[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"all-banners":3,"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0":97,"vulnerability-29993":104,"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU":134,"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU":140},[4,13,23,35,43,50,57,65,70,75,79,86,90],{"title":5,"slug":6,"text":7,"link":8,"external":9,"targets":10,"cta":8,"variant":12,"priority":12,"campaign_id":6},"PHP2Shell, Node2Shell, *sshole detections - pricing page","node2shell-exploit","Detect PHP2Shell, Node2Shell & *sshole with every paid plan.",null,false,[11],"\u002Fpricing","secondary",{"title":14,"slug":15,"text":16,"link":17,"external":18,"targets":19,"cta":22,"variant":12,"priority":12,"campaign_id":15},"Office Hours #15","office-hours-15","[Live Office Hours, Wed Nov 18] Behind the login, beyond the scan","https:\u002F\u002Fzoom.us\u002Fwebinar\u002Fregister\u002F5117815316917\u002FWN_BUp1qET2THa_5h65whpx9g",true,[20,21],"\u002Fwebinars\u002Foffice-hours","\u002Fwebinars","Save your spot",{"title":24,"slug":25,"text":26,"link":27,"external":9,"targets":28,"cta":34,"variant":12,"priority":12,"campaign_id":25},"*sshole, PHP2Shell & Node2Shell - HP, Vuln DB, product page","sshole-detect-exploit","🚨 Detect *sshole & Node2Shell with any paid plan. Get proof with our Sniper exploit","https:\u002F\u002Fpentest-tools.com\u002Fpricing",[29,30,31,32,33],"\u002F","\u002Fvulnerabilities-exploits","\u002Fvulnerabilities-exploits\u002Fopenssh-musl-authentication-bypass-cve-2026-123158-sshole_29981","\u002Fvulnerabilities-exploits\u002Fnode2shell-http2shell-brotli-decoder-remote-code-execution_29896","\u002Fproduct","See pricing options",{"title":36,"slug":37,"text":38,"link":27,"external":9,"targets":39,"cta":41,"variant":12,"priority":12,"campaign_id":42},"*sshole - Exploit on Sniper: Auto-Exploiter page","sshole-exploit-sniper","🚨 Exclusive exploit for *sshole now live",[40],"\u002Fexploit-helpers\u002Fsniper","Use it with the Exploit plan","sshole-exploit",{"title":44,"slug":45,"text":46,"link":27,"external":18,"targets":47,"cta":49,"variant":12,"priority":12,"campaign_id":42},"*sshole exploit - Exploit on the NS page","sshole-exploit-ns","🚨 Go beyond *sshole detection: get proof of exploitation",[48],"\u002Fnetwork-vulnerability-scanning\u002Fnetwork-security-scanner-online","Pick the Exploit plan",{"title":51,"slug":52,"text":53,"link":27,"external":18,"targets":54,"cta":34,"variant":12,"priority":12,"campaign_id":42},"*sshole exploit - WS, free tools","sshole-exploit-mainpw","Detect *sshole with every paid plan. Prove it with Exploit.",[55,56],"\u002Fwebsite-vulnerability-scanning\u002Fwebsite-scanner","\u002Ffor\u002Ffree",{"title":58,"slug":59,"text":60,"link":27,"external":9,"targets":61,"cta":34,"variant":63,"priority":64,"campaign_id":59},"Apache HTTP\u002F2 RCE - HP, Vuln DB, product page","apache-rce-detection","🚨 Detect CVE-2026-119618 (Apache HTTP\u002F2 RCE) on your servers with any paid plan",[29,30,33,62],"\u002Fvulnerabilities-exploits\u002Fapache-http-server-race-condition_30011","primary","main",{"title":66,"slug":59,"text":67,"link":27,"external":18,"targets":68,"cta":69,"variant":63,"priority":64,"campaign_id":59},"Apache RCE detection - Detection on the NS page","🚨 Now in every paid plan: detection for CVE-2026-119618 (Apache HTTP\u002F2 RCE)",[48],"Pick your plan",{"title":71,"slug":59,"text":72,"link":27,"external":9,"targets":73,"cta":34,"variant":63,"priority":64,"campaign_id":59},"Apache HTTP\u002F2 RCE - Port Scanner page","🚨 Found Apache on your web ports? Check it for CVE-2026-119618 with any paid plan",[74],"\u002Fnetwork-vulnerability-scanning\u002Fport-scanner-online-nmap",{"title":76,"slug":59,"text":77,"link":27,"external":18,"targets":78,"cta":34,"variant":63,"priority":64,"campaign_id":59},"Apache RCE detection - WS, free tools","🚨 Running your web app on Apache? Detect