[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"all-banners":3,"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0":57,"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU":64,"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU":70,"vulnerability-23491":77},[4,13,23,35,43,50],{"title":5,"slug":6,"text":7,"link":8,"external":9,"targets":10,"cta":8,"variant":12,"priority":12,"campaign_id":6},"PHP2Shell, Node2Shell, *sshole detections - pricing page","node2shell-exploit","Detect PHP2Shell, Node2Shell & *sshole with every paid plan.",null,false,[11],"\u002Fpricing","secondary",{"title":14,"slug":15,"text":16,"link":17,"external":18,"targets":19,"cta":22,"variant":12,"priority":12,"campaign_id":15},"Office Hours #15","office-hours-15","[Live Office Hours, Wed Nov 18] Behind the login, beyond the scan","https:\u002F\u002Fzoom.us\u002Fwebinar\u002Fregister\u002F5117815316917\u002FWN_BUp1qET2THa_5h65whpx9g",true,[20,21],"\u002Fwebinars\u002Foffice-hours","\u002Fwebinars","Save your spot",{"title":24,"slug":25,"text":26,"link":27,"external":9,"targets":28,"cta":34,"variant":12,"priority":12,"campaign_id":25},"*sshole, PHP2Shell & Node2Shell - HP, Vuln DB, product page","sshole-detect-exploit","🚨 Detect *sshole & Node2Shell with any paid plan. Get proof with our Sniper exploit","https:\u002F\u002Fpentest-tools.com\u002Fpricing",[29,30,31,32,33],"\u002F","\u002Fvulnerabilities-exploits","\u002Fvulnerabilities-exploits\u002Fopenssh-musl-authentication-bypass-cve-2026-123158-sshole_29981","\u002Fvulnerabilities-exploits\u002Fnode2shell-http2shell-brotli-decoder-remote-code-execution_29896","\u002Fproduct","See pricing options",{"title":36,"slug":37,"text":38,"link":27,"external":9,"targets":39,"cta":41,"variant":12,"priority":12,"campaign_id":42},"*sshole - Exploit on Sniper: Auto-Exploiter page","sshole-exploit-sniper","🚨 Exclusive exploit for *sshole now live",[40],"\u002Fexploit-helpers\u002Fsniper","Use it with the Exploit plan","sshole-exploit",{"title":44,"slug":45,"text":46,"link":27,"external":18,"targets":47,"cta":49,"variant":12,"priority":12,"campaign_id":42},"*sshole exploit - Exploit on the NS page","sshole-exploit-ns","🚨 Go beyond *sshole detection: get proof of exploitation",[48],"\u002Fnetwork-vulnerability-scanning\u002Fnetwork-security-scanner-online","Pick the Exploit plan",{"title":51,"slug":52,"text":53,"link":27,"external":18,"targets":54,"cta":34,"variant":12,"priority":12,"campaign_id":42},"*sshole exploit - WS, free tools","sshole-exploit-mainpw","Detect *sshole with every paid plan. Prove it with Exploit.",[55,56],"\u002Fwebsite-vulnerability-scanning\u002Fwebsite-scanner","\u002Ffor\u002Ffree",["Island",58],{"key":59,"params":60,"result":62},"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0",{"props":61},"{}",{"head":63},{},["Island",65],{"key":66,"params":67,"result":68},"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU",{"props":61},{"head":69},{},["Island",71],{"key":72,"params":73,"result":75},"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU",{"props":74},"{\"text-color\":\"gray\"}",{"head":76},{},{"id":78,"detectable_with":79,"vuln_details":86,"vuln_id":116,"name":117,"published":118,"updated":8},23491,{"tool":80,"engine":83},{"id":81,"name":82},1,"Network Scanner",{"id":84,"name":85},3,"OpenVAS",{"id":78,"codename":8,"description":8,"severity":87,"risk_description":88,"public_description":89,"public_recommendation":90,"recommendation":8,"references":91,"cvssv3":107,"epss_score":108,"epss_percentile":109,"cve":110,"in_cisa_catalog":18,"date":115,"software_type":8,"vendor":8,"product":8,"ptt_exploit_capabilities":8},"high","The following vulnerabilities exist: - CVE-2024-4577: Argument injection in PHP-CGI (bypass of CVE-2012-1823) - CVE-2024-5458: Filter bypass in filter_var FILTER_VALIDATE_URL - CVE-2024-5585: Bypass of CVE-2024-1874 - CVE-2024-2408: Marvin attack in OpenSSL on Windows builds","PHP is prone to multiple vulnerabilities.","Update to version 8.1.29, 8.2.20, 8.3.8 or later.",[92,93,94,95,96,97,98,99,100,101,102,103,104,105,106],"https:\u002F\u002Fwww.php.net\u002FChangeLog-8.php#8.1.29","https:\u002F\u002Fwww.php.net\u002FChangeLog-8.php#8.2.20","https:\u002F\u002Fwww.php.net\u002FChangeLog-8.php#8.3.8","https:\u002F\u002Fgithub.com\u002Fphp\u002Fphp-src\u002Fsecurity\u002Fadvisories\u002FGHSA-3qgc-jrrr-25jv","https:\u002F\u002Fgithub.com\u002Fphp\u002Fphp-src\u002Fsecurity\u002Fadvisories\u002FGHSA-hh26-4ppw-5864","https:\u002F\u002Fgithub.com\u002Fphp\u002Fphp-src\u002Fsecurity\u002Fadvisories\u002FGHSA-9fcc-425m-g385","https:\u002F\u002Fgithub.com\u002Fphp\u002Fphp-src\u002Fsecurity\u002Fadvisories\u002FGHSA-w8qr-v226-r27w","https:\u002F\u002Fdevco.re\u002Fblog\u002F2024\u002F06\u002F06\u002Fsecurity-alert-cve-2024-4577-php-cgi-argument-injection-vulnerability-en\u002F","https:\u002F\u002Fblog.orange.tw\u002F2024\u002F06\u002Fcve-2024-4577-yet-another-php-rce.html","https:\u002F\u002Flabs.watchtowr.com\u002Fno-way-php-strikes-again-cve-2024-4577\u002F","https:\u002F\u002Fgithub.com\u002Fwatchtowrlabs\u002FCVE-2024-4577","https:\u002F\u002Fpeople.redhat.com\u002F~hkario\u002Fmarvin\u002F","https:\u002F\u002Fblog.talosintelligence.com\u002Fnew-persistent-attacks-japan\u002F","https:\u002F\u002Fwww.bitdefender.com\u002Fen-us\u002Fblog\u002Fbusinessinsights\u002Ftechnical-advisory-update-mass-exploitation-cve-2024-4577","https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog",7.7,0.99987,0.99984,[111,112,113,114],"CVE-2024-2408","CVE-2024-4577","CVE-2024-5458","CVE-2024-5585","2024-06-09T00:00:00Z","NETSCAN-OPENVAS-1.3.6.1.4.1.25623.1.0.152368","PHP \u003C 8.1.29, 8.2.x \u003C 8.2.20, 8.3.x \u003C 8.3.8 Multiple Vulnerabilities - Windows","2024-10-01T00:00:00Z"]