victim browsers and potentially achieving session hijacking.","Discourse versions prior to 3.5.0.beta6 contain a stored Cross-Site Scripting (XSS) vulnerability in the OAuth\u002Fsocial login functionality. The vulnerability is caused by lack of proper content security policy enforcement when processing social login failures,allowing remote attackers to inject and execute malicious scripts in users' browsers.","Update the discourse to version 3.5.0.beta6 or later.",[95,96],"https:\u002F\u002Fgithub.com\u002Fdiscourse\u002Fdiscourse\u002Fsecurity\u002Fadvisories\u002FGHSA-26p5-mjjh-wfcf","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48954",8.1,0.00736,0.54195,[101],"CVE-2025-48954","2025-06-25T00:00:00Z","NETSCAN-NUCLEI-CVE-CVE-2025-48954","Discourse OAuth Social Login - Cross-site Scripting","2025-08-12T00:00:00Z",["Island",107],{"key":108,"params":109,"result":111},"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU",{"props":110},"{\"text-color\":\"gray\"}",{"head":112},{}]