[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"all-banners":3,"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0":58,"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU":65,"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU":71,"vulnerability-29927":78},[4,15,23,31,38],{"title":5,"slug":6,"text":7,"link":8,"external":9,"targets":10,"cta":12,"variant":13,"campaign_id":14},"PHP2Shell detection - WP Scanner","php2shell-rce-pricing-1","Detect PHP2Shell with the WP Scanner! Available with every paid plan","https:\u002F\u002Fpentest-tools.com\u002Fpricing",true,[11],"\u002Fcms-vulnerability-scanning\u002Fwordpress-scanner-online-wpscan","See pricing options","secondary","php2shell-rce",{"title":16,"slug":17,"text":18,"link":19,"external":20,"targets":21,"cta":19,"variant":13,"campaign_id":14},"PHP2Shell & Node2Shell detection - pricing page","php2shell-rce-pricing","PHP2Shell & Node2Shell detection live in every paid plan (unlimited rescans for patch validation)",null,false,[22],"\u002Fpricing",{"title":24,"slug":25,"text":26,"link":8,"external":9,"targets":27,"cta":12,"variant":13,"campaign_id":25},"Node2Shell detection - Vuln DB homepage, product, CVE page","node2shell","🚨 Detect Node2Shell \u002F HTTP2Shell with any paid plan. Get proof",[28,29,30],"\u002Fvulnerabilities-exploits","\u002Fproduct","\u002Fvulnerabilities-exploits\u002Fnode2shell-brotli-decoder-remote-code-execution_29896",{"title":32,"slug":33,"text":34,"link":8,"external":9,"targets":35,"cta":37,"variant":13,"campaign_id":14},"PHP2Shell detection - NetScan on the NS page","php2shell-rce-netscan","🚨 Detect Node2Shell + PHP2Shell with NetScan (from $96\u002Fmo for 16 assets)",[36],"\u002Fnetwork-vulnerability-scanning\u002Fnetwork-security-scanner-online","Pick NetScan",{"title":39,"slug":14,"text":40,"link":8,"external":9,"targets":41,"cta":12,"variant":13,"campaign_id":14},"PHP2Shell detection - top pages, pricing CTA","🚨 Detect Node2Shell + PHP2Shell with any paid plan. Get proof",[42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57],"\u002F","\u002Fport-scanner-online-nmap","\u002Fwebsite-vulnerability-scanning\u002Fwebsite-scanner","\u002Ffind-subdomains-of-domain","\u002Fdiscover-hidden-directories-and-files","\u002Fvulnerabilities-exploits\u002Fphp2shell-remote-code-execution-cve-2026-109618-and-cve-2026-109619_29870","\u002Ffor\u002Ffree","\u002Ffeatures\u002Fattack-surface","\u002Ffeatures\u002Fauthenticated-web-app-scanning","\u002Ffeatures\u002Finternal-network-scanning","\u002Ffeatures\u002Fvulnerability-monitoring","\u002Ffeatures\u002Fvulnerability-assessment-reporting","\u002Ffeatures\u002Fpentest-reporting","\u002Fsolutions\u002Ffor-it-teams","\u002Fsolutions\u002Ffor-msps","\u002Fsolutions\u002Ffor-security-teams",["Island",59],{"key":60,"params":61,"result":63},"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0",{"props":62},"{}",{"head":64},{},["Island",66],{"key":67,"params":68,"result":69},"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU",{"props":62},{"head":70},{},["Island",72],{"key":73,"params":74,"result":76},"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU",{"props":75},"{\"text-color\":\"gray\"}",{"head":77},{},{"id":79,"detectable_with":80,"vuln_details":87,"vuln_id":104,"name":105,"published":106,"updated":19},29927,{"tool":81,"engine":84},{"id":82,"name":83},1,"Network Scanner",{"id":85,"name":86},2,"Nuclei",{"id":79,"codename":19,"description":19,"severity":88,"risk_description":89,"public_description":90,"public_recommendation":91,"recommendation":19,"references":92,"cvssv3":97,"epss_score":98,"epss_percentile":99,"cve":100,"in_cisa_catalog":20,"date":102,"software_type":19,"vendor":103,"product":103,"ptt_exploit_capabilities":19},"high","Unauthenticated attackers can reconstruct user password salts and hashes from LiveTableResults\nresponses, enabling offline credential cracking.","XWiki Platform is a generic wiki platform. The patch for GHSA-5cf8-vrr8-8hjm \u002F CVE-2023-26476 was insufficient. Starting with version 6.2.1 and prior to 16.10.17, 17.4.9, 17.10.13, and 18.0.0RC1, slightly modified LiveTableResults parameters (for example password_class) still allow an unauthenticated attacker to discover password hashes one bit at a time. With about 768 requests, the full password salt and hash of a user can be retrieved. The check for password and email properties does not consider the class passed via the _class parameters.","Upgrade XWiki to 16.10.17, 17.4.9, 17.10.13, 18.0.0RC1, or later. As a workaround, apply the patch manually to the wiki page XWiki.LiveTableResultsMacros.",[93,94,95,96],"https:\u002F\u002Fgithub.com\u002Fxwiki\u002Fxwiki-platform\u002Fsecurity\u002Fadvisories\u002FGHSA-rh28-mqj4-8x59","https:\u002F\u002Fjira.xwiki.org\u002Fbrowse\u002FXWIKI-23875","https:\u002F\u002Fgithub.com\u002Fxwiki\u002Fxwiki-platform\u002Fcommit\u002Fc4442716b02ffcdaa9d5e703b1db6203e36456fa","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48048",7.5,0.00651,0.51076,[101],"CVE-2026-48048","2026-08-10T00:00:00Z","xwiki","NETSCAN-NUCLEI-CVE-CVE-2026-48048","XWiki Platform - Password Hash Disclosure","2026-10-29T00:00:00Z"]