Introducing Apex Discovery to secure every domain you actually own
Most tools will only test the domains you already know about. We’ve decided that’s not enough. TLDR: Detectify’s new Apex Discovery automatically identifies root domains …
Newly added security tests, August 28, 2017: vBulletin and WordPress vulnerabilities
Detectify
To help you keep up with the latest vulnerabilities, we add new security tests to Detectify on a regular basis. The latest additions to the tool cover everything from a vBulletin SQL injection to a DOM XSS in a WordPress.
Here are the new security tests that now run when you start a Detectify scan:
- CVE-2016-6195 – Unauthenticated SQL Injection in VBulletin
- PHP symfony debug toolbar disclosure
- WordPress bridge-theme DOM XSS
- Web Cache Deception updates
If you’d like to learn more about DOM XSS vulnerabilities, why not check out our write-up explaining how we invented the Tesla DOM DOOM XSS?
Check out more content
Introducing the Detectify MCP Server to connect security intelligence into your AI workflows
We are launching the Detectify MCP Server to deliver real-time vulnerability data and attack surface insights directly into your AI-powered workflows. Built for developers and …
