Acunetix has exhibited at RSA Conference Asia Pacific & Japan between the 22 – 24 July at the Marina Bay Sands, Singapore.
Black Hat Infosecurity Report reviewed
Black Hat USA is one of the biggest security events on the global calendar; now in its 18th year the six day event is well attended by the security staff of some of the biggest companies, with many having more than 5000 employees. Therefore, this…
In the headlines: Adobe Flash zero day and Java zero day vulnerabilities, and more
Hacking Team data leak result of Adobe Flash Zero day vulnerability If you’ve seen any security news this last week then it will have been impossible to miss the fact that Italian security company Hacking Team suffered a breach. The implications of this are huge,…
Nearly all websites have serious security vulnerabilities – new research shows
50% of businesses would fail at PCI compliance London, 13th July 2015 – A new report on 5,500 companies comprising 15,000 website and network scans, performed on over 1.9 million files, finds nearly half of the web applications scanned contained a ‘high security’ vulnerability such…
Is the new OpenSSL vulnerability Heartbleed all over again?
Last Monday, OpenSSL core team member Mark J Cox, delivered some, grim, but somewhat expected news on OpenSSL’s mailing list — A new version of OpenSSL is due to be released this Thursday 9th July, fixing a single security defect classified as “high” severity. OpenSSL is…
Acunetix Web Application Vulnerability Report 2015
A year after the release of the online version of our vulnerability scanner in March 2014, Acunetix have aggregated the findings of over 15,000 scans performed on 1.9 million files over the past 12 months with some interesting results. The report details the most common vulnerabilities…
Acunetix updated to detect vulnerabilities including Blind Out-of-band SQLi and RCE
Acunetix Web Vulnerability Scanner version 10 (build 20150707) has been updated to include new vulnerability checks, including the detection of Same Origin Method Execution, XSLT Injection, Blind Out-of-band Remote Code Execution and Blind Out-of-band SQL Injection. This build also includes various updates to the new…
Blind Out-of-band Remote Code Execution vulnerability testing added to AcuMonitor
Similar to Blind Out-of-band SQL Injection vulnerabilities, AcuMonitor can now detect Blind Out-of-band Remote Code Execution (RCE) vulnerabilities. Let’s consider a vulnerable PHP application that contains the following code $cmd = isset($_GET[‘1’]) ? $_GET[‘1’] : ”; if ($cmd) { exec(‘ping -c 1 ‘ . $cmd);…
Blind Out-of-band SQL Injection vulnerability testing added to AcuMonitor
Acunetix AcuMonitor is a free intermediary service that helps detect second-order vulnerabilities (i.e. vulnerabilities that do not provide a response to a scanner during testing) during a scan. AcuMonitor made its debut with Acunetix WVS version 9. Since then, we’ve continuously improved the service and…