[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"all-banners":3,"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0":57,"vulnerability-29940":64,"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU":96,"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU":102},[4,13,23,35,43,50],{"title":5,"slug":6,"text":7,"link":8,"external":9,"targets":10,"cta":8,"variant":12,"priority":12,"campaign_id":6},"PHP2Shell, Node2Shell, *sshole detections - pricing page","node2shell-exploit","Detect PHP2Shell, Node2Shell & *sshole with every paid plan.",null,false,[11],"\u002Fpricing","secondary",{"title":14,"slug":15,"text":16,"link":17,"external":18,"targets":19,"cta":22,"variant":12,"priority":12,"campaign_id":15},"Office Hours #15","office-hours-15","[Live Office Hours, Wed Nov 18] Behind the login, beyond the scan","https:\u002F\u002Fzoom.us\u002Fwebinar\u002Fregister\u002F5117815316917\u002FWN_BUp1qET2THa_5h65whpx9g",true,[20,21],"\u002Fwebinars\u002Foffice-hours","\u002Fwebinars","Save your spot",{"title":24,"slug":25,"text":26,"link":27,"external":9,"targets":28,"cta":34,"variant":12,"priority":12,"campaign_id":25},"*sshole, PHP2Shell & Node2Shell - HP, Vuln DB, product page","sshole-detect-exploit","🚨 Detect *sshole & Node2Shell with any paid plan. Get proof with our Sniper exploit","https:\u002F\u002Fpentest-tools.com\u002Fpricing",[29,30,31,32,33],"\u002F","\u002Fvulnerabilities-exploits","\u002Fvulnerabilities-exploits\u002Fopenssh-musl-authentication-bypass-cve-2026-123158-sshole_29981","\u002Fvulnerabilities-exploits\u002Fnode2shell-http2shell-brotli-decoder-remote-code-execution_29896","\u002Fproduct","See pricing options",{"title":36,"slug":37,"text":38,"link":27,"external":9,"targets":39,"cta":41,"variant":12,"priority":12,"campaign_id":42},"*sshole - Exploit on Sniper: Auto-Exploiter page","sshole-exploit-sniper","🚨 Exclusive exploit for *sshole now live",[40],"\u002Fexploit-helpers\u002Fsniper","Use it with the Exploit plan","sshole-exploit",{"title":44,"slug":45,"text":46,"link":27,"external":18,"targets":47,"cta":49,"variant":12,"priority":12,"campaign_id":42},"*sshole exploit - Exploit on the NS page","sshole-exploit-ns","🚨 Go beyond *sshole detection: get proof of exploitation",[48],"\u002Fnetwork-vulnerability-scanning\u002Fnetwork-security-scanner-online","Pick the Exploit plan",{"title":51,"slug":52,"text":53,"link":27,"external":18,"targets":54,"cta":34,"variant":12,"priority":12,"campaign_id":42},"*sshole exploit - WS, free tools","sshole-exploit-mainpw","Detect *sshole with every paid plan. Prove it with Exploit.",[55,56],"\u002Fwebsite-vulnerability-scanning\u002Fwebsite-scanner","\u002Ffor\u002Ffree",["Island",58],{"key":59,"params":60,"result":62},"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0",{"props":61},"{}",{"head":63},{},{"id":65,"detectable_with":66,"vuln_details":72,"vuln_id":93,"name":94,"published":95,"updated":95},29940,{"tool":67,"engine":70},{"id":68,"name":69},1,"Network Scanner",{"id":68,"name":71},"Sniper",{"id":65,"codename":8,"description":73,"severity":74,"risk_description":75,"public_description":76,"public_recommendation":77,"recommendation":78,"references":79,"cvssv3":83,"epss_score":84,"epss_percentile":85,"cve":86,"in_cisa_catalog":9,"date":88,"software_type":89,"vendor":90,"product":90,"ptt_exploit_capabilities":91},"We found that the target server is vulnerable to CVE-2026-8054, an unauthenticated SQL injection affecting dotCMS Core versions from 25.11.04-1 up to and including 26.04.28-02. The flaw (CWE-89) is in the Publish Audit API endpoints (\u002Fapi\u002FauditPublishing\u002Fget and \u002Fapi\u002FauditPublishing\u002FgetAll), which require no authentication and concatenate attacker-supplied bundle IDs directly into a SQL query of the form SELECT * FROM publishing_queue_audit WHERE bundle_id IN (...). A crafted array element breaks out of the string literal and injects arbitrary SQL against the backend PostgreSQL database. We confirmed the injection with an error-based differential oracle: an attacker-controlled boolean decides whether an invalid CAST is evaluated at query-plan time, which flips the HTTP response status (SQL error returns 404, no error returns 200 with an empty array). Using this oracle we blind-extracted the database version, the current database user and the current database name.","critical","This vulnerability lets a remote unauthenticated attacker read, modify, or destroy arbitrary content in the dotCMS backend database, which can expose user credentials and all managed content, enable account takeover and site defacement, and in many deployments provide a foothold for further compromise of the application and its host; the impact and scope are critical.","dotCMS Core versions from 25.11.04-1 through 26.04.28-02 contain an unauthenticated SQL injection (CWE-89) in the Publish Audit API endpoints. Attacker-controlled input is concatenated into a dynamically built SQL query without sanitization, and the endpoints enforce no authentication, so a remote unauthenticated attacker can inject arbitrary SQL into the backend database. Depending on database privileges this allows reading, modifying, or destroying arbitrary database content.","Upgrade dotCMS Core to version 26.04.28-03 or later immediately.","We recommend upgrading dotCMS Core to version 26.04.28-03 or later immediately. As additional mitigations, restrict network access to the dotCMS management and API interfaces, ensure the Publish Audit API is reachable only by authenticated backend users with the appropriate publishing-queue permission, and place the instance behind a web application firewall while patching.",[80,81,82],"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-8054","https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jpx3-25r2-jq5g","https:\u002F\u002Fdev.dotcms.com\u002Fdocs\u002Fknown-security-issues?issueNumber=SI-75",9.8,0.01584,0.75774,[87],"CVE-2026-8054","2026-05-27T00:00:00Z","Content Management System","dotCMS",[92],"CUSTOM","NETSCAN-SNIPER-CVE-2026-8054","dotCMS - SQL Injection","2026-10-13T00:00:00Z",["Island",97],{"key":98,"params":99,"result":100},"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU",{"props":61},{"head":101},{},["Island",103],{"key":104,"params":105,"result":107},"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU",{"props":106},"{\"text-color\":\"gray\"}",{"head":108},{}]