Home/Alerts/Alert detail/

Split Viewstate in Use

Risk:
Informational

Type:
Passive

CWE:
CWE-642

Summary: This website uses ASP.NET’s Viewstate and its value is split into several chunks.

Solution: None - the guys running the server may have tuned the configuration as this isn't the default setting.

Latest Security News

TikTok shuts down in the US as Trump throws the company a lifeline

Star Blizzard hackers abuse WhatsApp to target high-value diplomats

TikTok Goes Dark in the U.S. as Federal Ban Takes Effect January 19, 2025

FTC orders GM to stop collecting and selling driver’s data

Microsoft removes Assassin’s Creed Windows 11 upgrade blocks

U.S. Sanctions Chinese Cybersecurity Firm Over Treasury Hack Tied to Silk Typhoon

FTC cracks down on Genshin Impact gacha loot box practices

Has the TikTok Ban Already Backfired on US Cybersecurity?

Top Alert List

Content Security Policy (CSP) Header Not Set

CSP

MediumAbsence of Anti-CSRF Tokens

MediumMissing Anti-clickjacking Header

InformationalInformation Disclosure - Suspicious Comments

InformationalModern Web Application

LowCross-Domain JavaScript Source File Inclusion

MediumContent Security Policy (CSP) Header Not Set

InformationalRe-examine Cache-control Directives

LowCSP: X-Content-Security-Policy

Latest CVE List

CVE-2024-50603 Aviatrix Controllers OS Command Injection Vulnerability

CVE-2024-55591 Fortinet FortiOS Authorization Bypass Vulnerability

CVE-2025-21333 Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability

CVE-2025-21334 Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability

CVE-2025-21335 Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability

CVE-2024-12686 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability

CVE-2023-48365 Qlik Sense HTTP Tunneling Vulnerability

CVE-2025-0282 Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

CVE-2024-41713 Mitel MiCollab Path Traversal Vulnerability

CVE-2024-55550 Mitel MiCollab Path Traversal Vulnerability

Top CWE List

CWE-693 Protection Mechanism Failure

HighCWE-200 Exposure of Sensitive Information to an Unauthorized Actor

MediumCWE-352 Cross-Site Request Forgery (CSRF)

CWE-1053 Missing Documentation for Design

CWE-1426 Improper Validation of Generative AI Output

CWE-304 Missing Critical Step in Authentication

CWE-307 Improper Restriction of Excessive Authentication Attempts

HighCWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

HighCWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

HighCWE-116 Improper Encoding or Escaping of Output

Free online web security scanner

Don't show website scan report rating on the leaderboard