519 matches found
Magento Administration Panel Login Form Bruteforced
The scanner successfully authenticated on the Magento administration panel by using weak or predictable credentials. No source data...
FTP Credentials Disclosure
The web server on the remote host contains publicly accessible FTP configuration files. These configuration files are produced by ftp software and contain details of ftp credentials and/or hosts and other potentially sensitive information. This may be used to access content from the FTP server th...
AngularJS Unsupported Version
The installation of AngularJS detected on the remote host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities. No source data...
Google Chrome has an unspecified vulnerability (CNVD-2021-92469)
Google Chrome is a web browser from Google, Inc. A security vulnerability exists in versions of Google Chrome prior to 95.0.4638.69, which stems from insufficient Autofill policy enforcement. An attacker could exploit this vulnerability to leak cross-source data via specially crafted HTML pages...
Basic Authentication Detected
The scanner detected the presence of a web page protected by a 'Basic' authentication. No source data...
Basic Authentication Bruteforced
The scanner successfully authenticated on the target web application by using weak credentials in the request basic authentication HTTP header. No source data...
OPcache UI Detected
A PHP OPcache information page has been detected, potentially including server statistics, settings and cached files, software versions and providing real-time updates for the information. This information may then assist in the compromise of the web application. No source data...
Microsoft Exchange Server Autodiscover Cross-Site Scripting
Microsoft Exchange Server versions 2019 before cumulative update 11, 2016 before cumulative update 22 and 2013 before cumulative update 23 are affected by a cross-site scripting vulnerability through the autodiscover/autodiscover.json endpoint. By crafting a specific URL, an attacker could target...
Google Chrome WebAuthentication Misimplementation Vulnerability
Chrome is a simple and efficiently designed web browsing tool developed by Google. A WebAuthentication mal-implementation vulnerability exists in versions of Google Chrome prior to 96.0.4664.45. An attacker could exploit this vulnerability to leak cross-origin data via a crafted HTML page...
Virtual JDBC Remote Code Execution
Due to unsafe deserialization used in Virtual JDBC all versions allows an unauthenticated attacker with HTTP access to the service to obtain arbitrary code execution. No source data...
Rack-Mini-Profiler Information Disclosure
Rack-Mini-Profiler is a middleware that displays a speed badge for each html page. Designed to work in both production and development but when the 'enableadvanceddebuggingtools' option is selected it is possible to access sensitive information such as environment variables and other secrets stor...
Humans.txt File Detected
A Humans.txt file has been detected on the target. Humans.txt is a file that contains information about the different people who have contributed to building the website. No source data...
Login Form Bruteforced
The scanner successfully authenticated on the target web application by using predictable credentials on its login form. Note that this plugin requires enabling the 'Credentials Bruteforcing' scan option and configuring working login form credentials. No source data...
CVE-2021-22205
creationtimestamp| type| source ---|---|--- 2021-10-28 05:18:25+00:00| exploited| https://t.me/cKure/7805 2021-10-28 06:33:48+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/759 2021-10-28 09:55:15+00:00| published-proof-of-concept| https://t.me/hackertrick/354 2021-10-28...
Out-of-Date Bootstrap Detected
An out-of-date version of Bootstrap has been detected. An outdated version could have vulnerabilities or missing security features. No source data...
Out-of-Date MediaElement.Js Detected
An out-of-date version of MediaElement.Js has been detected. An outdated version could have vulnerabilities or missing security features. No source data...
Out-of-Date JQuery UI Detected
An out-of-date version of JQuery UI has been detected. An outdated version could have vulnerabilities or missing security features. No source data...
Out-of-Date Backbone JS Framework Detected
An out-of-date version of Backbone JS Framework has been detected. An outdated version could have vulnerabilities or missing security features. No source data...