Exploit for CVE-2019-11510 (LFI in Pulse Secure)
Copy link to “Exploit for CVE-2019-11510 (LFI in Pulse Secure)”Sniper can now exploit a Local File Inclusion in Pulse Connect Secure (CVE-2019-11510).
Changelog
These are the latest updates we've made to our platform. If you have any questions about any of the updates you see below, please feel free to contact us!
Date
September 2021
Exploit for CVE-2021-38647 (RCE in Multiple Azure Linux Deployments)
Copy link to “Exploit for CVE-2021-38647 (RCE in Multiple Azure Linux Deployments)”Sniper can now exploit an RCE in the Open Management Infrastructure (OMI) agent that is preconfigured in the Linux VM deployed on Azure (CVE-2021-38647).
Exploit for CVE-2021-21972 (RCE in VMware vCenter)
Copy link to “Exploit for CVE-2021-21972 (RCE in VMware vCenter)”Sniper can now exploit an Unauthenticated RCE in VMware vCenter (CVE-2021-21972).
Exploit for CVE-2021-26084 (RCE in Atlassian Confluence)
Copy link to “Exploit for CVE-2021-26084 (RCE in Atlassian Confluence)”Sniper can now exploit an RCE in Atlassian Confluence (CVE-2021-26084).
Detection for CVE-2021-21975 (vRealize Operations Manager API SSRF)
Copy link to “Detection for CVE-2021-21975 (vRealize Operations Manager API SSRF)”The Network Scanner can now detect SSRF in vRealize Operations Manager API (CVE-2021-21975).
Detection for CVE-2021-24146 (Modern Events Calendar Lite)
Copy link to “Detection for CVE-2021-24146 (Modern Events Calendar Lite)”The Network Scanner can now detect if Modern Events Calendar Lite is vulnerable to an Unauthenticated Events Export (CVE-2021-24146).
August 2021
Detection for CVE-2021-21985 (VMware vCenter RCE)
Copy link to “Detection for CVE-2021-21985 (VMware vCenter RCE)”The Network Scanner can now detect RCE in VMware vCenter (CVE-2021-21985).
Detection for CVE-2021-31195 (ProxyOracle)
Copy link to “Detection for CVE-2021-31195 (ProxyOracle)”The Network Scanner can now detect XSS in the ProxyOracle exploit (CVE-2021-31195).
Detection for CVE-2018-13379 (FortiOS path traversal)
Copy link to “Detection for CVE-2018-13379 (FortiOS path traversal)”The Network Scanner can now detect CVE-2018-13379 – path traversal in FortiGate SSL VPN appliance.
July 2021
Detection for CVE-2021-21315 (Node.js Systeminformation RCE)
Copy link to “Detection for CVE-2021-21315 (Node.js Systeminformation RCE)”The Network Scanner can now detect Node.js Systeminformation Command Injection (CVE-2021-21315).
Detection for CVE-2021-28480 (Microsoft Exchange RCE)
Copy link to “Detection for CVE-2021-28480 (Microsoft Exchange RCE)”The Network Scanner can now detect Remote Code Execution in Microsoft Exchange Server (CVE-2021-28480).
Detection for CVE-2021-34473 (Pre-auth Path Confusion vulnerability)
Copy link to “Detection for CVE-2021-34473 (Pre-auth Path Confusion vulnerability)”The Network Scanner can now detect the entry point for the ProxyShell attack chain (CVE-2021-34473).
April 2021
Detection for CVE-2021-21972 (VMware vCenter RCE)
Copy link to “Detection for CVE-2021-21972 (VMware vCenter RCE)”The Network Scanner can now detect the VMware vCenter Unauthenticated RCE (CVE-2021-21972) vulnerability.
March 2021
Detection for CVE-2021-2685 (MS Exchange ProxyLogon)
Copy link to “Detection for CVE-2021-2685 (MS Exchange ProxyLogon)”The Network Scanner can now the Microsoft Exchange CVE-2021-26855 SSRF vulnerability (ProxyLogon).
Detection for CVE-2021-22986 (F5 BIG-IP RCE)
Copy link to “Detection for CVE-2021-22986 (F5 BIG-IP RCE)”The Network Scanner can now detect the F5 BIG-IP CVE-2021-22986 unauthenticated remote code execution vulnerability.
Detection for Hafnium webshells (ProxyLogon)
Copy link to “Detection for Hafnium webshells (ProxyLogon)”The Network Scanner can now detect Hafnium webshells injected during ProxyLogon attacks.
ProxyLogon Scanner
Copy link to “ProxyLogon Scanner”Check if a Microsoft Exchange server is affected by CVE-2021-26855, a vulnerability which can lead to disclosure of sensitive information and to RCE.
February 2021
Deprecated Citrix and BigIP scanners
Copy link to “Deprecated Citrix and BigIP scanners”The vulnerability scanners for Citrix CVE-2019-19781 and BIG-IP CVE-2020-5902 have been deprecated.