[Canvas] D2 Elliot 1.12, April 9 2018

DSquare Security sales at d2sec.com
Sun Apr 8 22:08:05 UTC 2018


D2 Elliot has been updated with 14 new web exploits. Payloads and workflows 
have been improved. 

This release also includes vFeed integration - https://vfeed.io/. Now you can 
directly access in D2 Elliot the full description of exploits via vFeed JSON 
files.

D2 Elliot is updated at least each two months with new modules and enhanced 
features.

Don't forget to follow us: https://twitter.com/d2sec


D2 Elliot Web Exploitation Framework is regularly updated with new exploits 
and tools to keep a high level of efficiency. If you need customized exploits 
or tools please contact us at info at d2sec.com 

For sales inquiries and orders, please contact sales at d2sec.com

--
DSquare Security, LLC
Website: https://www.d2sec.com
Twitter: https://twitter.com/d2sec
YouTube: https://www.youtube.com/user/dsquaresecurity


Changelog:

Exploits - Added:
 E-619 - Symantec Endpoint Protection Manager File Upload
 E-620 - Joomla User Notes List View SQL Injection
 E-621 - ManageEngine OpManager SQL Injection
 E-622 - vTiger File Upload
 E-623 - Shopware Server Side Template Injection RCE
 E-624 - WordPress WP Mobile Detector 3.5 File Upload
 E-625 - WordPress Mail Masta 1.0 File Disclosure
 E-626 - Dolphin 7.3.0 SQL Injection
 E-627 - Apache Tomcat for Windows HTTP PUT Method File Upload
 E-628 - Apache Tomcat VirtualDirContext Class File Handling Remote JSP Source Code Disclosure
 E-629 - Trend Micro Smart Protection Server Encryption Key Disclosure
 E-630 - Joomla Component com_jux_real_estate SQL Injection
 E-631 - Zenario CMS SQL Injection
 E-632 - Zenario CMS File Disclosure



More information about the Canvas mailing list