[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"all-banners":3,"vulnerability-29962":80,"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0":109,"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU":116,"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU":122},[4,15,24,31,38,45,65,70],{"title":5,"slug":6,"text":7,"link":8,"external":9,"targets":10,"cta":12,"variant":13,"priority":13,"campaign_id":14},"PHP2Shell detection - WP Scanner","php2shell-rce-pricing-1","Detect PHP2Shell with the WP Scanner! Available with every paid plan","https:\u002F\u002Fpentest-tools.com\u002Fpricing",true,[11],"\u002Fcms-vulnerability-scanning\u002Fwordpress-scanner-online-wpscan","See pricing options","secondary","php2shell-rce",{"title":16,"slug":17,"text":18,"link":19,"external":20,"targets":21,"cta":23,"variant":13,"priority":13,"campaign_id":17},"Node2Shell - Exploit on Sniper: Auto-Exploiter page","node2shell-exploit","🚨 Exclusive exploit for Node2Shell now live","https:\u002F\u002Fpentest-tools.com\u002Fpricing?utm_medium=website&utm_source=website&utm_campaign=node2shell&utm_content=call-to-action&utm_term=get-exploit-sniper",false,[22],"\u002Fexploit-helpers\u002Fsniper","Use it with the Exploit plan",{"title":25,"slug":17,"text":26,"link":27,"external":9,"targets":28,"cta":30,"variant":13,"priority":13,"campaign_id":17},"Node2Shell exploit - Exploit on the NS page","🚨 Go beyond Node2Shell detection: exploit it with our exclusive module","https:\u002F\u002Fpentest-tools.com\u002Fpricing?utm_medium=website&utm_source=website&utm_campaign=node2shell&utm_content=call-to-action&utm_term=get-exploit-network",[29],"\u002Fnetwork-vulnerability-scanning\u002Fnetwork-security-scanner-online","Pick the Exploit plan",{"title":32,"slug":33,"text":34,"link":35,"external":9,"targets":36,"cta":30,"variant":13,"priority":13,"campaign_id":17},"Node2Shell exploit - CVE page","node2shell-exploit-1","🚨 Detect + prove Node2Shell with our exclusive Sniper exploit","https:\u002F\u002Fpentest-tools.com\u002Fpricing?utm_medium=website&utm_source=website&utm_campaign=node2shell&utm_content=call-to-action&utm_term=get-exploit-vulndb",[37],"\u002Fvulnerabilities-exploits\u002Fnode2shell-brotli-decoder-remote-code-execution_29896",{"title":39,"slug":17,"text":40,"link":35,"external":9,"targets":41,"cta":44,"variant":13,"priority":13,"campaign_id":17},"Node2Shell exploit - Vuln DB homepage, product","🚨 CISA reports active Node2Shell exploitation. Use our exclusive exploit to get proof",[42,43],"\u002Fvulnerabilities-exploits","\u002Fproduct","Get the Exploit plan",{"title":46,"slug":17,"text":47,"link":8,"external":9,"targets":48,"cta":12,"variant":13,"priority":13,"campaign_id":17},"Node2Shell exploit - top pages, pricing CTA","Detect PHP2Shell & Node2Shell with every paid plan. Prove Node2Shell with the Exploit plan.",[49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64],"\u002F","\u002Fport-scanner-online-nmap","\u002Fwebsite-vulnerability-scanning\u002Fwebsite-scanner","\u002Ffind-subdomains-of-domain","\u002Fdiscover-hidden-directories-and-files","\u002Fvulnerabilities-exploits\u002Fphp2shell-remote-code-execution-cve-2026-109618-and-cve-2026-109619_29870","\u002Ffor\u002Ffree","\u002Ffeatures\u002Fattack-surface","\u002Ffeatures\u002Fauthenticated-web-app-scanning","\u002Ffeatures\u002Finternal-network-scanning","\u002Ffeatures\u002Fvulnerability-monitoring","\u002Ffeatures\u002Fvulnerability-assessment-reporting","\u002Ffeatures\u002Fpentest-reporting","\u002Fsolutions\u002Ffor-it-teams","\u002Fsolutions\u002Ffor-msps","\u002Fsolutions\u002Ffor-security-teams",{"title":66,"slug":17,"text":47,"link":67,"external":20,"targets":68,"cta":67,"variant":13,"priority":13,"campaign_id":17},"Node2Shell