Home/Alerts/Alert detail/

Session ID in URL Rewrite

Type:
Passive

Referer Exposes Session ID

Latest Security News

US cracks down on North Korean IT worker army with more sanctions

Russian Star Blizzard Shifts Tactics to Exploit WhatsApp QR Codes for Credential Harvesting

Biden signs executive order to bolster national cybersecurity

Wolf Haldenstein law firm says 3.5 million impacted by data breach

FTC sues GoDaddy for years of poor hosting security practices

New UEFI Secure Boot flaw exposes systems to bootkits, patch now

MFA Failures - The Worst is Yet to Come

Strategic Approaches to Threat Detection, Investigation & Response

Common Alerts

InformationalSec-Fetch-User Header is Missing

MediumPotential IP Addresses Found in the Viewstate

MediumWeak Authentication Method

HighRemote Code Execution - Shell Shock

MediumInsecure HTTP Method

InformationalEmail address found in WebSocket message

HighExternal Redirect

InformationalServer Leaks its Webserver Application via "Server" HTTP Response Header Field

HighCross Site Scripting (DOM Based)

MediumELMAH Information Leak

Top CVE List

CVE-2025-0282 Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

CVE-2023-48365 Qlik Sense HTTP Tunneling Vulnerability

CVE-2024-12686 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability

CVE-2024-21338 Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability

CVE-2020-0618 Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability

CVE-2017-6736 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

CVE-2021-33045 Dahua IP Camera Authentication Bypass Vulnerability

CVE-2024-1212 Progress Kemp LoadMaster OS Command Injection Vulnerability

CVE-2024-43047 Qualcomm Multiple Chipsets Use-After-Free Vulnerability

CVE-2024-50623 Cleo Multiple Products Unrestricted File Upload Vulnerability

Top CWE List

HighCWE-200 Exposure of Sensitive Information to an Unauthorized Actor

CWE-581 Object Model Violation: Just One of Equals and Hashcode Defined

HighCWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

CWE-1053 Missing Documentation for Design

CWE-304 Missing Critical Step in Authentication

CWE-307 Improper Restriction of Excessive Authentication Attempts

HighCWE-116 Improper Encoding or Escaping of Output

CWE-284 Improper Access Control

HighCWE-330 Use of Insufficiently Random Values

CWE-615 Inclusion of Sensitive Information in Source Code Comments

Free online web security scanner

Don't show website scan report rating on the leaderboard