[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"all-banners":3,"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0":97,"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU":104,"vulnerability-29992":110,"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU":139},[4,13,23,35,43,50,57,65,70,75,79,86,90],{"title":5,"slug":6,"text":7,"link":8,"external":9,"targets":10,"cta":8,"variant":12,"priority":12,"campaign_id":6},"PHP2Shell, Node2Shell, *sshole detections - pricing page","node2shell-exploit","Detect PHP2Shell, Node2Shell & *sshole with every paid plan.",null,false,[11],"\u002Fpricing","secondary",{"title":14,"slug":15,"text":16,"link":17,"external":18,"targets":19,"cta":22,"variant":12,"priority":12,"campaign_id":15},"Office Hours #15","office-hours-15","[Live Office Hours, Wed Nov 18] Behind the login, beyond the scan","https:\u002F\u002Fzoom.us\u002Fwebinar\u002Fregister\u002F5117815316917\u002FWN_BUp1qET2THa_5h65whpx9g",true,[20,21],"\u002Fwebinars\u002Foffice-hours","\u002Fwebinars","Save your spot",{"title":24,"slug":25,"text":26,"link":27,"external":9,"targets":28,"cta":34,"variant":12,"priority":12,"campaign_id":25},"*sshole, PHP2Shell & Node2Shell - HP, Vuln DB, product page","sshole-detect-exploit","🚨 Detect *sshole & Node2Shell with any paid plan. Get proof with our Sniper exploit","https:\u002F\u002Fpentest-tools.com\u002Fpricing",[29,30,31,32,33],"\u002F","\u002Fvulnerabilities-exploits","\u002Fvulnerabilities-exploits\u002Fopenssh-musl-authentication-bypass-cve-2026-123158-sshole_29981","\u002Fvulnerabilities-exploits\u002Fnode2shell-http2shell-brotli-decoder-remote-code-execution_29896","\u002Fproduct","See pricing options",{"title":36,"slug":37,"text":38,"link":27,"external":9,"targets":39,"cta":41,"variant":12,"priority":12,"campaign_id":42},"*sshole - Exploit on Sniper: Auto-Exploiter page","sshole-exploit-sniper","🚨 Exclusive exploit for *sshole now live",[40],"\u002Fexploit-helpers\u002Fsniper","Use it with the Exploit plan","sshole-exploit",{"title":44,"slug":45,"text":46,"link":27,"external":18,"targets":47,"cta":49,"variant":12,"priority":12,"campaign_id":42},"*sshole exploit - Exploit on the NS page","sshole-exploit-ns","🚨 Go beyond *sshole detection: get proof of exploitation",[48],"\u002Fnetwork-vulnerability-scanning\u002Fnetwork-security-scanner-online","Pick the Exploit plan",{"title":51,"slug":52,"text":53,"link":27,"external":18,"targets":54,"cta":34,"variant":12,"priority":12,"campaign_id":42},"*sshole exploit - WS, free tools","sshole-exploit-mainpw","Detect *sshole with every paid plan. Prove it with Exploit.",[55,56],"\u002Fwebsite-vulnerability-scanning\u002Fwebsite-scanner","\u002Ffor\u002Ffree",{"title":58,"slug":59,"text":60,"link":27,"external":9,"targets":61,"cta":34,"variant":63,"priority":64,"campaign_id":59},"Apache HTTP\u002F2 RCE - HP, Vuln DB, product page","apache-rce-detection","🚨 Detect CVE-2026-119618 (Apache HTTP\u002F2 RCE) on your servers with any paid plan",[29,30,33,62],"\u002Fvulnerabilities-exploits\u002Fapache-http-server-race-condition_30011","primary","main",{"title":66,"slug":59,"text":67,"link":27,"external":18,"targets":68,"cta":69,"variant":63,"priority":64,"campaign_id":59},"Apache RCE detection - Detection on the NS page","🚨 Now in every paid plan: detection for CVE-2026-119618 (Apache HTTP\u002F2 RCE)",[48],"Pick your plan",{"title":71,"slug":59,"text":72,"link":27,"external":9,"targets":73,"cta":34,"variant":63,"priority":64,"campaign_id":59},"Apache HTTP\u002F2 RCE - Port Scanner page","🚨 Found Apache on your web ports? Check it for CVE-2026-119618 with any paid plan",[74],"\u002Fnetwork-vulnerability-scanning\u002Fport-scanner-online-nmap",{"title":76,"slug":59,"text":77,"link":27,"external":18,"targets":78,"cta":34,"variant":63,"priority":64,"campaign_id":59},"Apache RCE detection - WS, free tools","🚨 