Version 14 build 14.1.210316110 for Windows – 17th March 2021
New Features
- Web Asset Discovery, allowing users to discover domains related to their organisation or web assets already configured in Acunetix
- New page showing all the Target FQDNs consuming a target license
New Vulnerability Checks
- New test for SonicWall SSL-VPN 8.0.0.0 RCE via ShellShock exploit
- New test for Node.js Debugger Unauthorized Access Vulnerability
- New test for Node.js Inspector Unauthorized Access Vulnerability
- New test for Apache Shiro authentication bypass (CVE-2020-17523)
- New test for Reflected Cross-Site Scripting (XSS) vulnerability in PAN-OS management web interface (CVE-2020-2036)
- New test for Missing Authentication Check in SAP Solution Manager (CVE-2020-6207)
- New test for VMware vCenter Server Unauthorized Remote Code Execution (CVE-2021-21972)
- New test for Delve Debugger Unauthorized Access Vulnerability
- New check for HTTP response splitting with cloud storage
- New tests for WordPress plugins
Updates
- Acunetix updated to fully support NTLM Authentication for proxy authentication
- Multiple LSR/BLR and DeepScan updates and fixes
- Updated Chromium to v88.0.4298.0
- Updated Postgres database to v13.2
- Engines page has been updated to show the following:
- Status (online or otherwise) for each Engine
- The build number for each Engine
- Any license issues are reported as part of the status for each Engine
- Multi-Engine setups will start to automatically update the Engine only installations when the Main installation is updated
- The UI will reload after Acunetix is upgraded
- ‘WAF Export’ button renamed to ‘Export to’, and feature added to the Scans Page
- Multiple updates to the Comprehensive report
- Proxy Settings can now be specified for each Issue Tracker
- Updated JavaScript Library Audit check to cover libraries not hosted on the scanned target
- Users can now be created from the API
- Updated CORS check
Fixes
- Fixed bug in “Vulnerabilities in SharePoint could allow elevation of privilege” check
- Fixed issue causing check for updates to occasionally fail on MacOS
- Fixed issue causing DOM XSS sink to not always be show the in the code extract displayed in the alert
- Fixed issue caused when a custom collection is used in a TFS issue tracker configuration
- Fixed issue in WordPress XML-RPC pingback abuse check
- Fixed Deepscan crash
- Fixed False Positive in Broken Link Hijacking check
- Vulnerability CSV export now includes URL where vulnerability was detected
Скачать:
Вы должны провести 100 дней на форуме для просмотра контента.
Gofile - Free file sharing and storage platform
Gofile is a free file sharing and storage platform. You can store and share data of all types. There is no limit and everything is free.
gofile.io
Последнее редактирование:
