API tools faq
paste
int0x76

2013_RD3001-3598_public [incomplete] - 2013.csv

int0x76
Sep 19th, 2015
232
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 56.79 KB | None | 0 0
raw download clone embed print report
  1. RD# Reported (when) Where What Access size records Fixed Time to fix C F U A How Notes
  2. 3001 1/1/2013 The Netherlands Service that should be firewalled Access to system controls 01/15/2013 14 x [redacted] [redacted]
  3. 3002 1/2/2013 USA Vulnerable service: not patched with known vulnerabilities Full access to production data 02/10/2013 39 x CVE-2012-4774 Advised to install WINDOWS-HOTFIX-MS12-081-0895881f-f360-498e-bc3e-c0cc236f8e93
  4. 3003 1/3/2013 USA Cross Site Scripting (XSS) 02/26/2013 54 x CVE-2012-0144 - Microsoft Office SharePoint Server 2010 XSS via [redacted].gov.us/../../../../themeweb.aspx
  5. 3004 1/4/2013 USA Information disclosure: credentials (visual) 02/22/2013 49 x Instruction video [redacted] was accidentally uploaded to YouTube Never checked if the password for [redacted] has been changed
  6. 3005 1/5/2013 USA Cross Site Scripting (XSS) 02/24/2013 50 x CVE-2012-2399 – Wordpress < 3.5.2 XSS via swfupload.swf?movieName=%22]);}catch(e){}if(!self.a)self.a=!alert("XSS ");//
  7. 3006 1/5/2013 India Information disclosure: readable configs 02/18/2013 44 x CVE-2012-5293 - SAPID CMS /extensions/get_tree.inc.php via [redacted] / use ../$/ to make a local inclusion.
  8. 3007 1/7/2013 USA Cross Site Scripting (XSS) 01/13/2013 6 x CVE-2012-6453 – MediaWiki wiki.[redacted].gov.us
  9. 3008 1/8/2013 USA Webserver: X-XSS-Protection: 1; mode=block header missing 02/27/2013 50 x vip.[redacted].com, chat.[redacted].com, intern.[redacted].com, sms.[redacted].com
  10. 3009 1/9/2013 The Netherlands SQL Injection 01/15/2013 6 x x CVE-2012-5590 – Drupal webmail module
  11. 3010 1/10/2013 USA Information disclosure: Sensitive files 03/08/2013 57 x
  12. 3011 1/11/2013 USA Information disclosure: Mis-configured service 03/17/2013 65 x
  13. 3012 1/12/2013 USA Information disclosure: Sensitive files 02/02/2013 21 x
  14. 3013 1/12/2013 Belgium Cross Site Scripting (XSS) 02/12/2013 31 x /zoeken/friet<script>$='XSS',alert($)< /script>-kot/
  15. 3014 1/12/2013 The Netherlands Information disclosure: credentials (visual) 01/14/2013 2 x Photo showing credentials on paper behind them on the wall
  16. 3015 1/12/2013 The Netherlands Bad design: Broken or deprecated Cryptographic algorithm Use of a weak/bad Cryptographic algorithm 03/16/2013 63 x x Vendor [redacted] new version 3 with SHA256 (with salting)
  17. 3016 1/16/2013 USA Protection: API rate limiting missing on REST API 02/04/2013 19 x [redacted] has limited the REST API to (authenticated) 350 requests
  18. 3017 1/17/2013 The Netherlands Bad construction: unrestricted upload of dangerous files [redacted] 03/22/2013 64 x [redacted] [redacted]
  19. 3018 1/19/2013 The Netherlands Vulnerable CMS Bad construction: URL Redirection to untrusted source 04/22/2013 93 x CVE-2011-4614 - TYPO3 4.5.1 exploitable via [redacted].nl/Classes/Controller/AbstractController.php
  20. 3019 1/19/2013 USA Information disclosure: Mis-configured service Full access to production data 02/25/2013 37 x Anon FTP (CRUD)
