726 matches found
Wget Listing File Detected
The web server on the remote host contains publicly accessible Wget listing files. These listing files are produced by Wget during ftp transfers and contain details of source/destination file names, permissions, date of upload and other potentially sensitive information. This may be used to acces...
Jira Service Desk Sign Up Detected
Atlassian Jira is a software application used for issue tracking and project management. An internal only Atlassian Jira Service Desk instance may be misconfigured to be accessible to 3rd parties to sign up, potentially leading to attackers creating accounts and raising ticket requests for...
Visual Studio Code Configuration Detected
Visual Studio Code is a popular source-code editor provided by Microsoft, with extensions offering a variety of extra functionality covering amongst others remote file access, credentials and launch configurations. Configurations may be located inside a hidden directory named .vscode. When expose...
Spring Boot Actuator Detected
This is an informational notice that the scanner was able to detect an accessible Spring Actuator. Actuator endpoints let you monitor and interact with your application. Spring Boot includes a number of built-in endpoints and lets you add your own. For example, the 'health' endpoint provides basi...
Google Cloud Build Configuration Detected
Cloud Build is Google Cloud continuous integration and deployment serverless platform used to build and test software projects. By defining a configuration file named cloudbuild.yaml in their source code repositories, developers can customize their applications build workflows. When exposed with...
Docker Compose Configuration Detected
Docker Compose is a tool designed to help developers defining and running multi-container Docker applications. By defining a configuration file named docker-compose.yml in their application project directory, developers can define the different services used by the application with their...
CircleCI Configuration Detected
CircleCI is a continuous integration service available as a Software as a Service SaaS based application or as a private instance and which is used to build and test software projects. By defining a configuration file named .circleci/config.yml in their source code repositories, developers can...
kykuf.laptopgiare.info Cross Site Scripting vulnerability OBB-2355988
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Apache Log4j Installation File Detected
Apache Log4j is an open source Java-based logging framework leveraged within numerous Java applications. The scanner detected the presence of installation files referring to the usage of Apache Log4j. No source data...
OPcache UI Detected
A PHP OPcache information page has been detected, potentially including server statistics, settings and cached files, software versions and providing real-time updates for the information. This information may then assist in the compromise of the web application. No source data...
Out-of-Date Backbone JS Framework Detected
An out-of-date version of Backbone JS Framework has been detected. An outdated version could have vulnerabilities or missing security features. No source data...
Out-of-Date JQuery UI Detected
An out-of-date version of JQuery UI has been detected. An outdated version could have vulnerabilities or missing security features. No source data...
Out-of-Date Knockout JS Detected
An out-of-date version of Knockout JS has been detected. An outdated version could have vulnerabilities or missing security features. No source data...
Minecraft declared the most malware-infected game
By Waqas According to new research by Atlas VPN, Minecraft related malware infected 44,335 devices while Kaspersky antivirus software detected 300,000 malware cases. This is a post from HackRead.com Read the original post: Minecraft declared the most malware-infected game...
Python < 2.7.14, 3.4.x < 3.4.8, 3.5.x < 3.5.5 PyString_DecodeEscape integer overflow (bpo-30657) - Linux
CPython aka Python is prone to an integer overflow vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:python:python";...
Virus.Win32.Shodi.e Heap Corruption
Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/37d4a5ba123dd32f1e2c4ba0be14e77cC.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Virus.Win32.Shodi.e Vulnerability: Heap Corruption Description: The virus listens on TCP port 7352...
GraphQL API Detected
GraphQL is an open-source query and manipulation language for APIs and a server-side runtime built to handle these queries on the application dataset. It is a popular alternative to traditional REST or SOAP APIs, providing flexibility and an optimized data fetching method. The scanner detected th...
PT-2024-11245
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak vulnerability has been resolved in the Linux kernel. The issue was caused by a missing free netdev call in the mkiss close function, which led to a memory leak when the mki...
Sifchain: Vulnerable javascript dependency at Main domain
Hello, Issue detail, Burp observed 1 outdated JavaScript libraries with 4 known vulnerabilities. Burp detected bootstrap version 4.0.0, which has the following vulnerabilities: CVE-2019-8331: XSS in data-template, data-content and data-title properties of tooltip/popover CVE-2018-14041: XSS in...