Basic Authentication Detected

The scanner detected the presence of a web page protected by a 'Basic' authentication. No source data...

Basic Authentication Bruteforced

The scanner successfully authenticated on the target web application by using weak credentials in the request basic authentication HTTP header. No source data...

OPcache UI Detected

A PHP OPcache information page has been detected, potentially including server statistics, settings and cached files, software versions and providing real-time updates for the information. This information may then assist in the compromise of the web application. No source data...

Microsoft Exchange Server Autodiscover Cross-Site Scripting

Microsoft Exchange Server versions 2019 before cumulative update 11, 2016 before cumulative update 22 and 2013 before cumulative update 23 are affected by a cross-site scripting vulnerability through the autodiscover/autodiscover.json endpoint. By crafting a specific URL, an attacker could target...

Google Chrome WebAuthentication Misimplementation Vulnerability

Chrome is a simple and efficiently designed web browsing tool developed by Google. A WebAuthentication mal-implementation vulnerability exists in versions of Google Chrome prior to 96.0.4664.45. An attacker could exploit this vulnerability to leak cross-origin data via a crafted HTML page...

Virtual JDBC Remote Code Execution

Due to unsafe deserialization used in Virtual JDBC all versions allows an unauthenticated attacker with HTTP access to the service to obtain arbitrary code execution. No source data...

Rack-Mini-Profiler Information Disclosure

Rack-Mini-Profiler is a middleware that displays a speed badge for each html page. Designed to work in both production and development but when the 'enableadvanceddebuggingtools' option is selected it is possible to access sensitive information such as environment variables and other secrets stor...

Humans.txt File Detected

A Humans.txt file has been detected on the target. Humans.txt is a file that contains information about the different people who have contributed to building the website. No source data...

Login Form Bruteforced

The scanner successfully authenticated on the target web application by using predictable credentials on its login form. Note that this plugin requires enabling the 'Credentials Bruteforcing' scan option and configuring working login form credentials. No source data...

CVE-2021-22205

creationtimestamp| type| source ---|---|--- 2021-10-28 05:18:25+00:00| exploited| https://t.me/cKure/7805 2021-10-28 06:33:48+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/759 2021-10-28 09:55:15+00:00| published-proof-of-concept| https://t.me/hackertrick/354 2021-10-28...

Out-of-Date MediaElement.Js Detected

An out-of-date version of MediaElement.Js has been detected. An outdated version could have vulnerabilities or missing security features. No source data...

Out-of-Date Bootstrap Detected

An out-of-date version of Bootstrap has been detected. An outdated version could have vulnerabilities or missing security features. No source data...

Out-of-Date Backbone JS Framework Detected

An out-of-date version of Backbone JS Framework has been detected. An outdated version could have vulnerabilities or missing security features. No source data...

Out-of-Date JQuery UI Detected

An out-of-date version of JQuery UI has been detected. An outdated version could have vulnerabilities or missing security features. No source data...

Out-of-Date Knockout JS Detected

An out-of-date version of Knockout JS has been detected. An outdated version could have vulnerabilities or missing security features. No source data...

Out-of-Date Modernizr Detected

An out-of-date version of Modernizr has been detected. An outdated version could have vulnerabilities or missing security features. No source data...

Out-of-Date Underscore.js Detected

An out-of-date version of Underscore.js has been detected. An outdated version could have vulnerabilities or missing security features. No source data...

Out-of-Date Lodash Detected

An out-of-date version of Lodash has been detected. An outdated version could have vulnerabilities or missing security features. No source data...

Out-of-Date JQuery Detected

An out-of-date version of JQuery has been detected. An outdated version could have vulnerabilities or missing security features. No source data...

Bearer Token Authentication Failed

This plugin is raised when the scanner has not been able to authenticate against the web application using the bearer authentication credentials provided in the scan policy. Check the output of the plugin to get an explanation of the issue encountered by the scan. No source data...