[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"all-banners":3,"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0":42,"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU":49,"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU":55,"vulnerability-17377":62},[4,15,21,30,37],{"title":5,"slug":6,"text":7,"link":8,"external":9,"targets":10,"cta":12,"variant":13,"campaign_id":14},"NGINX Rift free scanner - CVE-2026-42945 - CVE Page","nginx-rift-cve-page","🚨 New: FREE SCANNER for NGINX Rift (CVE-2026-42945). No account needed.","https://pentest-tools.com/network-vulnerability-scanning/cve-2026-42945-scanner-nginx-rift",true,[11],"/vulnerabilities-exploits/nginx-heap-buffer-overflow_29311","Scan for free","secondary","nginx-rift",{"title":16,"slug":17,"text":18,"link":8,"external":9,"targets":19,"cta":12,"variant":13,"campaign_id":14},"NGINX Rift free scanner - CVE-2026-42945 -blog","nginx-rift-blog","🚨 New: free scanner for NGINX Rift (CVE-2026-42945). Check your targets now.",[20],"/blog",{"title":22,"slug":23,"text":24,"link":25,"external":9,"targets":26,"cta":28,"variant":13,"campaign_id":29},"phpBB authentication bypass - VulnDB homepage","phpbb-authentication-bypass-vulndb","Detect 2 new CVEs our research team discovered in phpBB","https://pentest-tools.com/vulnerabilities-exploits/phpbb-authentication-bypass_29369",[27],"/vulnerabilities-exploits","See the details","phpbb-authentication-bypass",{"title":31,"slug":32,"text":33,"link":34,"external":9,"targets":35,"cta":36,"variant":13,"campaign_id":29},"phpBB authentication bypass - CVE page","phpbb-authentication-bypass-cve","See how our research team discovered these 2 new CVEs in phpBB","https://pentest-tools.com/research/phpbb-authentication-bypass",[27],"Read the research",{"title":38,"slug":39,"text":24,"link":25,"external":9,"targets":40,"cta":28,"variant":13,"campaign_id":29},"phpBB authentication bypass - Sniper","phpbb-authentication-bypass-sniper",[41],"/exploit-helpers/sniper",["Island",43],{"key":44,"params":45,"result":47},"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0",{"props":46},"{}",{"head":48},{},["Island",50],{"key":51,"params":52,"result":53},"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU",{"props":46},{"head":54},{},["Island",56],{"key":57,"params":58,"result":60},"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU",{"props":59},"{\"text-color\":\"gray\"}",{"head":61},{},{"id":63,"detectable_with":64,"vuln_details":71,"vuln_id":100,"name":101,"published":102,"updated":72},17377,{"tool":65,"engine":68},{"id":66,"name":67},1,"Network Scanner",{"id":69,"name":70},3,"OpenVAS",{"id":63,"codename":72,"description":72,"severity":73,"risk_description":74,"public_description":75,"public_recommendation":76,"recommendation":72,"references":77,"cvssv3":86,"epss_score":87,"epss_percentile":88,"cve":89,"in_cisa_catalog":99,"date":72,"software_type":72,"vendor":72,"product":72,"ptt_exploit_capabilities":72},null,"high","The following flaws exist: - Invalid wddxPacket XML document that is mishandled in a wddx_deserialize call in ext/wddx/wddx.c script. - Error in php_wddx_pop_element function in ext/wddx/wddx.c script. - An error in php_wddx_process_data function in ext/wddx/wddx.c script. - Improper handling of the case of a thumbnail offset that exceeds the file size in exif_process_IFD_in_TIFF function in ext/exif/exif.c script. - Improper validation of gamma values in imagegammacorrect function in ext/gd/gd.c script. - Improper validation of number of colors in imagegammacorrect function in ext/gd/gd.c script. - The script ext/session/session.c skips invalid session names in a way that triggers incorrect parsing. - Improper handling of certain objects in ext/standard/var_unserializer.c script. Successfully exploiting this issue allow remote attackers to cause a denial of service, to obtain sensitive information from process memory, to inject arbitrary-type session data by leveraging control of a session name.","PHP is prone to multiple vulnerabilities.","Update to version 5.6.25, 7.0.10 or later.",[78,79,80,81,82,83,84,85],"http://www.php.net/ChangeLog-7.php","http://www.securityfocus.com/bid/92756","http://www.securityfocus.com/bid/92552","http://www.securityfocus.com/bid/92755","http://www.securityfocus.com/bid/92757","http://www.securityfocus.com/bid/92564","http://www.securityfocus.com/bid/92758","http://www.php.net/ChangeLog-5.php",7.5,0.16612,0.9661,[90,91,92,93,94,95,96,97,98],"CVE-2016-7124","CVE-2016-7125","CVE-2016-7126","CVE-2016-7127","CVE-2016-7128","CVE-2016-7129","CVE-2016-7130","CVE-2016-7131","CVE-2016-7132",false,"NETSCAN-OPENVAS-1.3.6.1.4.1.25623.1.0.809318","PHP \u003C 5.6.25, 7.x \u003C 7.0.10 Multiple Vulnerabilities (Sep 2016) - Windows","2018-01-02T00:00:00Z"]