Home/Alerts/Alert detail/

Fetch Metadata Request Headers

Type:
Passive

Alerts

Sec-Fetch-Site Header is Missing

Sec-Fetch-Mode Header is Missing

Sec-Fetch-Dest Header is Missing

Sec-Fetch-User Header is Missing

Sec-Fetch-Site Header Has an Invalid Value

Sec-Fetch-Mode Header Has an Invalid Value

Sec-Fetch-Dest Header Has an Invalid Value

Sec-Fetch-User Header Has an Invalid Value

Latest Security News

US cracks down on North Korean IT worker army with more sanctions

Russian Star Blizzard Shifts Tactics to Exploit WhatsApp QR Codes for Credential Harvesting

Biden signs executive order to bolster national cybersecurity

Wolf Haldenstein law firm says 3.5 million impacted by data breach

FTC sues GoDaddy for years of poor hosting security practices

New UEFI Secure Boot flaw exposes systems to bootkits, patch now

MFA Failures - The Worst is Yet to Come

Strategic Approaches to Threat Detection, Investigation & Response

Common Alerts

MediumCross-Domain Misconfiguration

InformationalImage Exposes Location or Privacy Data

InformationalSec-Fetch-User Header is Missing

MediumContent Security Policy (CSP) Header Not Set

HighSource Code Disclosure - CVE-2012-1823

HighServer Side Include

HighCross-Domain Misconfiguration - Adobe - Read

MediumSub Resource Integrity Attribute Missing

LowServer Leaks Information via "X-Powered-By" HTTP Response Header Field(s)

MediumCSP: Wildcard Directive

Top CVE List

CVE-2025-0282 Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

CVE-2023-48365 Qlik Sense HTTP Tunneling Vulnerability

CVE-2024-12686 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability

CVE-2024-21338 Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability

CVE-2020-0618 Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability

CVE-2017-6736 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

CVE-2021-33045 Dahua IP Camera Authentication Bypass Vulnerability

CVE-2024-1212 Progress Kemp LoadMaster OS Command Injection Vulnerability

CVE-2024-43047 Qualcomm Multiple Chipsets Use-After-Free Vulnerability

CVE-2024-50623 Cleo Multiple Products Unrestricted File Upload Vulnerability

Common CWEs

CWE-1099 Inconsistent Naming Conventions for Identifiers

CWE-33 Path Traversal: '....' (Multiple Dot)

CWE-622 Improper Validation of Function Hook Arguments

CWE-651 Exposure of WSDL File Containing Sensitive Information

HighCWE-646 Reliance on File Name or Extension of Externally-Supplied File

CWE-92 DEPRECATED: Improper Sanitization of Custom Special Characters

HighCWE-493 Critical Public Variable Without Final Modifier

LowCWE-188 Reliance on Data/Memory Layout

HighCWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-226 Sensitive Information in Resource Not Removed Before Reuse

Free online web security scanner

Don't show website scan report rating on the leaderboard