Feb. 19, 2023, 5:53 p.m. | /u/WashJealous

cybersecurity www.reddit.com

A lot of web vulnerabilities arise from outdated libraries. However, I find that most web vuln scanners miss a lot of version related vulnerabilities because they use their own database. A good example is contact form 7 < 5.3.2 RCE. I tried tools like invicti/netsparker, acunetix, nessus, burp pro (with extensions) and also free options like openvas, zap, arachni, nikto etc.

Is there any tool that use nvd/cve database for this? Otherwise I might have to integrate this myself. I’m …

acunetix burp cve cybersecurity database etc extensions find free integrate invicti nessus netsparker nikto nvd openvas options own pro rce scanners scanning tool tools version vuln vulnerabilities web website web vulnerabilities zap

SOC 2 Manager, Audit and Certification

@ Deloitte | US and CA Multiple Locations

Associate Principal Security Engineer

@ Activision Blizzard | Work from Home - CA

Security Engineer- Systems Integration

@ Meta | Bellevue, WA | Menlo Park, CA | New York City

Lead Security Engineer (Digital Forensic and IR Analyst)

@ Blue Yonder | Hyderabad

Senior Principal IAM Engineering Program Manager Cybersecurity

@ Providence | Redmond, WA, United States

Information Security Analyst II or III

@ Entergy | The Woodlands, Texas, United States