November 2023 Summaries

A recent update from the ethical hacker community has introduced a variety of new modules and vulnerabilities to Surface Monitoring and Application Scanning tools, showcased in the “What’s New?” section. The update includes newly identified vulnerabilities such as OwnCloud Phpinfo Configuration, ProfilePress Sensitive Information Exposure, and NextGen Healthcare Mirth Connect RCE. Additionally, several pre-existing vulnerabilities have been updated, including Cisco WebUI Compromised and Log4Shell (log4j) RCE. New tests have been added by Detectify staff, focusing on exposures like Adobe ColdFusion Login Portal and PHP var_dump Exposure. The update also highlights a range of exposures related to various software and platforms, including Atom Package Configuration Credentials, Amazon API-Key Disclosure, and Visual Studio Code Settings Exposure, underscoring the ongoing efforts to enhance security measures and address potential threats in software systems.