SVN Repository Detected

The web server on the remote host allows read access to files within a '.svn' directory exposing files tracked inside. This potential flaw can be used to access content from the web server that might otherwise be private & permit download of the source code of listed pages hosted on the remote...

WS_FTP.LOG File Detected

The web server on the remote host contains publically accessible WSFTP log files. These log files are produced by WSFTP and contain details of source/destination file names, date of upload and other potentially sensitive information. This may be used to access content from the web server that mig...

ikiwiki < 3.20170111.1, 3.2018x < 3.20190228 SSRF Vulnerability

ikiwiki is prone to a server-side request forgery SSRF vulnerability via the aggregate plugin. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Recsech - Tool For Doing Footprinting And Reconnaissance On The Target Web

Recsech is a tool for doing Footprinting and Reconnaissance on the target web. Recsech collects information such as DNS Information, Sub Domains, HoneySpot Detected, Subdomain takeovers, Reconnaissance On Github and much more you can see in Features in tools . Features in tools Name | Release |...

PHP error_log File Detected

An information disclosure vulnerability exists in the remote web server due to the disclosure of the errorlog file. An unauthenticated, remote attacker can exploit this, via a simple GET request, to disclose potentially sensitive information. No source data...

Hitachi EH-IOCH2 Expansion Module Detection

Binary data 757705.prm...

Yokogawa ANS20 Node Unit Detection

Binary data 761264.prm...

Omron CP1L-L10DR-D PLC Detection

Binary data 755964.prm...

Beckhoff CX5130-0113 Industrial Computer Detection

Binary data 763616.prm...

Apache Tomcat Manager Detected

Apache Tomcat Manager has been detected on the target web application. This may present an attacker with an exploit vector which could be leveraged using other techniques, such as a Brute-Force or Dictionary Attack, allowing an attacker to gain access to administrative functionality. No source da...

Apache Struts 2 Config Browser Detected

Apache Struts 2 Config Browser Plugin is a module to help view Struts application's configuration at runtime. This plugin has been detected on the web application by the scanner. It may be possible for an attacker to view Apache Struts version, loaded configuration or accessible action URLs for...

quizlet.nl XSS vulnerability

Open Bug Bounty ID: OBB-717503 Description| Value ---|--- Affected Website:| quizlet.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...

Zoom Client / Desktop / Workplace Detection (Mac OS X SSH Login)

SSH login-based detection of the Zoom Client / Desktop / Workplace. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Western Digital My Cloud NAS Default Credentials (HTTP)

The Western Digital My Cloud device is using known and default credentials for the HTTP based web interface. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

streamlicensing.com XSS vulnerability

Open Bug Bounty ID: OBB-688322 Description| Value ---|--- Affected Website:| streamlicensing.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

Apache Struts 2 OGNL Console Detected

Apache Struts 2 installed on the remote host is running a OGNL console. While this environment can help speed up development of web applications, it can leak information about the underlying web applications as well as the installation of Struts, Java, and other related items on the remote host a...

PT-2018-10673 · Amazon · Alexa +1

Name of the Vulnerable Software and Affected Versions: Amazon Echo devices affected versions not specified Description: The reprompt feature in Amazon Echo devices could be misused by a custom Alexa skill, allowing an attacker to obtain transcripts of speech not intended for Alexa to process. Thi...

igigli.it XSS vulnerability

Open Bug Bounty ID: OBB-612416 Description| Value ---|--- Affected Website:| igigli.it Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

atom.it XSS vulnerability

Open Bug Bounty ID: OBB-596012 Description| Value ---|--- Affected Website:| atom.it Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Joomla! Configuration Backup Files Detected

The scanner has detected publicly accessible Joomla! configuration files on the target web application. These files likely contain extremely sensitive server information including administrative database credentials. This may present an attacker with an exploit vector which could be leveraged usi...