More improvements to Attack Surface Custom Policies
Tl;dr We’ve made a few improvements to Attack Surface Custom Policies, such as viewing alerts more easily and deleting custom policies. We’ve also made a …
Newly added security tests March 23, 2017: CVE-2017-5638 and Joomla SQL injections
Detectify Admin
To bring you the most up-to-date security service and help you stay on top of threats, we update Detectify on a regular basis. Here are some of the security tests added to the tool with our latest release:
- CVE-2017-5638, Apache Struts RCE
- WordPress error log disclosure
- WordPress wp-rich-snippet XSS
- WordPress all-in-one-schemaorg-rich-snippets XSS
- WordPress apptha-slider-gallery XSS
- WordPress apptha-slider-gallery SQL injection
- WordPress backup-with-restore Database Disclosure
- WordPress wp-database-backup RCE
- Joomla! vikappointments SQL injection
- Joomla! vikrentitems SQL injection
- Joomla! vikrentcar SQL injection
- Joomla! simplemembership SQL injection
- CKEditor wiris plugin XSS
- AWS S3CMD header information disclosure
- Concerto fingerprinting and XSS module
- Publicly exposed Lynk Zipper
Happy scanning!
The Detectify Team
[do_widget id=detectify_puff-2]
Related articles
How to set up Attack Surface Custom Policies
Validate security policies like you mean it Not everything on your attack surface is a vulnerability. Every organization has their own internal security policies that …
