Emails Found in the Viewstate
- Risk:
Medium
- Type:
- Passive
- CWE:
- CWE-642
- Summary
The following emails were found being serialized in the viewstate field:
- Solution
Verify the provided information isn't confidential.
- Other info
- []
Oracle denies breach after hacker claims theft of 6 million data records
Microsoft confirms it's killing off Skype in May, after 14 years
Fake "Security Alert" issues on GitHub use OAuth app to hijack accounts
SideWinder APT Targets Maritime, Nuclear, and IT Sectors Across Asia, Middle East, and Africa
Microsoft: New RAT malware used for crypto theft, reconnaissance
Google's March 2025 Android Security Update Fixes Two Actively Exploited Vulnerabilities
SANS Institute Warns of Novel Cloud-Native Ransomware Attacks
Critical Veeam Backup & Replication RCE vulnerability fixed, patch ASAP! (CVE-2025-23120)
Malicious Adobe, DocuSign OAuth apps target Microsoft 365 accounts
Microsoft: March Windows updates mistakenly uninstall Copilot
CVE-2025-1316 Edimax IC-7100 IP Camera OS Command Injection Vulnerability
CVE-2024-48248 NAKIVO Backup and Replication Absolute Path Traversal Vulnerability
CVE-2017-12637 SAP NetWeaver Directory Traversal Vulnerability
CVE-2025-24472 Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
CVE-2025-30066 tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability
CVE-2025-24201 Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability
CVE-2025-21590 Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability
CVE-2025-26633 Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability
CVE-2025-24983 Microsoft Windows Win32k Use-After-Free Vulnerability
CVE-2025-24984 Microsoft Windows NTFS Information Disclosure Vulnerability
CWE-1048 Invokable Control Element with Large Number of Outward Calls
CWE-566 Authorization Bypass Through User-Controlled SQL Primary Key
HighCWE-643 Improper Neutralization of Data within XPath Expressions ('XPath Injection')
CWE-924 Improper Enforcement of Message Integrity During Transmission in a Communication Channel
CWE-542 DEPRECATED: Information Exposure Through Cleanup Log Files
CWE-1274 Improper Access Control for Volatile Memory Containing Boot Code
Free online web security scanner