New security checks for Microsoft SharePoint.
Debug Parameters test offers you the ability to check your web applications if common debug parameters, such as “?debug=1” disclose sensitive information or SQL Injections.
New Cross-Site Scripting checks for Ruby on Rails / Homakov variants.
Security check for JetBrains .idea project directory.
ToolsPack backdoor verification.
Security check for Fantastico_Filelist information disclosure.
Tests for authentication bypass vulnerabilities in MySQL, MariaDB (CVE-2012-2122).
Check for Nginx restrictions bypass (CVE-2011-4963).
New checks
when phpinfo() page is discovered: all html in such page is parsed and
various alerts are issued reporting PHP configuration problems
(display_errors on, register_globals etc).
