Detection for CVE-2022-34265 (SQLi in Django)
Copy link to “Detection for CVE-2022-34265 (SQLi in Django)”Network Scanner can now detect if a Django application is vulnerable to SQL Injection (CVE-2022-34265).
Changelog
These are the latest updates we've made to our platform. If you have any questions about any of the updates you see below, please feel free to contact us!
Date
August 2022
Exploit for CVE-2021-26086 (Arbitrary File Read in Jira)
Copy link to “Exploit for CVE-2021-26086 (Arbitrary File Read in Jira)”Sniper can now exploit a Pre-Authorization Arbitrary File Read vulnerability affecting Atlassian Jira (CVE-2021-26086).
Exploit for CVE-2022-27925 & CVE-2022-37042 (RCE in Zimbra ZCS)
Copy link to “Exploit for CVE-2022-27925 & CVE-2022-37042 (RCE in Zimbra ZCS)”Sniper can now exploit an Authentication Bypass vulnerability (CVE-2022-27925) and an Arbitrary File Upload (CVE-2022-37042) affecting the Zimbra collaboration suite.
Detection for CVE-2020-9490 (DoS in Apache)
Copy link to “Detection for CVE-2020-9490 (DoS in Apache)”Network Scanner can now detect if an Apache HTTP Server is vulnerable to Cache-Digest Denial of Service Attack (CVE-2020-9490).
Exploit for CVE-2019-8442 (Arbitrary File Read in Jira)
Copy link to “Exploit for CVE-2019-8442 (Arbitrary File Read in Jira)”Sniper can now exploit a Pre-Authorization Arbitrary File Read vulnerability affecting Atlassian Jira (CVE-2019-8442).
Website Scanner speed improvements
Copy link to “Website Scanner speed improvements”Website Scanner is now greatly improved (up to 60%) by parallelising the active detectors.
Detection for CVE-2020-14179 (Information Disclosure in Jira)
Copy link to “Detection for CVE-2020-14179 (Information Disclosure in Jira)”Network Scanner can now detect if a Jira server is vulnerable to Information Disclosure (CVE-2020-14179).
Exploit for CVE-2021-26085 (Arbitrary File Read in Confluence)
Copy link to “Exploit for CVE-2021-26085 (Arbitrary File Read in Confluence)”Sniper can now exploit a Pre-Authorization Arbitrary File Read vulnerability affecting Atlassian Confluence (CVE-2021-26085).
Detection for CVE-2021-3293 (Path Disclosure in Emlog)
Copy link to “Detection for CVE-2021-3293 (Path Disclosure in Emlog)”Network Scanner can now detect if an Emlog instance is vulnerable to Path Disclosure (CVE-2021-3293).
July 2022
New Assets page
Copy link to “New Assets page”We've replaced the old Targets page with a new Assets page where you can easily sort, filter and more with our new design. The new version also better reflects the Targets by grouping them under their according Asset and offers more flexibility with selection operations.
SMB support for Password Auditor
Copy link to “SMB support for Password Auditor”Password Auditor can now discover weak credentials for the SMB service.
WinRM support for Password Auditor
Copy link to “WinRM support for Password Auditor”Password Auditor can now discover weak credentials for the WinRM service.
Detection for CVE-2022-26138 (Authentication Bypass in Atlassian Confluence)
Copy link to “Detection for CVE-2022-26138 (Authentication Bypass in Atlassian Confluence)”Network Scanner can now detect if an Atlassian Confluence server is vulnerable to an Authentication Bypass vulnerability (CVE-2022-26138).
Detection for CVE-2018-11784 (Open Redirect in Apache Tomcat)
Copy link to “Detection for CVE-2018-11784 (Open Redirect in Apache Tomcat)”Network Scanner can now detect if an Apache Tomcat Server is vulnerable to Open Redirect (CVE-2018-11784).
Detection for CVE-2020-3580 (XSS in Cisco ASA and Cisco FTD)
Copy link to “Detection for CVE-2020-3580 (XSS in Cisco ASA and Cisco FTD)”Network Scanner can now detect if the web interfaces of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) are vulnerable to Cross-Site Scripting (CVE-2020-3580).
Exploit for CVE-2019-7609 (RCE in Kibana)
Copy link to “Exploit for CVE-2019-7609 (RCE in Kibana)”Sniper can now exploit a Remote Code Execution vulnerability affecting the Timelion visualizer from a Kibana instance (CVE-2019-7609).
Detection for CVE-2022-22980 (RCE in Spring Data)
Copy link to “Detection for CVE-2022-22980 (RCE in Spring Data)”Network Scanner can now detect if a Spring Data MongoDB application is vulnerable to SpEL(Spring Expression Language) Injection (CVE-2022-22980).
Exploit for CVE-2019-11580 (RCE in Atlassian Crowd)
Copy link to “Exploit for CVE-2019-11580 (RCE in Atlassian Crowd)”Sniper can now exploit a Remote Code Execution vulnerability affecting Atlassian Crowd and Crowd Data Center instances (CVE-2019-11580).
New blog design
Copy link to “New blog design”Our blog just got a massive revamp. We launched a new blog with a fresh redesign that helps you stay focused and get ethical hacking guides from our offensive specialists.