[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"all-banners":3,"vulnerability-29980":76,"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0":107,"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU":114,"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU":120},[4,15,24,31,50,55,65],{"title":5,"slug":6,"text":7,"link":8,"external":9,"targets":10,"cta":12,"variant":13,"priority":13,"campaign_id":14},"PHP2Shell detection - WP Scanner","php2shell-rce-pricing-1","Detect PHP2Shell with the WP Scanner! Available with every paid plan","https:\u002F\u002Fpentest-tools.com\u002Fpricing",true,[11],"\u002Fcms-vulnerability-scanning\u002Fwordpress-scanner-online-wpscan","See pricing options","secondary","php2shell-rce",{"title":16,"slug":17,"text":18,"link":19,"external":20,"targets":21,"cta":23,"variant":13,"priority":13,"campaign_id":17},"Node2Shell - Exploit on Sniper: Auto-Exploiter page","node2shell-exploit","🚨 Exclusive exploit for Node2Shell now live","https:\u002F\u002Fpentest-tools.com\u002Fpricing?utm_medium=website&utm_source=website&utm_campaign=node2shell&utm_content=call-to-action&utm_term=get-exploit-sniper",false,[22],"\u002Fexploit-helpers\u002Fsniper","Use it with the Exploit plan",{"title":25,"slug":17,"text":26,"link":27,"external":9,"targets":28,"cta":30,"variant":13,"priority":13,"campaign_id":17},"Node2Shell exploit - Exploit on the NS page","🚨 Go beyond Node2Shell detection: exploit it with our exclusive module","https:\u002F\u002Fpentest-tools.com\u002Fpricing?utm_medium=website&utm_source=website&utm_campaign=node2shell&utm_content=call-to-action&utm_term=get-exploit-network",[29],"\u002Fnetwork-vulnerability-scanning\u002Fnetwork-security-scanner-online","Pick the Exploit plan",{"title":32,"slug":17,"text":33,"link":8,"external":9,"targets":34,"cta":12,"variant":13,"priority":13,"campaign_id":17},"Node2Shell exploit - top pages, pricing CTA","Detect PHP2Shell & Node2Shell with every paid plan. Prove Node2Shell with the Exploit plan.",[35,36,37,38,39,40,41,42,43,44,45,46,47,48,49],"\u002Fport-scanner-online-nmap","\u002Fwebsite-vulnerability-scanning\u002Fwebsite-scanner","\u002Ffind-subdomains-of-domain","\u002Fdiscover-hidden-directories-and-files","\u002Fvulnerabilities-exploits\u002Fphp2shell-remote-code-execution-cve-2026-109618-and-cve-2026-109619_29870","\u002Ffor\u002Ffree","\u002Ffeatures\u002Fattack-surface","\u002Ffeatures\u002Fauthenticated-web-app-scanning","\u002Ffeatures\u002Finternal-network-scanning","\u002Ffeatures\u002Fvulnerability-monitoring","\u002Ffeatures\u002Fvulnerability-assessment-reporting","\u002Ffeatures\u002Fpentest-reporting","\u002Fsolutions\u002Ffor-it-teams","\u002Fsolutions\u002Ffor-msps","\u002Fsolutions\u002Ffor-security-teams",{"title":51,"slug":17,"text":33,"link":52,"external":20,"targets":53,"cta":52,"variant":13,"priority":13,"campaign_id":17},"Node2Shell exploit - pricing page",null,[54],"\u002Fpricing",{"title":56,"slug":57,"text":58,"link":59,"external":9,"targets":60,"cta":63,"variant":13,"priority":13,"campaign_id":64},"Office Hours #14 recording","office-hours-14-recording","[Office Hours recording] PHP2Shell and HTTP2Shell, check to proof","https:\u002F\u002Fyoutu.be\u002FNewX2xofWgE",[61,62],"\u002Fwebinars\u002Foffice-hours","\u002Fwebinars","Watch the recording","office-hours-14",{"title":66,"slug":67,"text":68,"link":69,"external":20,"targets":70,"cta":12,"variant":13,"priority":13,"campaign_id":67},"*sshole, PHP2Shell & Node2Shell with any paid plan. Get proof with our Sniper exploit","sshole-detect-exploit","🚨 Detect *sshole & Node2Shell with any paid plan. Get proof with our Sniper exploit","https:\u002F\u002Fpentest-tools.com\u002Fpricing?utm_medium=website&utm_source=website&utm_campaign=ssh-nov26&utm_content=call-to-action&utm_term=get-homepage",[71,72,73,74,75],"\u002F","\u002Fvulnerabilities-exploits","\u002Fvulnerabilities-exploits\u002Fopenssh-musl-authentication-bypass-cve-2026-123158-sshole_29981","\u002Fvulnerabilities-exploits\u002Fnode2shell-http2shell-brotli-decoder-remote-code-execution_29896","\u002Fproduct",{"id":77,"detectable_with":78,"vuln_details":85,"vuln_id":104,"name":105,"published":106,"updated":52},29980,{"tool":79,"engine":82},{"id":80,"name":81},1,"Network Scanner",{"id":83,"name":84},2,"Nuclei",{"id":77,"codename":52,"description":52,"severity":86,"risk_description":87,"public_description":88,"public_recommendation":89,"recommendation":52,"references":90,"cvssv3":96,"epss_score":97,"epss_percentile":98,"cve":99,"in_cisa_catalog":20,"date":101,"software_type":52,"vendor":102,"product":103,"ptt_exploit_capabilities":52},"medium","Unauthenticated attackers can access all users' custom profile fields, exposing sensitive user information.","Zulip 11.0 to 12.1 contains an information disclosure caused by missing access-control check in GET \u002Fjson\u002Fusers endpoint, letting unauthenticated spectators access all users' custom profile fields, exploit requires web-public channels enabled.","pdate to version 12.2 or later.",[91,92,93,94,95],"https:\u002F\u002Fgithub.com\u002Fzulip\u002Fzulip\u002Fsecurity\u002Fadvisories\u002FGHSA-3m37-hwq6-jrj8","https:\u002F\u002Fgithub.com\u002Fzulip\u002Fzulip\u002Fcommit\u002F6f33a8fa345ba776039a3f46131c253599a3ba15","https:\u002F\u002Fgithub.com\u002Fzulip\u002Fzulip\u002Fcommit\u002F774d4c7b12755178fa406f0c0f3b2cafdbbec32c","https:\u002F\u002Fgithub.com\u002Fzulip\u002Fzulip\u002Fpull\u002F39913","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-115574",5.3,0.00705,0.53543,[100],"CVE-2026-115574","2026-11-04T00:00:00Z","zulip","zulip_server","NETSCAN-NUCLEI-CVE-CVE-2026-115574","Zulip Server 11.0 - 12.1 - Unauthenticated Custom Profile Field Disclosure","2026-11-06T00:00:00Z",["Island",108],{"key":109,"params":110,"result":112},"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0",{"props":111},"{}",{"head":113},{},["Island",115],{"key":116,"params":117,"result":118},"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU",{"props":111},{"head":119},{},["Island",121],{"key":122,"params":123,"result":125},"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU",{"props":124},"{\"text-color\":\"gray\"}",{"head":126},{}]