[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"all-banners":3,"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0":70,"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU":77,"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU":83,"vulnerability-29938":90},[4,15,23,31,39,45,65],{"title":5,"slug":6,"text":7,"link":8,"external":9,"targets":10,"cta":12,"variant":13,"campaign_id":14},"PHP2Shell detection - WP Scanner","php2shell-rce-pricing-1","Detect PHP2Shell with the WP Scanner! Available with every paid plan","https:\u002F\u002Fpentest-tools.com\u002Fpricing",true,[11],"\u002Fcms-vulnerability-scanning\u002Fwordpress-scanner-online-wpscan","See pricing options","secondary","php2shell-rce",{"title":16,"slug":17,"text":18,"link":19,"external":9,"targets":20,"cta":22,"variant":13,"campaign_id":17},"Node2Shell exploit - Exploit on the NS page","node2shell-exploit","🚨 Go beyond Node2Shell detection: exploit it with our exclusive module","https:\u002F\u002Fpentest-tools.com\u002Fpricing?utm_medium=website&utm_source=website&utm_campaign=node2shell&utm_content=call-to-action&utm_term=get-exploit-network",[21],"\u002Fnetwork-vulnerability-scanning\u002Fnetwork-security-scanner-online","Pick the Exploit plan",{"title":24,"slug":17,"text":25,"link":26,"external":27,"targets":28,"cta":30,"variant":13,"campaign_id":17},"Node2Shell - Exploit on Sniper: Auto-Exploiter page","🚨 Exclusive exploit for Node2Shell now live","https:\u002F\u002Fpentest-tools.com\u002Fpricing?utm_medium=website&utm_source=website&utm_campaign=node2shell&utm_content=call-to-action&utm_term=get-exploit-sniper",false,[29],"\u002Fexploit-helpers\u002Fsniper","Use it with the Exploit plan",{"title":32,"slug":17,"text":33,"link":34,"external":9,"targets":35,"cta":38,"variant":13,"campaign_id":17},"Node2Shell exploit - Vuln DB homepage, product","🚨 CISA reports active Node2Shell exploitation. Use our exclusive exploit to get proof","https:\u002F\u002Fpentest-tools.com\u002Fpricing?utm_medium=website&utm_source=website&utm_campaign=node2shell&utm_content=call-to-action&utm_term=get-exploit-vulndb",[36,37],"\u002Fvulnerabilities-exploits","\u002Fproduct","Get the Exploit plan",{"title":40,"slug":41,"text":42,"link":34,"external":9,"targets":43,"cta":22,"variant":13,"campaign_id":17},"Node2Shell exploit - CVE page","node2shell-exploit-1","🚨 Detect + prove Node2Shell with our exclusive Sniper exploit",[44],"\u002Fvulnerabilities-exploits\u002Fnode2shell-brotli-decoder-remote-code-execution_29896",{"title":46,"slug":17,"text":47,"link":8,"external":9,"targets":48,"cta":12,"variant":13,"campaign_id":17},"Node2Shell exploit - top pages, pricing CTA","Detect PHP2Shell & Node2Shell with every paid plan. Prove Node2Shell with the Exploit plan.",[49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64],"\u002F","\u002Fport-scanner-online-nmap","\u002Fwebsite-vulnerability-scanning\u002Fwebsite-scanner","\u002Ffind-subdomains-of-domain","\u002Fdiscover-hidden-directories-and-files","\u002Fvulnerabilities-exploits\u002Fphp2shell-remote-code-execution-cve-2026-109618-and-cve-2026-109619_29870","\u002Ffor\u002Ffree","\u002Ffeatures\u002Fattack-surface","\u002Ffeatures\u002Fauthenticated-web-app-scanning","\u002Ffeatures\u002Finternal-network-scanning","\u002Ffeatures\u002Fvulnerability-monitoring","\u002Ffeatures\u002Fvulnerability-assessment-reporting","\u002Ffeatures\u002Fpentest-reporting","\u002Fsolutions\u002Ffor-it-teams","\u002Fsolutions\u002Ffor-msps","\u002Fsolutions\u002Ffor-security-teams",{"title":66,"slug":17,"text":47,"link":67,"external":27,"targets":68,"cta":67,"variant":13,"campaign_id":17},"Node2Shell exploit - pricing page",null,[69],"\u002Fpricing",["Island",71],{"key":72,"params":73,"result":75},"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0",{"props":74},"{}",{"head":76},{},["Island",78],{"key":79,"params":80,"result":81},"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU",{"props":74},{"head":82},{},["Island",84],{"key":85,"params":86,"result":88},"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU",{"props":87},"{\"text-color\":\"gray\"}",{"head":89},{},{"id":91,"detectable_with":92,"vuln_details":99,"vuln_id":118,"name":119,"published":120,"updated":67},29938,{"tool":93,"engine":96},{"id":94,"name":95},1,"Network Scanner",{"id":97,"name":98},2,"Nuclei",{"id":91,"codename":67,"description":67,"severity":100,"risk_description":101,"public_description":102,"public_recommendation":103,"recommendation":67,"references":104,"cvssv3":110,"epss_score":111,"epss_percentile":112,"cve":113,"in_cisa_catalog":9,"date":115,"software_type":67,"vendor":116,"product":117,"ptt_exploit_capabilities":67},"medium","Attackers can make the server send arbitrary POST requests to attacker-controlled destinations, potentially leading to internal network attacks or data exfiltration.","Plex Media Server \u003C 1.43.3.10861 contains a server side request forgery caused by improper validation of the 'protocol' parameter in \u002Fplayer\u002Ftimeline, letting attackers with any X-Plex-Token value force the server to POST to arbitrary destinations, exploit requires any X-Plex-Token value.","Update to version 1.43.3.10861 or later.",[105,106,107,108,109],"https:\u002F\u002Fzmain.info\u002Fblog\u002Fplex2shell","https:\u002F\u002Fgithub.com\u002Fgmh5225\u002Fplex2shell","https:\u002F\u002Fwww.cve.org\u002FCVERecord?id=CVE-2026-96652","https:\u002F\u002Fraw.githubusercontent.com\u002Fcisagov\u002FCSAF\u002Fdevelop\u002Fcsaf_files\u002FIT\u002Fwhite\u002F2026\u002Fva-26-266-01.json","https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5p7w-r379-3c2m",4.3,0.01821,0.78759,[114],"CVE-2026-96652","2026-09-23T00:00:00Z","plex","plex_media_server","NETSCAN-NUCLEI-CVE-CVE-2026-96652","Plex Media Server \u003C 1.43.3.10861 - Unauthenticated SSRF via Companion Protocol (plex2shell)","2026-11-02T00:00:00Z"]