Introducing GraphQL Support for API Scanning
Detectify’s new GraphQL API Scanning uses hacker-led research to provide highly accurate (99.7%), payload-based security testing. It identifies complex vulnerabilities, helping enterprises meet PCI DSS …
Newly Added Security Tests, February 3, 2017: WordPress plugins and Elastic search
Detectify
Security never stands still, which is why we update our service on a regular basis to help you keep up with the latest vulnerabilities. We are constantly working on updating and improving our modules, but you can find some highlights from this week’s update below:
- WMPL SQL injection
- XSS in Jetpack WordPress plugin
- WordPress user enumeration via REST API
- publicly exposed Predis example files
- publicly exposed Webalizer interface
- Elastic search remote code execution
- /.bash_history finding
- open memcache port finding
- WordPress plupload.swf XSS
- WordPress wpml-plugin XSS
- information disclosure module for /unzip.php
Check out more content
Introducing IP Range Scanning: continuous Surface Monitoring for your entire network
Most organizations share a common, uncomfortable secret: they can’t answer basic questions about what is actually exposed on their IP ranges. As companies grow, whether …
