Home/Alerts/Alert detail/

Weak Authentication Method

Type:
Passive

Alerts

Authentication Credentials Captured

Latest Security News

US cracks down on North Korean IT worker army with more sanctions

Russian Star Blizzard Shifts Tactics to Exploit WhatsApp QR Codes for Credential Harvesting

Biden signs executive order to bolster national cybersecurity

Wolf Haldenstein law firm says 3.5 million impacted by data breach

FTC sues GoDaddy for years of poor hosting security practices

New UEFI Secure Boot flaw exposes systems to bootkits, patch now

MFA Failures - The Worst is Yet to Come

Strategic Approaches to Threat Detection, Investigation & Response

Common Alerts

HighCloud Metadata Potentially Exposed

HighLog4Shell (CVE-2021-45046)

InformationalStorable and Cacheable Content

InformationalObsolete Content Security Policy (CSP) Header Found

MediumSource Code Disclosure - PHP

HighGeneric Padding Oracle

InformationalSec-Fetch-Site Header Has an Invalid Value

HighHeartbleed OpenSSL Vulnerability

LowHash Disclosure - MD4 / MD5

LowSecure Pages Include Mixed Content

Top CVE List

CVE-2025-0282 Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

CVE-2023-48365 Qlik Sense HTTP Tunneling Vulnerability

CVE-2024-12686 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability

CVE-2024-21338 Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability

CVE-2020-0618 Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability

CVE-2017-6736 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

CVE-2021-33045 Dahua IP Camera Authentication Bypass Vulnerability

CVE-2024-1212 Progress Kemp LoadMaster OS Command Injection Vulnerability

CVE-2024-43047 Qualcomm Multiple Chipsets Use-After-Free Vulnerability

CVE-2024-50623 Cleo Multiple Products Unrestricted File Upload Vulnerability

Common CWEs

CWE-1330 Remanent Data Readable after Memory Erase

CWE-237 Improper Handling of Structural Elements

CWE-794 Incomplete Filtering of Multiple Instances of Special Elements

CWE-550 Server-generated Error Message Containing Sensitive Information

CWE-1098 Data Element containing Pointer Item without Proper Copy Control Element

CWE-1298 Hardware Logic Contains Race Conditions

CWE-1072 Data Resource Access without Use of Connection Pooling

CWE-671 Lack of Administrator Control over Security

CWE-1091 Use of Object without Invoking Destructor Method

CWE-249 DEPRECATED: Often Misused: Path Manipulation

Free online web security scanner

Don't show website scan report rating on the leaderboard