[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"all-banners":3,"vulnerability-29809":48,"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0":77,"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU":84,"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU":90},[4,15,21,27,33,39],{"title":5,"slug":6,"text":7,"link":8,"external":9,"targets":10,"cta":12,"variant":13,"campaign_id":14},"Compliance - Page Launch - Network Scanner","compliance-pages-launch-network-scanner","Scheduled scans are the spine of every compliance framework. Are you audit-ready?","https:\u002F\u002Fpentest-tools.com\u002Fusage\u002Fcompliance",false,[11],"\u002Fnetwork-vulnerability-scanning\u002Fnetwork-security-scanner-online","Get compliance evidence","secondary","compliance-pages-launch",{"title":16,"slug":17,"text":18,"link":8,"external":9,"targets":19,"cta":12,"variant":13,"campaign_id":14},"Compliance - Page Launch - Website Scanner","compliance-pages-launch-website-scanner","Authenticated web-app scans show up in SOC 2, NIS2, and CRA Annex I. See why this is crucial for the business.",[20],"\u002Fwebsite-vulnerability-scanning\u002Fwebsite-scanner",{"title":22,"slug":23,"text":24,"link":8,"external":9,"targets":25,"cta":12,"variant":13,"campaign_id":14},"Compliance - Page Launch - Advanced Pentest Reporting","compliance-pages-launch-reporting","Editable DOCX. Immutable PDF. JSON for the GRC tool. See why these formats are on every auditor's checklist.",[26],"\u002Ffeatures\u002Fpentest-reporting",{"title":28,"slug":29,"text":30,"link":8,"external":9,"targets":31,"cta":12,"variant":13,"campaign_id":14},"Compliance - Page Launch - Integrations","compliance-pages-launch-integrations","Vanta, Jira, webhooks - they all route back to DORA, NIS2, SOC 2, ISO 27001, CRA. See why this is crucial for the business.",[32],"\u002Ffeatures\u002Fintegrations",{"title":34,"slug":35,"text":36,"link":8,"external":9,"targets":37,"cta":12,"variant":13,"campaign_id":14},"Compliance - Page Launch - Sniper","compliance-pages-launch-sniper","Five compliance framework pages now reference Sniper as the source of validated exploitability evidence. See them all.",[38],"\u002Fexploit-helpers\u002Fsniper",{"title":40,"slug":41,"text":42,"link":43,"external":44,"targets":45,"cta":47,"variant":13,"campaign_id":41},"Office Hours #13 - Reducing tool sprawl","office-hours-13","[Live Office Hours, Wed Oct 14] How to consolidate your security testing stack without the lock-in","https:\u002F\u002Fzoom.us\u002Fwebinar\u002Fregister\u002F5117815316917\u002FWN_m_Won6d_SzOQ-gYhCdXU_A",true,[46],"\u002F","Save your spot",{"id":49,"detectable_with":50,"vuln_details":57,"vuln_id":74,"name":75,"published":76,"updated":58},29809,{"tool":51,"engine":54},{"id":52,"name":53},1,"Network Scanner",{"id":55,"name":56},2,"Nuclei",{"id":49,"codename":58,"description":58,"severity":59,"risk_description":60,"public_description":61,"public_recommendation":62,"recommendation":58,"references":63,"cvssv3":66,"epss_score":67,"epss_percentile":68,"cve":69,"in_cisa_catalog":9,"date":71,"software_type":58,"vendor":72,"product":73,"ptt_exploit_capabilities":58},null,"critical","An unauthenticated attacker can read arbitrary files including the ECDSA signing key, enabling them to forge access JWTs and bypass authentication for any account.","LaunchServer's Netty FileServerHandler computes the served path by stripping one leading character on the assumption that every request-target begins with '\u002F'. Netty's HttpServerCodec accepts a request-target without a leading slash verbatim, so a request without a leading slash bypasses path normalization and escapes the updatesDir. The file server is enabled by default (netty.fileServerEnabled=true) on 0.0.0.0:9274 with no authentication, allowing an unauthenticated remote GET to read any file readable by the LaunchServer process including its own ECDSA signing key (.keys\u002Fecdsa_id), which signs access JWTs and enables full authentication bypass for any account.","Upgrade GravitLauncher LaunchServer to a version newer than 5.7.11.",[64,65],"https:\u002F\u002Fgithub.com\u002FGravitLauncher\u002FLauncher\u002Fsecurity\u002Fadvisories\u002FGHSA-5g75-477j-2c2f","https:\u002F\u002Fgithub.com\u002FGravitLauncher\u002FLauncher\u002Fcommit\u002F1e0b3a3",9.8,0.00677,0.50933,[70],"CVE-2026-54617","2026-09-17T00:00:00Z","gravitlauncher","launchserver","NETSCAN-NUCLEI-CVE-CVE-2026-54617","GravitLauncher LaunchServer \u003C=5.7.11 - Unauthenticated Path Traversal to Arbitrary File Read","2026-10-13T00:00:00Z",["Island",78],{"key":79,"params":80,"result":82},"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0",{"props":81},"{}",{"head":83},{},["Island",85],{"key":86,"params":87,"result":88},"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU",{"props":81},{"head":89},{},["Island",91],{"key":92,"params":93,"result":95},"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU",{"props":94},"{\"text-color\":\"gray\"}",{"head":96},{}]