How Internal Scanning works: Q&A with Detectify’s product expert
Security doesn’t stop at the perimeter. The “inside” of your network often harbors many overlooked risks. To address this, ealier this year we launched Detectify Internal …
Newly added security tests, August 28, 2017: vBulletin and WordPress vulnerabilities
Detectify
To help you keep up with the latest vulnerabilities, we add new security tests to Detectify on a regular basis. The latest additions to the tool cover everything from a vBulletin SQL injection to a DOM XSS in a WordPress.
Here are the new security tests that now run when you start a Detectify scan:
- CVE-2016-6195 – Unauthenticated SQL Injection in VBulletin
- PHP symfony debug toolbar disclosure
- WordPress bridge-theme DOM XSS
- Web Cache Deception updates
If you’d like to learn more about DOM XSS vulnerabilities, why not check out our write-up explaining how we invented the Tesla DOM DOOM XSS?
Check out more content
Introducing PCI ASV Scanning: Continuous attack surface compliance in partnership with Clone Systems
Maintaining a secure external attack surface is no longer just about finding vulnerabilities; it’s about proving your resilience to partners, auditors, and regulatory bodies. Today, …
