519 matches found
Sitemap.xml File Detected
The Sitemap Protocol allows you to inform search engines about URLs on a website that are available for crawling. In its simplest form, a Sitemap is an XML file that lists URLs for a site. It has been discovered that many site owners are not building their Sitemaps through spidering, but by...
Magento API Anonymous Access
Sensitive Magento 2 API can be accessed by anonymous users. Therefore, confidential merchant information can be exposed like offline products, stock information or store configuration for example. No source data...
JetBrains .idea Directory Detected
A JetBrains .idea Directory has been detected. This directory contains project specific settings in xml format. These configuration files may include sensitive information such as server configuration settings, component module information, compiler information, credentials, project history and...
Moment.js < 2.15.2 Regular Expression Denial of Service
According to its self-reported version number, Moment.js is prior to 2.15.2. Therefore, it may be affected by a regular expression denial of service vulnerability when arbitrary user input is passed into format. Note that the scanner has not tested for these issues but has instead relied only on...
CVS Repository Detected
The web server on the remote host allows read access to files within a 'CVSROOT' directory exposing files tracked inside. This potential flaw can be used to access content from the web server that might otherwise be private & permit download of the source code of listed pages hosted on the remote...
CVS Entries Detected
The web server on the remote host allows read access to files within a 'CVS' directory exposing files tracked inside. This potential flaw can be used to access content from the web server that might otherwise be private. No source data...
SVN Repository Detected
The web server on the remote host allows read access to files within a '.svn' directory exposing files tracked inside. This potential flaw can be used to access content from the web server that might otherwise be private & permit download of the source code of listed pages hosted on the remote...
Invalid Subresource Integrity
Subresource Integrity SRI is a web security standard that enables browsers to verify that resources hosted by third parties CDN for example are delivered without unexpected manipulation. SRI works by comparing a cryptographic hash declared in the integrity attribute of the resource tag like scrip...
Missing 'Content-Type' Header
The Content-Type header allows clients to find an appropriate way to render data, omission of this header can facilitate MIME sniffing attacks. No source data...
Missing Subresource Integrity
Subresource Integrity SRI is a web security standard that enables browsers to verify that resources hosted by third parties CDN for example are delivered without unexpected manipulation. SRI works by comparing a cryptographic hash declared in the integrity attribute of the resource tag like scrip...
.DS_Store File Detected
The web server on the remote host allows read access to a OSX .DSStore file. This potential flaw can be used to access content from the web server that might otherwise be private. No source data...
Magento Connect Manager Detected
Magento Connect Manager has been detected on the target web application. This may present an attacker with an exploit vector which could be leveraged using other techniques, such as a Brute-Force or Dictionary Attack, allowing an attacker to gain access to administrative functionality. No source...
Drupal 8.7.4 Access Bypass Vulnerability
According to its self-reported version, the instance of Drupal running on the remote web server is 8.7.4. It is, therefore, affected by an access bypass vulnerability when the experimental Workspaces module is enabled. Note that the scanner has not tested for these issues but has instead relied...
Apache .htaccess and .htpasswd Disclosure
The Apache server does not properly restrict access to .htaccess and/or .htpasswd files. A remote unauthenticated attacker can download these files and potentially uncover important information. No source data...
Host Header Injection
When creating URI for links in web applications, developers often resort to the HTTP Host header available in HTTP request sent by client side. A remote attacker can exploit this by sending a fake header with a domain name under his control allowing him to poison web-cache or password reset email...
PHP 5.6.x < 5.6.33 Multiple Vulnerabilities
According to its banner, the version of PHP running on the remote web server is 5.6.x prior to 5.6.33. It is, therefore, affected by multiple vulnerabilities. Note that the scanner has not attempted to exploit this issue but has instead relied only on the application's self-reported version numbe...
Basic Authentication Without HTTPS
The remote web server contains web pages that are protected by 'Basic' authentication over cleartext. An attacker eavesdropping the traffic might obtain logins and passwords of valid users. No source data...
Missing 'Expect-CT' Header (deprecated)
The Expect-CT header allows sites to opt in to reporting and or enforcement of Certificate Transparency requirements, which prevents the use of misissued certificates for that site from going unnoticed. This URL is flagged as a specific example. The Expect-CT will likely become obsolete in June...
Error Message
An error or warning message has been found on the remote web server. It may be possible for an attacker to view sensitive information and conduct further attacks. No source data...
Gitignore File Detected
The web server on the remote host contains gitignore configuration files. This potential flaw can be used to access content from the web server that might otherwise be private. No source data...