GraphQL Batching

GraphQL engines sometimes support combining a group of requests into a single one to try optimizing network performances between the client and the GraphQL server. When supported and enabled, this feature implementation should be reviewed as it could be abused by an attacker to bypass application...

Microsoft Entra ID Detected

This is an informational notice that the scanner was able to detect that the target application is using Microsoft Entra ID. No source data...

Amazon Web Services Detected

This is an informational notice that the scanner was able to detect that the target application is using an Amazon Web Services cloud service. No source data...

Google Cloud Platform Detected

This is an informational notice that the scanner was able to detect that the target application is using an Google Cloud cloud service. No source data...

Ivanti Connect Secure 9.x / 22.x Server-Side Request Forgery

Ivanti Connect Secure 9.x, 22.x suffers from a Server-Side Request Forgery. By crafting a specific HTTP request, a remote attacker could exploit this vulnerability to access certain restricted resources without authentication. No source data...

WordPress 5.4.x < 5.4.15 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A PHP file upload bypass via Plugin Installer requiring admin privileges. - An RCE POP Chains vulnerability. Note that the scanner has not tested for these issues but has...

WordPress 6.4.x < 6.4.3 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A PHP file upload bypass via Plugin Installer requiring admin privileges. - An RCE POP Chains vulnerability. Note that the scanner has not tested for these issues but has...

WordPress 6.1.x < 6.1.5 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A PHP file upload bypass via Plugin Installer requiring admin privileges. - An RCE POP Chains vulnerability. Note that the scanner has not tested for these issues but has...

WordPress 4.3.x < 4.3.33 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A PHP file upload bypass via Plugin Installer requiring admin privileges. - An RCE POP Chains vulnerability. Note that the scanner has not tested for these issues but has...

Web Server Configuration File Detected

A web server configuration file has been detected on the target host. This may expose privileged information or configurations to a malicious actor. No source data...

Web Services Description Language (WSDL) File Detected

A Web Services Description Language WSDL file has been detected on this url. No source data...

XSLT Injection

An XSLT Injection is when an attacker tries to inject XSLT documents to the application. This attack may lead to the disclosure of confidential data, denial of service, port scanning from the perspective of the machine where the parser is located, and other system impacts. No source data...

Ivanti Connect Secure 9.x / 22.x Authentication Bypass

Ivanti Connect Secure 9.x, 22.x suffers from an authentication bypass vulnerability. By crafting a specific HTTP request, a remote and unauthenticated attacker could exploit this vulnerability to bypass authentication and authorization requirements. No source data...

Atlassian Confluence 7.13.x < 7.19.17 Remote Code Execution

According to its self-reported version number, the Atlassian Confluence application running on the remote host is 7.13.x prior to 7.19.17, 8.x prior to 8.5.5 or 8.6.x prior to 8.7.2. It is, therefore, affected by a remote code execution vulnerability. Note that the scanner has not tested for thes...

Atlassian Confluence 8.x < 8.5.5 Remote Code Execution

According to its self-reported version number, the Atlassian Confluence application running on the remote host is 7.13.x prior to 7.19.17, 8.x prior to 8.5.5 or 8.6.x prior to 8.7.2. It is, therefore, affected by a remote code execution vulnerability. Note that the scanner has not tested for thes...

Node-config Configuration File Detected

Node-config is a Node.js module providing hierarchical configurations to help with web applications deployments. By defining one or more configuration files in their application project 'config' directory or in a custom location, developers can define various configuration variables to be used in...

Digest Authentication Detected

The scanner detected the presence of a web page protected by a 'Digest' authentication. No source data...

JavaScript Source Map Detected

Developers often combine and minify their application JavaScript sources to help the server delivering it more efficiently to the client browsers. Sometimes, web applications JavaScript code may also be transpiled from another language like CoffeeScript of TypeScript. A source map is a file that...

NTLM Authentication Detected

The scanner detected the presence of a web page protected by a 'NTLM' authentication. No source data...

SAP ICF Open-Redirect

In all versions of SAP ABAP Platform, SAP NetWeaver, SAP Web Application Server and SAP S/4HANA an Open Redirect exists via the 'redirecturl' parameter from the logoff page. This can be used to redirect the victim to a malicious URL. Cyber-criminals will abuse these vulnerabilities in social...