[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"all-banners":3,"vulnerability-29706":46,"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0":74,"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU":81,"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU":87},[4,22,29,37],{"title":5,"slug":6,"text":7,"link":8,"external":9,"targets":10,"cta":20,"variant":21,"campaign_id":6},"PHP2Shell detection - CVE-2026-109618 & CVE-2026-109619","php2shell-rce","🚨 Detect PHP2Shell with any paid plan. Get proof now","https:\u002F\u002Fpentest-tools.com\u002Fpricing",true,[11,12,13,14,15,16,17,18,19],"\u002F","\u002Fport-scanner-online-nmap","\u002Fwebsite-vulnerability-scanning\u002Fwebsite-scanner","\u002Ffind-subdomains-of-domain","\u002Fdiscover-hidden-directories-and-files","\u002Fvulnerabilities-exploits\u002Fphp2shell-remote-code-execution-cve-2026-109618-and-cve-2026-109619_29870","\u002Fvulnerabilities-exploits","\u002Fproduct","\u002Ffor\u002Ffree","See pricing options","secondary",{"title":23,"slug":24,"text":25,"link":8,"external":9,"targets":26,"cta":28,"variant":21,"campaign_id":6},"PHP2Shell detection - NetScan on the NS page","php2shell-rce-netscan","🚨 Detect PHP2Shell with NetScan (from $96\u002Fmo for 16 assets)",[27],"\u002Fnetwork-vulnerability-scanning\u002Fnetwork-security-scanner-online","Pick NetScan",{"title":30,"slug":31,"text":32,"link":33,"external":34,"targets":35,"cta":33,"variant":21,"campaign_id":6},"PHP2Shell detection -pricing page","php2shell-rce-pricing","PHP2Shell detection live in every paid plan, incl. unlimited rescans for patch validation",null,false,[36],"\u002Fpricing",{"title":38,"slug":39,"text":40,"link":41,"external":9,"targets":42,"cta":45,"variant":21,"campaign_id":39},"Office Hours #14","office-hours-14","[Live Office Hours, Wed Oct 28] Check, patch, prove: PHP2Shell and other critical CVEs","https:\u002F\u002Fzoom.us\u002Fwebinar\u002Fregister\u002F5117815316917\u002FWN_xbwerEx9QFSjfNWIHcjtHw",[43,44],"\u002Fwebinars\u002Foffice-hours","\u002Fwebinars","Save your spot",{"id":47,"detectable_with":48,"vuln_details":55,"vuln_id":71,"name":72,"published":73,"updated":33},29706,{"tool":49,"engine":52},{"id":50,"name":51},1,"Network Scanner",{"id":53,"name":54},2,"Nuclei",{"id":47,"codename":33,"description":33,"severity":56,"risk_description":57,"public_description":58,"public_recommendation":59,"recommendation":33,"references":60,"cvssv3":64,"epss_score":65,"epss_percentile":66,"cve":67,"in_cisa_catalog":34,"date":69,"software_type":33,"vendor":70,"product":70,"ptt_exploit_capabilities":33},"critical","Attackers can bypass authentication to access victim accounts and execute API functions, potentially compromising user data and system integrity.","Mantis Bug Tracker \u003C 2.28.1 on MySQL databases contains an authentication bypass caused by improper type checking on the password parameter in the SOAP API, letting attackers login without the actual password using a crafted SOAP envelope, exploit requires knowing the victim's username.","Upgrade to version 2.28.1 or later; disabling the SOAP API reduces risk.",[61,62,63],"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-30849","https:\u002F\u002Fgithub.com\u002Fmantisbt\u002Fmantisbt\u002Fsecurity\u002Fadvisories\u002FGHSA-phrq-pc6r-f6gh","https:\u002F\u002Fmantisbt.org\u002Fbugs\u002Fview.php?id=36902",9.3,0.02351,0.8355,[68],"CVE-2026-30849","2026-03-23T00:00:00Z","mantisbt","NETSCAN-NUCLEI-CVE-CVE-2026-30849","MantisBT \u003C 2.28.1 - SOAP API Authentication Bypass","2026-09-11T00:00:00Z",["Island",75],{"key":76,"params":77,"result":79},"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0",{"props":78},"{}",{"head":80},{},["Island",82],{"key":83,"params":84,"result":85},"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU",{"props":78},{"head":86},{},["Island",88],{"key":89,"params":90,"result":92},"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU",{"props":91},"{\"text-color\":\"gray\"}",{"head":93},{}]