Version 2.5

🚀 New Features

• XML External Entity (XXE) Injection Test: Added a new test to detect XXE vulnerabilities in XML parsers and endpoints #OWASP Top 10 Scanner
• React2Shell (CVE-2025-55182) Detection: Introduced a dedicated test for the React2Shell vulnerability, helping identify critical RCE risks in affected React setups.
• CLI Test Selection (sms.exe): Added a new CLI argument to explicitly specify which tests to run, enabling more targeted and efficient scans.
• Single Script Execution Mode: New capability to run a single scanning script against a list of input URLs—ideal for focused testing and research use cases.

🔄 Updates

• Detection Rule Enhancements: Updated vulnerability checks for:

  • Vulnerable OpenSSL Versions
  • Vulnerable WordPress Versions
  • Vulnerable Apache Versions
  • Vulnerable PHP Versions

• Updated Vulnerability Definitions: Refreshed and expanded definitions to include broader test coverage.

🐛 Bug Fixes

• Fixed an issue that could cause incorrect license invalidation due to system date/time changes.
• Fixed a false positive for Subresource Integrity Missing when the URL was not a network resource.