  21. 3020 1/19/2013 USA Service that should be firewalled SCADA: Admin control 02/27/2013 39 x CVE-2012-4356 - Sielco Sistemi Winlog Pro SCADA before 2.07.14 Ridiculous. Port 46824 should not be accessible. Path trav screenshots added
  22. 3021 1/19/2013 USA Information disclosure: Mis-configured service [redacted] 02/26/2013 38 x [redacted] [redacted]
  23. 3022 1/19/2013 USA Vulnerable CMS Cross Site Scripting (XSS) 02/18/2013 30 x CVE-2010-4821 – phpMyFAQ 2.6.8 [beep].[redacted].gov.us
  24. 3023 1/19/2013 USA Vulnerable CMS Cross Site Scripting (XSS) 04/10/2013 81 x CVE-2010-4821 – phpMyFAQ 2.6.8 [beep].[redacted].gov.us
  25. 3024 1/19/2013 USA Service that should be firewalled Access to system controls 03/16/2013 56 x [redacted] [redacted]
  26. 3025 1/25/2013 The Netherlands Vulnerable CMS 01/29/2013 4 x CVE-2012-4035 - PBBoard 2.1.4
  27. 3026 1/26/2013 USA Information disclosure: Mis-configured service 03/16/2013 49 x
  28. 3027 1/26/2013 Germany Vulnerable CMS Bad construction: Path traversal 04/30/2013 94 x CVE-2012-2208: Piwigo 2.3.3
  29. 3028 1/26/2013 USA Vulnerable CMS Bad construction: Path traversal 01/28/2013 2 x x CVE-2012-2208: Piwigo 2.3.3
  30. 3029 1/26/2013 USA Vulnerable CMS Bad construction: Path traversal 02/12/2013 17 x CVE-2012-2208: Piwigo 2.3.3
  31. 3030 2/1/2013 USA Remote File Inclusion 02/22/2013 21 x
  32. 3031 2/1/2013 USA Bad construction: unrestricted upload of dangerous files 03/28/2013 55 x
  33. 3032 2/1/2013 The Netherlands Protection: Anti brute-force: lockout missing 03/02/2013 29 x
  34. 3033 2/1/2013 Belgium Protection: Anti brute-force: lockout missing 04/18/2013 76 x
  35. 3034 2/1/2013 Germany Vulnerable service: no authorization required 03/10/2013 37 x
  36. 3035 2/1/2013 USA Vulnerable CMS Data leak: > 1,000 customer/member records 2453 03/02/2013 29 x CVE-2012-4035 - PBBoard 2.1.4
  37. 3036 2/1/2013 USA Protection: Missing/bypass authorization with API 04/16/2013 74 x
  38. 3037 2/1/2013 USA Command Injection (remote) 03/28/2013 55 x WP Super Cache plugin
  39. 3038 2/1/2013 The Netherlands Cross-Site Request Forgery (CSRF) 05/04/2013 92 x
  40. 3039 2/1/2013 USA Information disclosure: credentials (visual) 02/26/2013 25 x
  41. 3040 2/1/2013 The Netherlands Webserver: X-XSS-Protection: 1; mode=block header missing 04/23/2013 81 x
  42. 3041 2/2/2013 The Netherlands Cross-Site Request Forgery (CSRF) 04/30/2013 87 x
  43. 3042 2/2/2013 USA Vulnerable service: not patched with known vulnerabilities 04/27/2013 84 x CVE-2012-1172 - PHP (phpinfo shows 5.3.x) POC $_FILES index
  44. 3043 2/2/2013 The Netherlands XML External Entity (XXE) 02/04/2013 2 x x CVE-2012-6531 - Zend Framework
  45. 3044 2/2/2013 The Netherlands Cross-Site Request Forgery (CSRF) 04/27/2013 84 x
  46. 3045 2/2/2013 USA Protection: Anti brute-force: lockout missing on API 02/14/2013 12 x
  47. 3046 2/2/2013 The Netherlands Cross-Site Request Forgery (CSRF) 03/31/2013 57 x
  48. 3047 2/2/2013 The Netherlands Vulnerable service: not patched with known vulnerabilities 04/16/2013 73 x CVE-2012-1172 - PHP (phpinfo shows 5.3.x) POC $_FILES index
