Detection for CVE-2022-34265 (SQLi in Django)
Copy link to “Detection for CVE-2022-34265 (SQLi in Django)”Network Scanner can now detect if a Django application is vulnerable to SQL Injection (CVE-2022-34265).
Changelog
These are the latest updates we've made to our platform. If you have any questions about any of the updates you see below, please feel free to contact us!
Date
August 2022
Exploit for CVE-2021-26086 (Arbitrary File Read in Jira)
Copy link to “Exploit for CVE-2021-26086 (Arbitrary File Read in Jira)”Sniper can now exploit a Pre-Authorization Arbitrary File Read vulnerability affecting Atlassian Jira (CVE-2021-26086).
Exploit for CVE-2022-27925 & CVE-2022-37042 (RCE in Zimbra ZCS)
Copy link to “Exploit for CVE-2022-27925 & CVE-2022-37042 (RCE in Zimbra ZCS)”Sniper can now exploit an Authentication Bypass vulnerability (CVE-2022-27925) and an Arbitrary File Upload (CVE-2022-37042) affecting the Zimbra collaboration suite.
Detection for CVE-2020-9490 (DoS in Apache)
Copy link to “Detection for CVE-2020-9490 (DoS in Apache)”Network Scanner can now detect if an Apache HTTP Server is vulnerable to Cache-Digest Denial of Service Attack (CVE-2020-9490).
Exploit for CVE-2019-8442 (Arbitrary File Read in Jira)
Copy link to “Exploit for CVE-2019-8442 (Arbitrary File Read in Jira)”Sniper can now exploit a Pre-Authorization Arbitrary File Read vulnerability affecting Atlassian Jira (CVE-2019-8442).
Detection for CVE-2020-14179 (Information Disclosure in Jira)
Copy link to “Detection for CVE-2020-14179 (Information Disclosure in Jira)”Network Scanner can now detect if a Jira server is vulnerable to Information Disclosure (CVE-2020-14179).
Exploit for CVE-2021-26085 (Arbitrary File Read in Confluence)
Copy link to “Exploit for CVE-2021-26085 (Arbitrary File Read in Confluence)”Sniper can now exploit a Pre-Authorization Arbitrary File Read vulnerability affecting Atlassian Confluence (CVE-2021-26085).
Detection for CVE-2021-3293 (Path Disclosure in Emlog)
Copy link to “Detection for CVE-2021-3293 (Path Disclosure in Emlog)”Network Scanner can now detect if an Emlog instance is vulnerable to Path Disclosure (CVE-2021-3293).
July 2022
Detection for CVE-2022-26138 (Authentication Bypass in Atlassian Confluence)
Copy link to “Detection for CVE-2022-26138 (Authentication Bypass in Atlassian Confluence)”Network Scanner can now detect if an Atlassian Confluence server is vulnerable to an Authentication Bypass vulnerability (CVE-2022-26138).
Detection for CVE-2018-11784 (Open Redirect in Apache Tomcat)
Copy link to “Detection for CVE-2018-11784 (Open Redirect in Apache Tomcat)”Network Scanner can now detect if an Apache Tomcat Server is vulnerable to Open Redirect (CVE-2018-11784).
Detection for CVE-2020-3580 (XSS in Cisco ASA and Cisco FTD)
Copy link to “Detection for CVE-2020-3580 (XSS in Cisco ASA and Cisco FTD)”Network Scanner can now detect if the web interfaces of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) are vulnerable to Cross-Site Scripting (CVE-2020-3580).
Exploit for CVE-2019-7609 (RCE in Kibana)
Copy link to “Exploit for CVE-2019-7609 (RCE in Kibana)”Sniper can now exploit a Remote Code Execution vulnerability affecting the Timelion visualizer from a Kibana instance (CVE-2019-7609).
Detection for CVE-2022-22980 (RCE in Spring Data)
Copy link to “Detection for CVE-2022-22980 (RCE in Spring Data)”Network Scanner can now detect if a Spring Data MongoDB application is vulnerable to SpEL(Spring Expression Language) Injection (CVE-2022-22980).
Exploit for CVE-2019-11580 (RCE in Atlassian Crowd)
Copy link to “Exploit for CVE-2019-11580 (RCE in Atlassian Crowd)”Sniper can now exploit a Remote Code Execution vulnerability affecting Atlassian Crowd and Crowd Data Center instances (CVE-2019-11580).
Exploit for CVE-2019-6340 (RCE in Drupal Core)
Copy link to “Exploit for CVE-2019-6340 (RCE in Drupal Core)”Sniper can now exploit a Remote Code Execution vulnerability affecting Drupal Core (CVE-2019-6340).
June 2022
Exploit for CVE-2022-30525 (RCE in Zyxel Firewall)
Copy link to “Exploit for CVE-2022-30525 (RCE in Zyxel Firewall)”Sniper can now exploit a OS command injection vulnerability in the CGI program of Zyxel Firewall (CVE-2022-30525).
Exploit for CVE-2022-26352 (RCE in DotCMS)
Copy link to “Exploit for CVE-2022-26352 (RCE in DotCMS)”Sniper can now exploit a Remote Code Execution vulnerability affecting DotCMS systems (CVE-2022-26352).
Exploit for CVE-2022-26134 (RCE in Confluence)
Copy link to “Exploit for CVE-2022-26134 (RCE in Confluence)”Sniper can now exploit a Remote Code Execution vulnerability affecting Atlassian Confluence server instances (CVE-2022-26134).
May 2022
Detection for CVE-2022-0540 (Authentication Bypass in Jira)
Copy link to “Detection for CVE-2022-0540 (Authentication Bypass in Jira)”The Network Scanner can now detect if a Jira Seraph (the core authentication mechanism of Jira) instance is vulnerable to authentication bypass (CVE-2022-0540).