WebSTAR Detection

Checks whether WebSTAR is present on the target host and if so, tries to figure out the installed version. Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General...

Fetch/XHR Detected

The scan detected that the web application makes requests that appear to be using Fetch or XMLHTTPRequests XHRs to communicate with a backend API server. Fetchs/XHRs allow retrieval of data from an API without triggering a page reload, making them especially useful for Single Page Applications. N...

fcceugr.es Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1008089 Security Researcher Gh05tPT Helped patch 6892 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting fcceugr.es website and i...

JetBrains .idea Directory Detected

A JetBrains .idea Directory has been detected. This directory contains project specific settings in xml format. These configuration files may include sensitive information such as server configuration settings, component module information, compiler information, credentials, project history and...

SVN Repository Detected

The web server on the remote host allows read access to files within a '.svn' directory exposing files tracked inside. This potential flaw can be used to access content from the web server that might otherwise be private & permit download of the source code of listed pages hosted on the remote...

WS_FTP.LOG File Detected

The web server on the remote host contains publically accessible WSFTP log files. These log files are produced by WSFTP and contain details of source/destination file names, date of upload and other potentially sensitive information. This may be used to access content from the web server that mig...

ikiwiki < 3.20170111.1, 3.2018x < 3.20190228 SSRF Vulnerability

ikiwiki is prone to a server-side request forgery SSRF vulnerability via the aggregate plugin. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Recsech - Tool For Doing Footprinting And Reconnaissance On The Target Web

Recsech is a tool for doing Footprinting and Reconnaissance on the target web. Recsech collects information such as DNS Information, Sub Domains, HoneySpot Detected, Subdomain takeovers, Reconnaissance On Github and much more you can see in Features in tools . Features in tools Name | Release |...

PHP error_log File Detected

An information disclosure vulnerability exists in the remote web server due to the disclosure of the errorlog file. An unauthenticated, remote attacker can exploit this, via a simple GET request, to disclose potentially sensitive information. No source data...

Yokogawa ANS20 Node Unit Detection

Binary data 761264.prm...

Beckhoff CX5130-0113 Industrial Computer Detection

Binary data 763616.prm...

Omron CP1L-L10DR-D PLC Detection

Binary data 755964.prm...

Hitachi EH-IOCH2 Expansion Module Detection

Binary data 757705.prm...

Apache Tomcat Manager Detected

Apache Tomcat Manager has been detected on the target web application. This may present an attacker with an exploit vector which could be leveraged using other techniques, such as a Brute-Force or Dictionary Attack, allowing an attacker to gain access to administrative functionality. No source da...

Apache Struts 2 Config Browser Detected

Apache Struts 2 Config Browser Plugin is a module to help view Struts application's configuration at runtime. This plugin has been detected on the web application by the scanner. It may be possible for an attacker to view Apache Struts version, loaded configuration or accessible action URLs for...

quizlet.nl XSS vulnerability

Open Bug Bounty ID: OBB-717503 Description| Value ---|--- Affected Website:| quizlet.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...

Zoom Client / Desktop / Workplace Detection (Mac OS X SSH Login)

SSH login-based detection of the Zoom Client / Desktop / Workplace. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Western Digital My Cloud NAS Default Credentials (HTTP)

The Western Digital My Cloud device is using known and default credentials for the HTTP based web interface. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

streamlicensing.com XSS vulnerability

Open Bug Bounty ID: OBB-688322 Description| Value ---|--- Affected Website:| streamlicensing.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

Apache Struts 2 OGNL Console Detected

Apache Struts 2 installed on the remote host is running a OGNL console. While this environment can help speed up development of web applications, it can leak information about the underlying web applications as well as the installation of Struts, Java, and other related items on the remote host a...