Running your web app on Apache? Detect CVE-2026-119618 (HTTP\u002F2 RCE) with any paid plan",[55,56],{"title":80,"slug":59,"text":81,"link":27,"external":9,"targets":82,"cta":85,"variant":63,"priority":64,"campaign_id":59},"Apache HTTP\u002F2 RCE - URL fuzzer, Subdomain Finder","🚨 PHP2Shell, Node2Shell, *sshole & CVE-2026-119618 (Apache) detection in every paid plan, with unlimited rescans for patch validation",[83,84],"\u002Fwebsite-vulnerability-scanning\u002Fdiscover-hidden-directories-and-files","\u002Finformation-gathering\u002Ffind-subdomains-of-domain","Find out with any plan",{"title":87,"slug":59,"text":88,"link":27,"external":9,"targets":89,"cta":85,"variant":12,"priority":64,"campaign_id":59},"Apache HTTP\u002F2 RCE - CVE page, product page","🚨 Apache HTTP\u002F2 RCE (CVE-2026-119618): detect it across your Apache servers",[62,33],{"title":91,"slug":92,"text":93,"link":94,"external":9,"targets":95,"cta":96,"variant":12,"priority":64,"campaign_id":59},"Apache HTTP\u002F2 RCE - VulnDB page","apache-rce-detection-1","🚨 New: free scanner for CVE-2026-119618, the Apache HTTP\u002F2 RCE. Get a free PDF report.","https:\u002F\u002Fpentest-tools.com\u002Fnetwork-vulnerability-scanning\u002Fcve-2026-119618-scanner-apache-http2-rce",[30],"Scan for free",["Island",98],{"key":99,"params":100,"result":102},"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0",{"props":101},"{}",{"head":103},{},["Island",105],{"key":106,"params":107,"result":108},"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU",{"props":101},{"head":109},{},{"id":111,"detectable_with":112,"vuln_details":119,"vuln_id":136,"name":137,"published":138,"updated":8},29992,{"tool":113,"engine":116},{"id":114,"name":115},1,"Network Scanner",{"id":117,"name":118},2,"Nuclei",{"id":111,"codename":8,"description":8,"severity":120,"risk_description":121,"public_description":122,"public_recommendation":123,"recommendation":8,"references":124,"cvssv3":128,"epss_score":129,"epss_percentile":130,"cve":131,"in_cisa_catalog":9,"date":133,"software_type":8,"vendor":134,"product":135,"ptt_exploit_capabilities":8},"critical","An unauthenticated attacker can obtain administrative access to the WordPress site, leading to full site compromise.","Profile Builder and Profile Builder Pro WordPress plugins up to and including 3.11.8 compare the submitted registration email against existing users and pending signups without trimming whitespace. Because MySQL string equality ignores trailing spaces but PHP does not, and a leading space desyncs the two checks entirely, an unauthenticated attacker can register a pending signup bound to an existing user's email (e.g. the administrator) by submitting that email with a leading space. When the signup is later activated it collides with the existing account, granting the attacker administrative access without holding any account on the site. Exploitation requires the plugin's Email Confirmation feature to be enabled and a page containing the [wppb-register] shortcode.","Update Profile Builder \u002F Profile Builder Pro to 3.11.9 or later, which trims the email before the duplicate-account and pending-signup checks.",[125,126,127],"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6695","https:\u002F\u002Fwpscan.com\u002Fvulnerability\u002FCVE-2024-6695","https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=\u002Fprofile-builder\u002Ftags\u002F3.11.8&new_path=\u002Fprofile-builder\u002Ftags\u002F3.11.9",9.8,0.00796,0.56898,[132],"CVE-2024-6695","2024-07-31T00:00:00Z","cozmoslabs","profile-builder","NETSCAN-NUCLEI-CVE-CVE-2024-6695","Profile Builder \u003C= 3.11.8 - Unauthenticated Privilege Escalation","2026-11-11T00:00:00Z",["Island",140],{"key":141,"params":142,"result":144},"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU",{"props":143},"{\"text-color\":\"gray\"}",{"head":145},{}]