These are the latest updates we've made to our platform. If you have any questions about any of the updates you see below, please feel free to contact us!
Sniper can now exploit a Local File Inclusion vulnerability inside the Console component of Oracle WebLogic Server (CVE-2022-21371).
Sniper can now exploit an RCE vulnerability in F5 BIG-IP (CVE-2022-1388).
The Network Scanner can now detect if a Jira Server or Data Center instance is vulnerable to a server-side template injection vulnerability (CVE-2019-11581).
Sniper can now exploit an unauthenticated RCE vulnerability in Zoho ManageEngine (CVE-2021-44077).
Sniper can now exploit an unrestricted file upload vulnerability in certain WSO2 products (CVE-2022-29464).
Sniper can now exploit an RCE vulnerability in Adobe ColdFusion (CVE-2018-15961).
Sniper can now exploit an RCE vulnerability in the Drupal server (CVE-2018-7600).
Sniper can now exploit an RCE vulnerability in Apache Struts 2 (CVE-2021-31805).
Sniper can now exploit an RCE vulnerability in Redis (CVE-2022-0543).
Sniper can now exploit an RCE vulnerability in the VMware Workspace ONE Access (CVE-2022-22954).
Sniper can now exploit an unauthenticated RCE vulnerability in Magento (CVE-2022-24086).
Sniper can now exploit an RCE vulnerability in Spring Cloud Function - a library in Spring (CVE-2022-22963).
Sniper can now exploit an RCE vulnerability in Spring core - a main component of the Java Spring Framework (CVE-2022-22965 - Spring4Shell).
Sniper can now exploit an RCE vulnerability in Spring Cloud Gateway (CVE-2022-22947).
Sniper can now exploit an RCE in the Apache Struts Framework (CVE-2017-12611).
The Network Scanner can now detect if an Oracle Weblogic Server is vulnerable to an Authentication Bypass vulnerability (CVE-2020-14882, CVE-2020-14883).
Sniper can now exploit an RCE in the Log4j logging library from Apache Struts 2 (CVE-2021-44228).
Sniper can now exploit an Authentication Bypass and RCE vulnerability in Zoho ManageEngine Desktop Central (CVE-2021-44515).
Sniper can now exploit an RCE in the Log4j logging library (CVE-2021-45046).
Sniper can now exploit an Authentication Bypass leading to Remote Code Execution in Zabbix (CVE-2022-23131).
