Exploit for CVE-2022-24112 (RCE in Apache APISIX)
Copy link to “Exploit for CVE-2022-24112 (RCE in Apache APISIX)”Sniper can now exploit a Remote Code Execution vulnerability in the Apache APISIX API Gateway server (CVE-2022-24112).
Changelog
These are the latest updates we've made to our platform. If you have any questions about any of the updates you see below, please feel free to contact us!
Date
January 2023
Exploit for CVE-2022-35914 (RCE in GLPI htmlawed)
Copy link to “Exploit for CVE-2022-35914 (RCE in GLPI htmlawed)”Sniper can now exploit a Remote Code Execution vulnerability in the htmlawed module from GLPI (CVE-2022-35914).
December 2022
Exploit for CVE-2021-1472 (RCE in Cisco)
Copy link to “Exploit for CVE-2021-1472 (RCE in Cisco)”Sniper can now exploit a Remote Code Execution vulnerability affecting the web-based management interface of Cisco Small Business RV Series Routers (CVE-2021-1472).
Exploit for CVE-2022-31814 (RCE in pfBlockerNG)
Copy link to “Exploit for CVE-2022-31814 (RCE in pfBlockerNG)”Sniper can now exploit a Remote Code Execution vulnerability affecting pfBlockerNG packages (CVE-2022-31814).
November 2022
Exploit for CVE-2022-1386 (SSRF in Wordpress plugin)
Copy link to “Exploit for CVE-2022-1386 (SSRF in Wordpress plugin)”Sniper can now exploit a Server Side Request Forgery vulnerability affecting the Fusion Builder WordPress plugin, used in the well known Avada Wordpress theme (CVE-2022-1386).
Exploit for CVE-2022-29078 (RCE in EJS)
Copy link to “Exploit for CVE-2022-29078 (RCE in EJS)”Sniper can now exploit a Remote Code Execution vulnerability affecting EJS (Embedded JavaScript templates) Node.js package (CVE-2022-29078).
Detection for CVE-2022-28219 (XXE in Zoho ManageEngine)
Copy link to “Detection for CVE-2022-28219 (XXE in Zoho ManageEngine)”Network Scanner can now detect if a Zoho ManageEngine ADAudit Plus server is vulnerable to XML External Entity Injection (CVE-2022-28219).
October 2022
Exploit for CVE-2022-40684 (Authentication Bypass in Fortinet)
Copy link to “Exploit for CVE-2022-40684 (Authentication Bypass in Fortinet)”Sniper can now exploit an Authentication Bypass vulnerability affecting Fortinet FortiOS, FortiProxy and FortiSwitchManager (CVE-2022-40684).
Exploit for CVE-2022-36804 (RCE in Bitbucket)
Copy link to “Exploit for CVE-2022-36804 (RCE in Bitbucket)”Sniper can now exploit a Remote Code Execution vulnerability affecting Atlassian Bitbucket (CVE-2022-36804).
Detection for CVE-2021-39226 (Authentication Bypass in Grafana)
Copy link to “Detection for CVE-2021-39226 (Authentication Bypass in Grafana)”Network Scanner can now detect if a Grafana server is vulnerable to Authentication Bypass (CVE-2021-39226).
Detection for CVE-2022-41040/41082 - ProxyNotShell (RCE in Microsoft Exchange Server)
Copy link to “Detection for CVE-2022-41040/41082 - ProxyNotShell (RCE in Microsoft Exchange Server)”Network Scanner can now detect if a Microsoft Exchange server is vulnerable to Remote Code Execution (CVE-2022-41040/41082).
September 2022
Exploit for CVE-2017-0144 - Eternalblue (RCE in Remote Desktop Protocol/Services)
Copy link to “Exploit for CVE-2017-0144 - Eternalblue (RCE in Remote Desktop Protocol/Services)”Sniper can now exploit a Remote Code Execution vulnerability affecting Remote Desktop Protocol/Services (CVE-2017-0144).
Detection for CVE-2022-1040 (RCE in Sophos)
Copy link to “Detection for CVE-2022-1040 (RCE in Sophos)”Network Scanner can now detect if a Sophos server is vulnerable to a Remote Code Execution vulnerability (CVE-2022-1040).
Detection for CVE-2022-2884 (RCE in Gitlab CE/EE)
Copy link to “Detection for CVE-2022-2884 (RCE in Gitlab CE/EE)”Network Scanner can now detect if a Gitlab Comunity/Enterprise server is vulnerable to a Remote Code Execution vulnerability (CVE-2022-2884).
Exploit for CVE-2022-35405 (RCE in ManageEngine Password Manager Pro and PAM360)
Copy link to “Exploit for CVE-2022-35405 (RCE in ManageEngine Password Manager Pro and PAM360)”Sniper can now exploit a Remote Code Execution vulnerability affecting ManageEngine, Password Manager Pro and ManageEngine PAM360 (CVE-2022-35405).
Exploit for CVE-2018-1000861, CVE-2019-1003005, CVE-2019-1003029 (RCE in Jenkins)
Copy link to “Exploit for CVE-2018-1000861, CVE-2019-1003005, CVE-2019-1003029 (RCE in Jenkins)”Sniper can now exploit a Remote Code Execution vulnerability affecting the Jenkins Script Security Plugin (CVE-2018-1000861, CVE-2019-1003005, CVE-2019-1003029).
Detection for CVE-2019-0708 (BlueKeep - RCE in Microsoft Windows)
Copy link to “Detection for CVE-2019-0708 (BlueKeep - RCE in Microsoft Windows)”Network Scanner can now detect if a Microsoft Windows server is vulnerable to a Remote Code Execution vulnerability affecting RDP (CVE-2019-0708).
Exploit for CVE-2020-29453 (Arbitrary File Read in Jira)
Copy link to “Exploit for CVE-2020-29453 (Arbitrary File Read in Jira)”Sniper can now exploit a Pre-Authorization Arbitrary File Read vulnerability affecting Atlassian Jira (CVE-2020-29453).
Exploit for CVE-2022-31656 (Arbitrary File Read in VMware Workspace One)
Copy link to “Exploit for CVE-2022-31656 (Arbitrary File Read in VMware Workspace One)”Sniper can now exploit a Pre-Authorization Arbitrary File Read vulnerability affecting a VMware Workspace One server (CVE-2022-31656).
Detection for CVE-2022-24681 (XSS in Zoho ManageEngine)
Copy link to “Detection for CVE-2022-24681 (XSS in Zoho ManageEngine)”Network Scanner can now detect if a Zoho ManageEngine ADSelfService Plus server is vulnerable to Stored Cross-Site Scripting (CVE-2022-24681).