CVE-2026-119618 (HTTP\u002F2 RCE) with any paid plan",[55,56],{"title":80,"slug":59,"text":81,"link":27,"external":9,"targets":82,"cta":85,"variant":63,"priority":64,"campaign_id":59},"Apache HTTP\u002F2 RCE - URL fuzzer, Subdomain Finder","🚨 PHP2Shell, Node2Shell, *sshole & CVE-2026-119618 (Apache) detection in every paid plan, with unlimited rescans for patch validation",[83,84],"\u002Fwebsite-vulnerability-scanning\u002Fdiscover-hidden-directories-and-files","\u002Finformation-gathering\u002Ffind-subdomains-of-domain","Find out with any plan",{"title":87,"slug":59,"text":88,"link":27,"external":9,"targets":89,"cta":85,"variant":12,"priority":64,"campaign_id":59},"Apache HTTP\u002F2 RCE - CVE page, product page","🚨 Apache HTTP\u002F2 RCE (CVE-2026-119618): detect it across your Apache servers",[62,33],{"title":91,"slug":92,"text":93,"link":94,"external":9,"targets":95,"cta":96,"variant":12,"priority":64,"campaign_id":59},"Apache HTTP\u002F2 RCE - VulnDB page","apache-rce-detection-1","🚨 New: free scanner for CVE-2026-119618, the Apache HTTP\u002F2 RCE. Get a free PDF report.","https:\u002F\u002Fpentest-tools.com\u002Fnetwork-vulnerability-scanning\u002Fcve-2026-119618-scanner-apache-http2-rce",[30],"Scan for free",["Island",98],{"key":99,"params":100,"result":102},"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0",{"props":101},"{}",{"head":103},{},{"id":105,"detectable_with":106,"vuln_details":113,"vuln_id":131,"name":132,"published":133,"updated":8},29993,{"tool":107,"engine":110},{"id":108,"name":109},1,"Network Scanner",{"id":111,"name":112},2,"Nuclei",{"id":105,"codename":8,"description":8,"severity":114,"risk_description":115,"public_description":116,"public_recommendation":117,"recommendation":8,"references":118,"cvssv3":123,"epss_score":124,"epss_percentile":125,"cve":126,"in_cisa_catalog":9,"date":128,"software_type":8,"vendor":129,"product":130,"ptt_exploit_capabilities":8},"medium","The risk exists that a remote unauthenticated attacker could exploit this vulnerability to read sensitive information from arbitrary files located on the file system of the server.","WP e-Commerce Shop Styling plugin for WordPress versions 2.5 and below contains a directory traversal vulnerability in includes\u002Fdownload.php. The 'filename' parameter is passed directly to readfile() without sanitization, allowing authenticated users to read arbitrary files on the server. Any authenticated WordPress user (including subscriber-level) can exploit this to download sensitive files such as \u002Fetc\u002Fpasswd or wp-config.php. The endpoint requires WordPress authentication via wp-admin\u002Fadmin.php; unauthenticated requests are redirected to wp-login.php. This template authenticates to WordPress first, then exploits the traversal.","Upgrade to WP e-Commerce Shop Styling version 2.6 or later, which rejects filenames containing \"\u002F\" and requires the .pdf extension. Alternatively, remove the plugin if no longer needed.",[119,120,121,122],"https:\u002F\u002Fcve.mitre.org\u002Fcgi-bin\u002Fcvename.cgi?name=CVE-2015-5468","https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F37422","https:\u002F\u002Fwpscan.com\u002Fvulnerability\u002F2f084e8a-c7d6-43c2-8834-7e4a6d501c8a","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-ecommerce-shop-styling\u002F",6.5,0.24093,0.97874,[127],"CVE-2015-5468","2017-05-23T00:00:00Z","haet","wp-ecommerce-shop-styling","NETSCAN-NUCLEI-CVE-CVE-2015-5468","WP e-Commerce Shop Styling \u003C= 2.5 - Authenticated Directory Traversal \u002F Arbitrary File Read","2026-11-11T00:00:00Z",["Island",135],{"key":136,"params":137,"result":138},"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU",{"props":101},{"head":139},{},["Island",141],{"key":142,"params":143,"result":145},"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU",{"props":144},"{\"text-color\":\"gray\"}",{"head":146},{}]