[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"all-banners":3,"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0":58,"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU":65,"vulnerability-29931":71,"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU":100},[4,15,23,31,38],{"title":5,"slug":6,"text":7,"link":8,"external":9,"targets":10,"cta":12,"variant":13,"campaign_id":14},"PHP2Shell detection - WP Scanner","php2shell-rce-pricing-1","Detect PHP2Shell with the WP Scanner! Available with every paid plan","https:\u002F\u002Fpentest-tools.com\u002Fpricing",true,[11],"\u002Fcms-vulnerability-scanning\u002Fwordpress-scanner-online-wpscan","See pricing options","secondary","php2shell-rce",{"title":16,"slug":17,"text":18,"link":19,"external":20,"targets":21,"cta":19,"variant":13,"campaign_id":14},"PHP2Shell & Node2Shell detection - pricing page","php2shell-rce-pricing","PHP2Shell & Node2Shell detection live in every paid plan (unlimited rescans for patch validation)",null,false,[22],"\u002Fpricing",{"title":24,"slug":25,"text":26,"link":8,"external":9,"targets":27,"cta":12,"variant":13,"campaign_id":25},"Node2Shell detection - Vuln DB homepage, product, CVE page","node2shell","🚨 Detect Node2Shell \u002F HTTP2Shell with any paid plan. Get proof",[28,29,30],"\u002Fvulnerabilities-exploits","\u002Fproduct","\u002Fvulnerabilities-exploits\u002Fnode2shell-brotli-decoder-remote-code-execution_29896",{"title":32,"slug":33,"text":34,"link":8,"external":9,"targets":35,"cta":37,"variant":13,"campaign_id":14},"PHP2Shell detection - NetScan on the NS page","php2shell-rce-netscan","🚨 Detect Node2Shell + PHP2Shell with NetScan (from $96\u002Fmo for 16 assets)",[36],"\u002Fnetwork-vulnerability-scanning\u002Fnetwork-security-scanner-online","Pick NetScan",{"title":39,"slug":14,"text":40,"link":8,"external":9,"targets":41,"cta":12,"variant":13,"campaign_id":14},"PHP2Shell detection - top pages, pricing CTA","🚨 Detect Node2Shell + PHP2Shell with any paid plan. Get proof",[42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57],"\u002F","\u002Fport-scanner-online-nmap","\u002Fwebsite-vulnerability-scanning\u002Fwebsite-scanner","\u002Ffind-subdomains-of-domain","\u002Fdiscover-hidden-directories-and-files","\u002Fvulnerabilities-exploits\u002Fphp2shell-remote-code-execution-cve-2026-109618-and-cve-2026-109619_29870","\u002Ffor\u002Ffree","\u002Ffeatures\u002Fattack-surface","\u002Ffeatures\u002Fauthenticated-web-app-scanning","\u002Ffeatures\u002Finternal-network-scanning","\u002Ffeatures\u002Fvulnerability-monitoring","\u002Ffeatures\u002Fvulnerability-assessment-reporting","\u002Ffeatures\u002Fpentest-reporting","\u002Fsolutions\u002Ffor-it-teams","\u002Fsolutions\u002Ffor-msps","\u002Fsolutions\u002Ffor-security-teams",["Island",59],{"key":60,"params":61,"result":63},"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0",{"props":62},"{}",{"head":64},{},["Island",66],{"key":67,"params":68,"result":69},"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU",{"props":62},{"head":70},{},{"id":72,"detectable_with":73,"vuln_details":80,"vuln_id":97,"name":98,"published":99,"updated":19},29931,{"tool":74,"engine":77},{"id":75,"name":76},1,"Network Scanner",{"id":78,"name":79},2,"Nuclei",{"id":72,"codename":19,"description":19,"severity":81,"risk_description":82,"public_description":83,"public_recommendation":84,"recommendation":19,"references":85,"cvssv3":89,"epss_score":90,"epss_percentile":91,"cve":92,"in_cisa_catalog":20,"date":94,"software_type":19,"vendor":95,"product":96,"ptt_exploit_capabilities":19},"high","An unauthenticated attacker can coerce the GeoNetwork server into sending HTTP requests to internal hosts, enabling internal service interaction, cloud metadata access, and reconnaissance of the internal network from an anonymous position.","GeoNetwork versions 4.0.0 to 4.2.16 and 4.4.0 to 4.4.11 are vulnerable to an unauthenticated server-side request forgery (SSRF) in the SLD tool. The POST \u002Fsrv\u002Fapi\u002Ftools\u002Fogc\u002Fsld endpoint accepts a caller-supplied WMS server URL and performs a server-side HTTP GetStyles request to it without any validation, allowing an anonymous attacker to make the server issue arbitrary outbound HTTP requests to internal services and read XML responses back.","Upgrade GeoNetwork to version 4.2.17, 4.4.12, or later.",[86,87,88],"https:\u002F\u002Fgithub.com\u002Fgeonetwork\u002Fcore-geonetwork\u002Fsecurity\u002Fadvisories\u002FGHSA-5hx7-j24v-rffj","https:\u002F\u002Fgithub.com\u002Fgeonetwork\u002Fcore-geonetwork\u002Fpull\u002F9343","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55864",8.6,0.00587,0.47922,[93],"CVE-2026-55864","2026-09-15T00:00:00Z","geonetwork","core-geonetwork","NETSCAN-NUCLEI-CVE-CVE-2026-55864","GeoNetwork - Server-Side Request Forgery (SSRF)","2026-10-29T00:00:00Z",["Island",101],{"key":102,"params":103,"result":105},"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU",{"props":104},"{\"text-color\":\"gray\"}",{"head":106},{}]