161 matches found
AcuAutomate
AcuAutomate AcuAutomate es una herramienta CLI no oficial de Acunetix que simplifica las pruebas de penetración automatizadas y la búsqueda de vulnerabilidades en objetivos extensos. Es una ayuda valiosa durante pruebas de penetración a gran escala, permitiendo iniciar o detener fácilmente...
ACME mini_httpd <1.30 - Local File Inclusion
ACME minihttpd before 1.30 is vulnerable to local file inclusion. id: CVE-2018-18778 info: name: ACME minihttpd 1.30 - Local File Inclusion author: DhiyaneshDK,dogasantos severity: medium description: ACME minihttpd before 1.30 is vulnerable to local file inclusion. impact: | Successful...
acunetix_0day
Acunetix 0day RCE - SYSTEM Acunetix 0day RCE Usage Run script with root@kitploit: dzonerzy:dvm dzonerzy$ python /Users/dzonerzy/PycharmProjects/natbypass/acu0day.py 9999 172.16.24.1 Acunetix WVS 10 - SYSTEM Remote Command Execution Daniele Linguaglossa Payload: Meterpreter reverse TCP 4444 Exploi...
CVE-2026-6958
Acunetix 25.11.251107123 for Windows contains a local privilege escalation vulnerability in the Web Vulnerability Scanning Engine wvsc.exe that allows low-privileged local attackers to execute arbitrary code as SYSTEM by exploiting a missing hardcoded directory path for OpenSSL-related files...
EUVD-2026-71151
Acunetix 25.11.251107123 for Windows contains a local privilege escalation vulnerability in the Web Vulnerability Scanning Engine wvsc.exe that allows low-privileged local attackers to execute arbitrary code as SYSTEM by exploiting a missing hardcoded directory path for OpenSSL-related files...
CVE-2026-6958 Acunetix 25.11.251107123 Local Privilege Escalation via wvsc.exe
Acunetix 25.11.251107123 for Windows contains a local privilege escalation vulnerability in the Web Vulnerability Scanning Engine wvsc.exe that allows low-privileged local attackers to execute arbitrary code as SYSTEM by exploiting a missing hardcoded directory path for OpenSSL-related files...
CVE-2026-6958
Acunetix 25.11.251107123 for Windows contains a local privilege escalation vulnerability in the Web Vulnerability Scanning Engine (wvsc.exe) . The root cause is a missing hardcoded directory path for OpenSSL-related files; a low-privileged local attacker can create that directory, place a malicio...
Acunetix_vulnerability_assessment_tool
Acunetixvulnerabilityassessmenttool !imagehttp...
EUVD-2015-4055
Malware in sbrugna...
EUVD-2017-3285
Malware in sbrugna...
EUVD-2007-0124
Malware in sbrugna...
EUVD-2017-3286
Malware in sbrugna...
CVE-2022-29315
Invicti Acunetix before 14 allows CSV injection via the Description field on the Add Targets page, if the Export CSV feature is used...
Web Hacking Service ‘Araneida’ Tied to Turkish IT Firm
Cybercriminals are selling hundreds of thousands of credential sets stolen with the help of a cracked version of Acunetix , a powerful commercial web app vulnerability scanner, new research finds. The cracked software is being resold as a cloud-based attack tool by at least two different services...
AcuAutomate - Unofficial Acunetix CLI Tool For Automated Pentesting And Bug Hunting Across Large Scopes
AcuAutomate is an unofficial Acunetix CLI tool that simplifies automated pentesting and bug hunting across extensive targets. It's a valuable aid during large-scale pentests, enabling the easy launch or stoppage of multiple Acunetix scans simultaneously. Additionally, its versatile functionality...
YoroTrooper: Researchers Warn of Kazakhstan's Stealthy Cyber Espionage Group
A relatively new threat actor known as YoroTrooper is likely made up of operators originating from Kazakhstan. The assessment, which comes from Cisco Talos, is based on their fluency in Kazakh and Russian, use of Tenge to pay for operating infrastructure, and very limited targeting of Kazakhstani...
Winter Vivern APT Targets European Government Entities with Zimbra Vulnerability
The advanced persistent threat APT actor known as Winter Vivern is now targeting officials in Europe and the U.S. as part of an ongoing cyber espionage campaign. "TA473 since at least February 2023 has continuously leveraged an unpatched Zimbra vulnerability in publicly facing webmail portals tha...
Weak Password Policy
Description This application commafeed is using a weak password policy. Acunetix was able to guess the credentials required to access this page. A weak password is short, common, a system default, or something that could be rapidly guessed by executing a brute force attack using a subset of all...
Weak Password Policy
Description This page is using a weak password. Acunetix was able to guess the credentials required to access this page. A weak password is short, common, a system default, or something that could be rapidly guessed by executing a brute force attack using a subset of all possible passwords, such ...
