Critical vulnerability: OpenSSH authentication bypass on Alpine Linux
On November 5, 2026, Alpine Linux published a security advisory for an authentication bypass in its openssh-server package, nicknamed sshole by researcher Özgün Kültekin of …
Newly added security tests, August 28, 2017: vBulletin and WordPress vulnerabilities
Detectify
To help you keep up with the latest vulnerabilities, we add new security tests to Detectify on a regular basis. The latest additions to the tool cover everything from a vBulletin SQL injection to a DOM XSS in a WordPress.
Here are the new security tests that now run when you start a Detectify scan:
- CVE-2016-6195 – Unauthenticated SQL Injection in VBulletin
- PHP symfony debug toolbar disclosure
- WordPress bridge-theme DOM XSS
- Web Cache Deception updates
If you’d like to learn more about DOM XSS vulnerabilities, why not check out our write-up explaining how we invented the Tesla DOM DOOM XSS?
Check out more content
Critical PHP Vulnerabilities (CVE-2026-109618 & CVE-2026-109619)
On October 20, 2026, the PHP security team issued an advance security advisory regarding two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, affecting core PHP source code. …
