Server Software and Configuration Services
Changes: NOTE: Support for using suhosin is deprecated and will be removed in the near future – use ModSecurity instead. If you are unable to use ModSecurity, you will have to rely on either cxs Watch or manual scans New…
Changes: Fixed issue that produced false-positive failures for IP address actions through UI when checking for a valid IP address Modified lfd to support the use of either “password” or “pass” in for ST_MYSQL Updated CLUSTER information in readme.txt…
Changes: Fixed issue with cxs process termination due to scanning timeouts Prevent regex hangs due to some exploit tactics Fixed quarantine UI not restoring file permissions correctly
In their infinite wisdom, ASL have decided to no longer provide their delayed ModSecurity rules as from today with no warning whatsoever. They were a very useful resource to those that did not wish to pay for the supported live…
Changes: Extended fingerprint checks for alternative linefeeds in scripts Fixed functionality of the included test.cgi upload test script Enforce stricter permissions on Disable option to upgrade cxs in DA UI and instruct to use CLI Added use of –force…
Changes: Added the following to Script Version Scanning: Joomla XCloner Ext, WP XCloner Ext Added new advanced PHP decoders Exploit fingerprint definitions database additions
Changes: Removed VPS PASV check from Server Check in UI Added new option URLGET – This option can be used to select either HTTP::Tiny or LWP::UserAgent to retrieve URL data. HTTP::Tiny is faster than LWP::UserAgent and is included in the…
Changes: Added the following to Script Version Scanning: CubeCart Fixed cxs Watch in DA where new account creation was not automatically detected HTTP::Tiny upgraded to v0.036
Changes: Added the following to Script Version Scanning: AbanteCart, AEF, b2evolution, CMS Made Simple, CodeIgnitor, Concrete5, Dotclear, e107, Elgg, Feng Office, HESK, Jcow CE, MODX Evolution, MODX Revolution, Noahs Classifieds, OSClass, ownCloud, Oxwall, Piwigo, Piwik, Seo Panel, Serendipity, StatusNet, TomatoCart,…
Changes: Disable Script Version Scanning for web script scanning (cxscgi.sh) as it does not apply Perl module Storable added to the required list Added ten of the most popular WordPress extensions to Script Version Scanning: WP Akismet Ext v2 WP…