NoSQLi Scanner
Summary: PortSwigger's BApp Store lists a third-party Burp Suite extension called NoSQLi Scanner, authored by Gabriele Gristina at version 1.0, which provides a way to discover NoSQL injection vulnerabilities. The listing states it requires Java version 8, was last updated 01 February 2021, and carries an estimated overall system impact of Medium, with PortSwigger making no warranty about third-party extensions' quality or usefulness.
Key Takeaway: NoSQL injection tooling sits in a public extension store at version 1.0 and untouched since February 2021, so any team relying on it is scanning with code its own vendor explicitly declines to vouch for.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026