[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"all-banners":3,"vulnerability-29932":58,"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0":86,"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU":93,"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU":99},[4,15,23,31,38],{"title":5,"slug":6,"text":7,"link":8,"external":9,"targets":10,"cta":12,"variant":13,"campaign_id":14},"PHP2Shell detection - WP Scanner","php2shell-rce-pricing-1","Detect PHP2Shell with the WP Scanner! Available with every paid plan","https:\u002F\u002Fpentest-tools.com\u002Fpricing",true,[11],"\u002Fcms-vulnerability-scanning\u002Fwordpress-scanner-online-wpscan","See pricing options","secondary","php2shell-rce",{"title":16,"slug":17,"text":18,"link":19,"external":20,"targets":21,"cta":19,"variant":13,"campaign_id":14},"PHP2Shell & Node2Shell detection - pricing page","php2shell-rce-pricing","PHP2Shell & Node2Shell detection live in every paid plan (unlimited rescans for patch validation)",null,false,[22],"\u002Fpricing",{"title":24,"slug":25,"text":26,"link":8,"external":9,"targets":27,"cta":12,"variant":13,"campaign_id":25},"Node2Shell detection - Vuln DB homepage, product, CVE page","node2shell","🚨 Detect Node2Shell \u002F HTTP2Shell with any paid plan. Get proof",[28,29,30],"\u002Fvulnerabilities-exploits","\u002Fproduct","\u002Fvulnerabilities-exploits\u002Fnode2shell-brotli-decoder-remote-code-execution_29896",{"title":32,"slug":33,"text":34,"link":8,"external":9,"targets":35,"cta":37,"variant":13,"campaign_id":14},"PHP2Shell detection - NetScan on the NS page","php2shell-rce-netscan","🚨 Detect Node2Shell + PHP2Shell with NetScan (from $96\u002Fmo for 16 assets)",[36],"\u002Fnetwork-vulnerability-scanning\u002Fnetwork-security-scanner-online","Pick NetScan",{"title":39,"slug":14,"text":40,"link":8,"external":9,"targets":41,"cta":12,"variant":13,"campaign_id":14},"PHP2Shell detection - top pages, pricing CTA","🚨 Detect Node2Shell + PHP2Shell with any paid plan. Get proof",[42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57],"\u002F","\u002Fport-scanner-online-nmap","\u002Fwebsite-vulnerability-scanning\u002Fwebsite-scanner","\u002Ffind-subdomains-of-domain","\u002Fdiscover-hidden-directories-and-files","\u002Fvulnerabilities-exploits\u002Fphp2shell-remote-code-execution-cve-2026-109618-and-cve-2026-109619_29870","\u002Ffor\u002Ffree","\u002Ffeatures\u002Fattack-surface","\u002Ffeatures\u002Fauthenticated-web-app-scanning","\u002Ffeatures\u002Finternal-network-scanning","\u002Ffeatures\u002Fvulnerability-monitoring","\u002Ffeatures\u002Fvulnerability-assessment-reporting","\u002Ffeatures\u002Fpentest-reporting","\u002Fsolutions\u002Ffor-it-teams","\u002Fsolutions\u002Ffor-msps","\u002Fsolutions\u002Ffor-security-teams",{"id":59,"detectable_with":60,"vuln_details":67,"vuln_id":83,"name":84,"published":85,"updated":19},29932,{"tool":61,"engine":64},{"id":62,"name":63},1,"Network Scanner",{"id":65,"name":66},2,"Nuclei",{"id":59,"codename":19,"description":19,"severity":68,"risk_description":69,"public_description":70,"public_recommendation":71,"recommendation":19,"references":72,"cvssv3":76,"epss_score":77,"epss_percentile":78,"cve":79,"in_cisa_catalog":20,"date":81,"software_type":19,"vendor":82,"product":82,"ptt_exploit_capabilities":19},"high","The risk exists that a remote unauthenticated attacker could exploit this vulnerability to read sensitive information from arbitrary files located on the file system of the server.","XWiki Platform is a generic wiki platform. Prior to 17.10.5 and 18.2.0, the \u002Fskin\u002F action in com.xpn.xwiki.web.SkinAction can resolve double-encoded parent-directory segments outside the intended skin or web-application resource prefix when Jetty 12 or later decodes the request path. The affected lookup is replaced with Environment.getResourceAsStream(String, String), which constrains a resource to its expected prefix. An unauthenticated remote attacker can use the vulnerable behavior to read arbitrary resources permitted to the Jetty process, including WEB-INF\u002Fxwiki.cfg and, depending on deployment depth and operating-system permissions, host files. Tomcat and Jetty versions before 12 do not appear affected. This issue is fixed in versions 17.10.5 and 18.2.0.","Upgrade XWiki to later than 17.10.5 and 18.2.0.",[73,74,75],"https:\u002F\u002Fgithub.com\u002Fxwiki\u002Fxwiki-platform\u002Fsecurity\u002Fadvisories\u002FGHSA-qj4x-9g63-25g6","https:\u002F\u002Fjira.xwiki.org\u002Fbrowse\u002FXWIKI-24075","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34151",8.2,0.01062,0.6448,[80],"CVE-2026-34151","2026-09-14T00:00:00Z","xwiki","NETSCAN-NUCLEI-CVE-CVE-2026-34151","XWiki Platform - Path Traversal","2026-10-29T00:00:00Z",["Island",87],{"key":88,"params":89,"result":91},"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0",{"props":90},"{}",{"head":92},{},["Island",94],{"key":95,"params":96,"result":97},"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU",{"props":90},{"head":98},{},["Island",100],{"key":101,"params":102,"result":104},"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU",{"props":103},"{\"text-color\":\"gray\"}",{"head":105},{}]