[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"all-banners":3,"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0":80,"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU":87,"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU":93,"vulnerability-29970":100},[4,15,24,31,38,45,65,70],{"title":5,"slug":6,"text":7,"link":8,"external":9,"targets":10,"cta":12,"variant":13,"priority":13,"campaign_id":14},"PHP2Shell detection - WP Scanner","php2shell-rce-pricing-1","Detect PHP2Shell with the WP Scanner! Available with every paid plan","https:\u002F\u002Fpentest-tools.com\u002Fpricing",true,[11],"\u002Fcms-vulnerability-scanning\u002Fwordpress-scanner-online-wpscan","See pricing options","secondary","php2shell-rce",{"title":16,"slug":17,"text":18,"link":19,"external":20,"targets":21,"cta":23,"variant":13,"priority":13,"campaign_id":17},"Node2Shell - Exploit on Sniper: Auto-Exploiter page","node2shell-exploit","🚨 Exclusive exploit for Node2Shell now live","https:\u002F\u002Fpentest-tools.com\u002Fpricing?utm_medium=website&utm_source=website&utm_campaign=node2shell&utm_content=call-to-action&utm_term=get-exploit-sniper",false,[22],"\u002Fexploit-helpers\u002Fsniper","Use it with the Exploit plan",{"title":25,"slug":17,"text":26,"link":27,"external":9,"targets":28,"cta":30,"variant":13,"priority":13,"campaign_id":17},"Node2Shell exploit - Exploit on the NS page","🚨 Go beyond Node2Shell detection: exploit it with our exclusive module","https:\u002F\u002Fpentest-tools.com\u002Fpricing?utm_medium=website&utm_source=website&utm_campaign=node2shell&utm_content=call-to-action&utm_term=get-exploit-network",[29],"\u002Fnetwork-vulnerability-scanning\u002Fnetwork-security-scanner-online","Pick the Exploit plan",{"title":32,"slug":33,"text":34,"link":35,"external":9,"targets":36,"cta":30,"variant":13,"priority":13,"campaign_id":17},"Node2Shell exploit - CVE page","node2shell-exploit-1","🚨 Detect + prove Node2Shell with our exclusive Sniper exploit","https:\u002F\u002Fpentest-tools.com\u002Fpricing?utm_medium=website&utm_source=website&utm_campaign=node2shell&utm_content=call-to-action&utm_term=get-exploit-vulndb",[37],"\u002Fvulnerabilities-exploits\u002Fnode2shell-brotli-decoder-remote-code-execution_29896",{"title":39,"slug":17,"text":40,"link":35,"external":9,"targets":41,"cta":44,"variant":13,"priority":13,"campaign_id":17},"Node2Shell exploit - Vuln DB homepage, product","🚨 CISA reports active Node2Shell exploitation. Use our exclusive exploit to get proof",[42,43],"\u002Fvulnerabilities-exploits","\u002Fproduct","Get the Exploit plan",{"title":46,"slug":17,"text":47,"link":8,"external":9,"targets":48,"cta":12,"variant":13,"priority":13,"campaign_id":17},"Node2Shell exploit - top pages, pricing CTA","Detect PHP2Shell & Node2Shell with every paid plan. Prove Node2Shell with the Exploit plan.",[49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64],"\u002F","\u002Fport-scanner-online-nmap","\u002Fwebsite-vulnerability-scanning\u002Fwebsite-scanner","\u002Ffind-subdomains-of-domain","\u002Fdiscover-hidden-directories-and-files","\u002Fvulnerabilities-exploits\u002Fphp2shell-remote-code-execution-cve-2026-109618-and-cve-2026-109619_29870","\u002Ffor\u002Ffree","\u002Ffeatures\u002Fattack-surface","\u002Ffeatures\u002Fauthenticated-web-app-scanning","\u002Ffeatures\u002Finternal-network-scanning","\u002Ffeatures\u002Fvulnerability-monitoring","\u002Ffeatures\u002Fvulnerability-assessment-reporting","\u002Ffeatures\u002Fpentest-reporting","\u002Fsolutions\u002Ffor-it-teams","\u002Fsolutions\u002Ffor-msps","\u002Fsolutions\u002Ffor-security-teams",{"title":66,"slug":17,"text":47,"link":67,"external":20,"targets":68,"cta":67,"variant":13,"priority":13,"campaign_id":17},"Node2Shell exploit - pricing page",null,[69],"\u002Fpricing",{"title":71,"slug":72,"text":73,"link":74,"external":9,"targets":75,"cta":78,"variant":13,"priority":13,"campaign_id":79},"Office Hours #14 recording","office-hours-14-recording","[Office Hours recording] PHP2Shell and HTTP2Shell, check to proof","https:\u002F\u002Fyoutu.be\u002FNewX2xofWgE",[76,77],"\u002Fwebinars\u002Foffice-hours","\u002Fwebinars","Watch the recording","office-hours-14",["Island",81],{"key":82,"params":83,"result":85},"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0",{"props":84},"{}",{"head":86},{},["Island",88],{"key":89,"params":90,"result":91},"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU",{"props":84},{"head":92},{},["Island",94],{"key":95,"params":96,"result":98},"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU",{"props":97},"{\"text-color\":\"gray\"}",{"head":99},{},{"id":101,"detectable_with":102,"vuln_details":109,"vuln_id":119,"name":120,"published":121,"updated":67},29970,{"tool":103,"engine":106},{"id":104,"name":105},1,"Network Scanner",{"id":107,"name":108},2,"Nuclei",{"id":101,"codename":67,"description":67,"severity":110,"risk_description":111,"public_description":112,"public_recommendation":113,"recommendation":67,"references":114,"cvssv3":67,"epss_score":67,"epss_percentile":67,"cve":67,"in_cisa_catalog":20,"date":67,"software_type":67,"vendor":117,"product":118,"ptt_exploit_capabilities":67},"medium","The risk exists that the data is unknowingly exposed to the internet, making it accessible to remote threat actors that can leverage it to attack the target, or the entire company, depending on the sensitivity of the data.","Prefect Server was a self-hosted workflow orchestration server that exposed its API and web UI without authentication by default. Unauthenticated users could access the OpenAPI specification, which identified the Prefect REST API and its endpoints, potentially exposing flow, deployment, and flow-run data.","Prefect Server should not have been exposed publicly and should have been protected with authentication, a reverse proxy, or a VPN.",[115,116],"https:\u002F\u002Fgithub.com\u002FPrefectHQ\u002Fprefect","https:\u002F\u002Fwww.prefect.io\u002F","prefecthq","prefect","NETSCAN-NUCLEI-EXPOSURES-PREFECT-API-EXPOSURE","Prefect Server Unauthenticated API Exposure","2026-11-04T00:00:00Z"]