Findings
Findings
181 open · 47 resolved this month
| Severity | Finding | Affected Resource | Tool | Engagement | CVSS | Found | |
|---|---|---|---|---|---|---|---|
| Critical |
Unauth RCE via phpinfo exposure
Review
CVE-2024-47176 · CISA KEV
|
apex-corp.prod/info.php | Nuclei | Apex-Corp Q2 | 9.8 | 2h ago | |
| Critical |
SQLi in /api/users/search?q=
UNION-based, extractable via sqlmap
|
/api/users/search | Agent | Apex-Corp Q2 | 9.1 | 4h ago | |
| Critical |
Default admin creds on Jenkins master
admin:admin
|
ci.apex-corp.prod:8080 | Metasploit | Apex-Corp Q2 | 9.4 | 5h ago | |
| High |
Outdated OpenSSL 1.0.2
CVE-2021-3711 · heap overflow
|
bastion.apex-corp.prod:443 | Nmap | Apex-Corp Q2 | 7.5 | 6h ago | |
| High |
SSH weak cipher: arcfour256
Legacy cipher accepted on bastion
|
bastion.apex-corp.prod:22 | Nmap | Northwind | 7.1 | 8h ago | |
| Medium |
Missing X-Frame-Options header
Clickjacking exposure
|
admin.apex-corp.com | ZAP | Apex-Corp Q2 | 5.4 | 11h ago | |
| Low |
Server version header disclosed
Apache/2.4.52 (Ubuntu)
|
www.apex-corp.com | Nmap | Globex Internal | 3.1 | 1d ago |
Showing 1–50 of 181 findings
Page 1 of 4