  49. 3048 2/2/2013 The Netherlands Information disclosure: readable configs 02/23/2013 21 x
  50. 3049 2/6/2013 The Netherlands Local File Inclusion 04/23/2013 76 x
  51. 3050 2/6/2013 The Netherlands Bad construction: unrestricted upload of dangerous files 05/03/2013 86 x
  52. 3051 2/6/2013 USA Information disclosure: Open web directory 04/20/2013 73 x
  53. 3052 2/8/2013 The Netherlands Information disclosure: credentials (visual) 04/05/2013 56 x
  54. 3053 2/8/2013 The Netherlands Cross Site Scripting (XSS) 02/24/2013 16 x q=" onmouseover=alert('xss')>
  55. 3054 2/8/2013 USA Webserver: HTTP Strict-Transport-Security (HSTS) header missing 04/21/2013 72 x
  56. 3055 2/8/2013 The Netherlands Vulnerable service: default setting(s) / default credentials 03/03/2013 23 x
  57. 3056 2/8/2013 USA Cross Site Scripting (XSS) 04/14/2013 65 x <script/xx>/**/alert(/XSS/)//
  58. 3057 2/8/2013 Belgium SQL Injection 05/08/2013 89 x
  59. 3058 2/8/2013 USA XML External Entity Processing 03/15/2013 35 x
  60. 3059 2/9/2013 Norway Information disclosure: DNS zone transfer (internal/external entries) 03/18/2013 37 x
  61. 3060 2/11/2013 USA Information disclosure: DNS zone transfer (internal/external entries) 05/08/2013 86 x
  62. 3061 2/14/2013 USA Cross-Site Request Forgery (CSRF) 05/11/2013 86 x
  63. 3062 2/15/2013 The Netherlands Vulnerable service: no authorization required 03/27/2013 40 x
  64. 3063 2/15/2013 USA Vulnerable service: default setting(s) / default credentials 03/25/2013 38 x
  65. 3064 2/17/2013 The Netherlands Bad construction: Path traversal 04/02/2013 44 x
  66. 3065 2/18/2013 The Netherlands Bad construction: service runs with (too) much privileges 03/02/2013 12 x
  67. 3066 2/22/2013 USA Cross Site Scripting (XSS) 03/14/2013 20 x
  68. 3067 2/22/2013 USA XML External Entity (XXE) 04/12/2013 49 x CVE-2012-6531 - Zend Framework
  69. 3068 2/22/2013 The Netherlands Vulnerable service: not patched with known vulnerabilities 02/28/2013 6 x x CVE-2012-1172 - PHP (phpinfo shows 5.3.x) POC $_FILES index
  70. 3069 2/22/2013 Denmark Bad construction: Path traversal 03/30/2013 36 x
  71. 3070 2/23/2013 USA XML External Entity Processing 04/29/2013 65 x
  72. 3071 2/23/2013 USA Bad construction: unrestricted upload of dangerous files 05/21/2013 87 x
  73. 3072 2/23/2013 USA Information disclosure: credentials (visual) 04/19/2013 55 x
  74. 3073 2/25/2013 Spain Protection: Anti brute-force: lockout missing on API 05/04/2013 68 x
  75. 3074 2/26/2013 The Netherlands Cross-Site Request Forgery (CSRF) 03/11/2013 13 x
  76. 3075 2/26/2013 USA Vulnerable service: default setting(s) / default credentials 03/14/2013 16 x
  77. 3076 2/27/2013 Denmark Information disclosure: Mis-configured service 06/02/2013 95 x
  78. 3077 3/1/2013 The Netherlands Remote File Inclusion 06/06/2013 97 x
  79. 3078 3/1/2013 Germany Remote File Inclusion 04/28/2013 58 x
  80. 3079 3/2/2013 USA Vulnerable service: not patched with known vulnerabilities 05/24/2013 83 x
  81. 3080 3/4/2013 Belgium Vulnerable service: not patched with known vulnerabilities 03/10/2013 6 x x
  82. 3081 3/7/2013 Belgium Bad construction: Path traversal 04/11/2013 35 x
