These are the latest updates we've made to our platform. If you have any questions about any of the updates you see below, please feel free to contact us!
Network Scanner can now detect if CVE-2023-29300, CVE-2023-29298 (Adobe Coldfusion) and CVE-2023-36934 (MOVEit) affect your targets.
Sniper can exploit a RCE vulnerability discovered in TerraMaster NAS (CVE-2022-24990).
We added some caching to the Passive Scanner to avoid repeating some heavy computations. The overall scan duration can decrease by up to 25%, according to our testing.
The Website Scanner can now detect in-band file-inclusion vulnerabilities via XML External Entities and XInclude directives.
Sniper can exploit a Path Traversal vulnerability discovered in GitLab (CVE-2023-2825).
Password Auditor is now located under the Network Vulnerability scanners section.
Cloud Scanner can detect if an asset is hosted on Azure.
The UX of resource sharing wasn't the best, so we decided to completely change the way you interact with this feature. Hopefully, we managed to deliver a better experience while keeping this feature's utility unchanged. Furthermore, we got rid of the complicated flow of adding all of the personal details for the members of your team and replaced it with a simpler Invite by email functionality which should make the addition of new team members much easier, faster, and safer.
Network Scanner can now detect if a MOVEit Transfer server is vulnerable to a SQL Injection vulnerability (CVE-2023-34362).
You will be notified via email (1 per day) if a webhook fails (e.g. there's an invalid callback URL).
You can now edit the time zone per account and for scheduled scans.
The Cloud Vulnerability Scanner is an advanced and comprehensive cloud security solution that evaluates multi-cloud environments (Amazon Web Services - AWS, Google Cloud Platform - GCP and Microsoft Azure - Azure) to identify misconfigurations, vulnerabilities, weak access controls, interesting files, and other security issues.
Sniper can exploit an authenticated bypass vuln discovered in Papercut (CVE-2023-27350).
You can edit your billing address from the Profile section to receive future invoices at the specified address. You can also aggregate all your past invoices and send them to the current billing address from the Billing history section.
We've upgraded the Website Scanner with the ability to now detect prototype pollution in server-side javascript code.
Sniper can exploit an RCE vuln discovered in Oracle E-Business Suite (CVE-2022-21587).
Sniper can exploit an RCE vuln discovered in vBulletin (CVE-2023-25135).
We've added new exploitation capabilities to our Website Scanner that allow you to read the cookies and localStorage of a web app vulnerable to XSS.
Website Scanner: We've fixed some bugs: XSS and SQL scanner starting with auth enabled; SQLI time-based FPs; OSCMDI time-based FPs; CSRF token not renewing after the first form submission.
Sniper can exploit an RCE vuln discovered in Sophos Web Appliance (CVE-2023-1671).