exploit - pricing page",null,[69],"\u002Fpricing",{"title":71,"slug":72,"text":73,"link":74,"external":9,"targets":75,"cta":78,"variant":13,"priority":13,"campaign_id":79},"Office Hours #14 recording","office-hours-14-recording","[Office Hours recording] PHP2Shell and HTTP2Shell, check to proof","https:\u002F\u002Fyoutu.be\u002FNewX2xofWgE",[76,77],"\u002Fwebinars\u002Foffice-hours","\u002Fwebinars","Watch the recording","office-hours-14",{"id":81,"detectable_with":82,"vuln_details":89,"vuln_id":106,"name":107,"published":108,"updated":67},29962,{"tool":83,"engine":86},{"id":84,"name":85},1,"Network Scanner",{"id":87,"name":88},2,"Nuclei",{"id":81,"codename":67,"description":67,"severity":90,"risk_description":91,"public_description":92,"public_recommendation":93,"recommendation":67,"references":94,"cvssv3":98,"epss_score":99,"epss_percentile":100,"cve":101,"in_cisa_catalog":20,"date":103,"software_type":67,"vendor":104,"product":105,"ptt_exploit_capabilities":67},"critical","An unauthenticated attacker with network access to the Rancher server can execute arbitrary JavaScript in the browser of any user who visits the login page, enabling session hijacking, credential theft, and full administrative takeover of the Rancher installation and managed clusters.","SUSE Rancher supports HTTP method override via the `_method` query parameter in the Norman API framework. Public UI settings routes were intended to be read-only for unauthenticated users, but the method override allows an unauthenticated attacker to perform PUT requests, modifying settings such as `ui-pl` (the product-line branding value). This value is rendered as raw HTML on the Rancher login page (`\u002Fdashboard\u002Fauth\u002Flogin`) without sanitization, enabling stored cross-site scripting. Any user who subsequently opens the login page executes the attacker-controlled script in the Rancher origin, potentially leading to administrator session hijacking, bootstrap password disclosure, or full administrative control of the Rancher installation and its downstream clusters.","Update Rancher to version 2.15.2, 2.14.6, 2.13.10, 2.12.14, or 2.11.18 or newer. After upgrading, review the current values of public UI settings (ui-pl, first-login, ui-banners, ui-brand, ui-issues, ui-default-landing) and restore any unexpected values. Rotate the local administrator password and invalidate existing administrator tokens and sessions if tampering is suspected.",[95,96,97],"https:\u002F\u002Fgithub.com\u002Francher\u002Francher\u002Fsecurity\u002Fadvisories\u002FGHSA-992f-xh8r-jg2f","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-88804","https:\u002F\u002Fgithub.com\u002FR0gfall\u002FCVE-2026-88804",9.6,0.00353,0.29078,[102],"CVE-2026-88804","2026-09-28T00:00:00Z","suse","rancher","NETSCAN-NUCLEI-CVE-CVE-2026-88804","SUSE Rancher - Stored XSS via Unauthenticated Settings Override","2026-11-04T00:00:00Z",["Island",110],{"key":111,"params":112,"result":114},"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0",{"props":113},"{}",{"head":115},{},["Island",117],{"key":118,"params":119,"result":120},"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU",{"props":113},{"head":121},{},["Island",123],{"key":124,"params":125,"result":127},"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU",{"props":126},"{\"text-color\":\"gray\"}",{"head":128},{}]