[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"all-banners":3,"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0":67,"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU":74,"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU":80,"vulnerability-29895":87},[4,29,36,44,53,59],{"title":5,"slug":6,"text":7,"link":8,"external":9,"targets":10,"cta":27,"variant":28,"campaign_id":6},"PHP2Shell detection - top pages, pricing CTA","php2shell-rce","🚨 Detect PHP2Shell with any paid plan. Get proof now","https:\u002F\u002Fpentest-tools.com\u002Fpricing",true,[11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26],"\u002F","\u002Fport-scanner-online-nmap","\u002Fwebsite-vulnerability-scanning\u002Fwebsite-scanner","\u002Ffind-subdomains-of-domain","\u002Fdiscover-hidden-directories-and-files","\u002Fvulnerabilities-exploits\u002Fphp2shell-remote-code-execution-cve-2026-109618-and-cve-2026-109619_29870","\u002Ffor\u002Ffree","\u002Ffeatures\u002Fattack-surface","\u002Ffeatures\u002Fauthenticated-web-app-scanning","\u002Ffeatures\u002Finternal-network-scanning","\u002Ffeatures\u002Fvulnerability-monitoring","\u002Ffeatures\u002Fvulnerability-assessment-reporting","\u002Ffeatures\u002Fpentest-reporting","\u002Fsolutions\u002Ffor-it-teams","\u002Fsolutions\u002Ffor-msps","\u002Fsolutions\u002Ffor-security-teams","See pricing options","secondary",{"title":30,"slug":31,"text":32,"link":8,"external":9,"targets":33,"cta":35,"variant":28,"campaign_id":6},"PHP2Shell detection - NetScan on the NS page","php2shell-rce-netscan","🚨 Detect PHP2Shell with NetScan (from $96\u002Fmo for 16 assets)",[34],"\u002Fnetwork-vulnerability-scanning\u002Fnetwork-security-scanner-online","Pick NetScan",{"title":37,"slug":38,"text":39,"link":40,"external":41,"targets":42,"cta":40,"variant":28,"campaign_id":6},"PHP2Shell & Node2Shell detection - pricing page","php2shell-rce-pricing","PHP2Shell & Node2Shell detection live in every paid plan (unlimited rescans for patch validation)",null,false,[43],"\u002Fpricing",{"title":45,"slug":46,"text":47,"link":48,"external":9,"targets":49,"cta":52,"variant":28,"campaign_id":46},"Office Hours #14","office-hours-14","[Live Office Hours, Wed Oct 28] Check, patch, prove: PHP2Shell and other critical CVEs","https:\u002F\u002Fzoom.us\u002Fwebinar\u002Fregister\u002F5117815316917\u002FWN_xbwerEx9QFSjfNWIHcjtHw",[50,51],"\u002Fwebinars\u002Foffice-hours","\u002Fwebinars","Save your spot",{"title":54,"slug":55,"text":56,"link":8,"external":9,"targets":57,"cta":27,"variant":28,"campaign_id":6},"PHP2Shell detection - WP Scanner","php2shell-rce-pricing-1","Detect PHP2Shell with the WP Scanner! Available with every paid plan",[58],"\u002Fcms-vulnerability-scanning\u002Fwordpress-scanner-online-wpscan",{"title":60,"slug":61,"text":62,"link":8,"external":9,"targets":63,"cta":27,"variant":28,"campaign_id":61},"Node2Shell detection - Vuln DB homepage, product, CVE page","node2shell","🚨 Detect Node2Shell with any paid plan. Get proof now",[64,65,66],"\u002Fvulnerabilities-exploits","\u002Fproduct","\u002Fvulnerabilities-exploits\u002Fnode2shell-brotli-decoder-remote-code-execution_29896",["Island",68],{"key":69,"params":70,"result":72},"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0",{"props":71},"{}",{"head":73},{},["Island",75],{"key":76,"params":77,"result":78},"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU",{"props":71},{"head":79},{},["Island",81],{"key":82,"params":83,"result":85},"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU",{"props":84},"{\"text-color\":\"gray\"}",{"head":86},{},{"id":88,"detectable_with":89,"vuln_details":96,"vuln_id":112,"name":113,"published":114,"updated":40},29895,{"tool":90,"engine":93},{"id":91,"name":92},1,"Network Scanner",{"id":94,"name":95},2,"Nuclei",{"id":88,"codename":40,"description":40,"severity":97,"risk_description":98,"public_description":99,"public_recommendation":100,"recommendation":40,"references":101,"cvssv3":104,"epss_score":105,"epss_percentile":106,"cve":107,"in_cisa_catalog":9,"date":109,"software_type":40,"vendor":110,"product":111,"ptt_exploit_capabilities":40},"high","Attackers can retrieve sensitive information by bypassing access controls, leading to information disclosure.","Red Hat JBoss Enterprise Application Platform (EAP) can expose the Web Console, JMX Console, and JMXInvokerServlet without authentication, allowing remote attackers to reach admin dashboards and interact with MBeans, leading to full server compromise.","Restrict access to \u002Fweb-console, \u002Fjmx-console and \u002Finvoker, and enforce authentication on the JBoss management interfaces.",[102,103],"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2010-1428","https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2010-1428",7.5,0.52654,0.9896,[108],"CVE-2010-1428","2010-04-28T00:00:00Z","redhat","jboss_enterprise_application_platform","NETSCAN-NUCLEI-CVE-CVE-2010-1428","Red Hat JBoss - Web\u002FJMX Console Access","2026-10-25T00:00:00Z"]