[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"all-banners":3,"vulnerability-29917":67,"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0":98,"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU":105,"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU":111},[4,15,24,32,40,47],{"title":5,"slug":6,"text":7,"link":8,"external":9,"targets":10,"cta":13,"variant":14,"campaign_id":6},"Office Hours #14","office-hours-14","[Live Office Hours, Wed Oct 28] Check, patch, prove: PHP2Shell and other critical CVEs","https:\u002F\u002Fzoom.us\u002Fwebinar\u002Fregister\u002F5117815316917\u002FWN_xbwerEx9QFSjfNWIHcjtHw",true,[11,12],"\u002Fwebinars\u002Foffice-hours","\u002Fwebinars","Save your spot","secondary",{"title":16,"slug":17,"text":18,"link":19,"external":9,"targets":20,"cta":22,"variant":14,"campaign_id":23},"PHP2Shell detection - WP Scanner","php2shell-rce-pricing-1","Detect PHP2Shell with the WP Scanner! Available with every paid plan","https:\u002F\u002Fpentest-tools.com\u002Fpricing",[21],"\u002Fcms-vulnerability-scanning\u002Fwordpress-scanner-online-wpscan","See pricing options","php2shell-rce",{"title":25,"slug":26,"text":27,"link":28,"external":29,"targets":30,"cta":28,"variant":14,"campaign_id":23},"PHP2Shell & Node2Shell detection - pricing page","php2shell-rce-pricing","PHP2Shell & Node2Shell detection live in every paid plan (unlimited rescans for patch validation)",null,false,[31],"\u002Fpricing",{"title":33,"slug":34,"text":35,"link":19,"external":9,"targets":36,"cta":22,"variant":14,"campaign_id":34},"Node2Shell detection - Vuln DB homepage, product, CVE page","node2shell","🚨 Detect Node2Shell with any paid plan. Get proof now",[37,38,39],"\u002Fvulnerabilities-exploits","\u002Fproduct","\u002Fvulnerabilities-exploits\u002Fnode2shell-brotli-decoder-remote-code-execution_29896",{"title":41,"slug":42,"text":43,"link":19,"external":9,"targets":44,"cta":46,"variant":14,"campaign_id":23},"PHP2Shell detection - NetScan on the NS page","php2shell-rce-netscan","🚨 Detect Node2Shell + PHP2Shell with NetScan (from $96\u002Fmo for 16 assets)",[45],"\u002Fnetwork-vulnerability-scanning\u002Fnetwork-security-scanner-online","Pick NetScan",{"title":48,"slug":23,"text":49,"link":19,"external":9,"targets":50,"cta":22,"variant":14,"campaign_id":23},"PHP2Shell detection - top pages, pricing CTA","🚨 Detect Node2Shell + PHP2Shell with any paid plan. Get proof",[51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66],"\u002F","\u002Fport-scanner-online-nmap","\u002Fwebsite-vulnerability-scanning\u002Fwebsite-scanner","\u002Ffind-subdomains-of-domain","\u002Fdiscover-hidden-directories-and-files","\u002Fvulnerabilities-exploits\u002Fphp2shell-remote-code-execution-cve-2026-109618-and-cve-2026-109619_29870","\u002Ffor\u002Ffree","\u002Ffeatures\u002Fattack-surface","\u002Ffeatures\u002Fauthenticated-web-app-scanning","\u002Ffeatures\u002Finternal-network-scanning","\u002Ffeatures\u002Fvulnerability-monitoring","\u002Ffeatures\u002Fvulnerability-assessment-reporting","\u002Ffeatures\u002Fpentest-reporting","\u002Fsolutions\u002Ffor-it-teams","\u002Fsolutions\u002Ffor-msps","\u002Fsolutions\u002Ffor-security-teams",{"id":68,"detectable_with":69,"vuln_details":76,"vuln_id":95,"name":96,"published":97,"updated":28},29917,{"tool":70,"engine":73},{"id":71,"name":72},1,"Network Scanner",{"id":74,"name":75},2,"Nuclei",{"id":68,"codename":28,"description":28,"severity":77,"risk_description":78,"public_description":79,"public_recommendation":80,"recommendation":28,"references":81,"cvssv3":87,"epss_score":88,"epss_percentile":89,"cve":90,"in_cisa_catalog":29,"date":92,"software_type":28,"vendor":93,"product":94,"ptt_exploit_capabilities":28},"medium","An unauthenticated attacker can read sensitive server configuration, including monitoring webhook URLs and bot tokens, and overwrite configuration, enabling secret disclosure and tampering with proxy and menu settings.","Docker-Proxy through 5.1.9 exposes the hubcmdui configuration endpoint \u002Fapi\u002Fconfig without authentication. An unauthenticated remote attacker can read the full server configuration, including the WeChat\u002FTelegram monitoring webhook URLs and bot token inside monitoringConfig, the menuItems structure and docker host settings, and can overwrite configuration via the unauthenticated POST handler. The fix restricts anonymous callers to a public subset (theme, language, logo, proxyDomain).","Upgrade Docker-Proxy to a release after 5.1.9 that restricts anonymous \u002Fapi\u002Fconfig access to a public subset (theme, language, logo, proxyDomain).",[82,83,84,85,86],"https:\u002F\u002Fgithub.com\u002Fdqzboy\u002FDocker-Proxy\u002Fsecurity\u002Fadvisories\u002FGHSA-xxpq-v3jg-w39m","https:\u002F\u002Fgithub.com\u002Fdqzboy\u002FDocker-Proxy\u002Fcommit\u002Fa173befc5d163b1206b40298871153026fee9474","https:\u002F\u002Fgithub.com\u002Fdqzboy\u002FDocker-Proxy\u002Fissues\u002F109","https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fdocker-proxy-through-5.1.9-missing-authentication-via-hubcmdui-api-config","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-116070",6.5,0.00259,0.1749,[91],"CVE-2026-116070","2026-10-25T00:00:00Z","dqzboy","docker-proxy","NETSCAN-NUCLEI-CVE-CVE-2026-116070","Docker-Proxy hubcmdui - Missing Authentication on \u002Fapi\u002Fconfig","2026-10-28T00:00:00Z",["Island",99],{"key":100,"params":101,"result":103},"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0",{"props":102},"{}",{"head":104},{},["Island",106],{"key":107,"params":108,"result":109},"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU",{"props":102},{"head":110},{},["Island",112],{"key":113,"params":114,"result":116},"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU",{"props":115},"{\"text-color\":\"gray\"}",{"head":117},{}]