  83. 3082 3/17/2013 The Netherlands SQL Injection 05/12/2013 56 x CVE-2012-2306 - Drupal 6.0 - Addressbook module
  84. 3083 3/19/2013 USA Service that should be firewalled 04/03/2013 15 x
  85. 3084 3/23/2013 The Netherlands Vulnerable service: mis-configured 05/26/2013 64 x
  86. 3085 3/23/2013 USA Remote File Inclusion 04/08/2013 16 x x
  87. 3086 3/23/2013 India Service that should be firewalled 06/09/2013 78 x
  88. 3087 3/23/2013 USA Remote File Inclusion 06/07/2013 76 x
  89. 3088 3/23/2013 USA Bad construction: unrestricted upload of dangerous files 05/01/2013 39 x
  90. 3089 3/29/2013 USA Information disclosure: Open webdirectory 03/30/2013 1 x x
  91. 3090 3/29/2013 The Netherlands Vulnerable service: not patched with known vulnerabilities 04/10/2013 12 x x
  92. 3091 3/30/2013 USA Information disclosure: Sensitive files 04/16/2013 17 x
  93. 3092 3/30/2013 USA Local File Inclusion 04/09/2013 10 x
  94. 3093 3/30/2013 USA Vulnerable service: mis-configured 05/22/2013 53 x
  95. 3094 4/1/2013 USA Vulnerable service: not patched with known vulnerabilities 05/14/2013 43 x
  96. 3095 4/1/2013 USA Bad construction: Path traversal 04/23/2013 22 x CVE-2012-1712 - Oracle Sun GlassFish Web Space server
  97. 3096 4/1/2013 The Netherlands Vulnerable service: not patched with known vulnerabilities 04/30/2013 29 x
  98. 3097 4/1/2013 USA Webserver: X-XSS-Protection: 1; mode=block header missing 04/02/2013 1 x x
  99. 3098 4/1/2013 USA SQL Injection 04/15/2013 14 x
  100. 3099 4/1/2013 USA Information disclosure: DNS zone transfer (internal/external entries) 04/28/2013 27 x
  101. 3100 4/1/2013 USA Remote File Inclusion 06/19/2013 79 x
  102. 3101 4/12/2013 USA Webserver: HTTP Strict-Transport-Security (HSTS) header missing 06/02/2013 51 x
  103. 3102 4/12/2013 The Netherlands Cross-Site Request Forgery (CSRF) 07/10/2013 89 x
  104. 3103 4/12/2013 USA Information disclosure: readable configs 05/27/2013 45 x
  105. 3104 4/13/2013 Germany Vulnerable CMS 07/03/2013 81 x
  106. 3105 4/13/2013 Italy Service that should be firewalled 07/17/2013 95 x
  107. 3106 4/13/2013 USA Vulnerable CMS 07/01/2013 79 x
  108. 3107 4/13/2013 USA XML External Entity Processing 05/10/2013 27 x
  109. 3108 4/13/2013 The Netherlands Vulnerable service: not patched with known vulnerabilities 04/15/2013 2 x x
  110. 3109 4/16/2013 USA Vulnerable service: not patched with known vulnerabilities 05/22/2013 36 x
  111. 3110 4/18/2013 USA Vulnerable CMS 07/21/2013 94 x
  112. 3111 4/19/2013 Germany Service that should be firewalled 05/28/2013 39 x
  113. 3112 4/19/2013 The Netherlands Webserver: HTTP Strict-Transport-Security (HSTS) header missing 04/23/2013 4 x
  114. 3113 4/19/2013 USA Webserver: X-Frame-Options: deny header missing 07/11/2013 83 x
  115. 3114 4/19/2013 USA Information disclosure: credentials (visual) 04/30/2013 11 x
  116. 3115 4/20/2013 Germany Local File Inclusion 07/14/2013 85 x
  117. 3116 4/20/2013 The Netherlands Local File Inclusion 07/13/2013 84 x
  118. 3117 4/20/2013 The Netherlands Webserver: HTTP Strict-Transport-Security (HSTS) header missing 06/08/2013 49 x
  119. 3118 4/20/2013 The Netherlands Webserver: X-Frame-Options: deny header missing 04/27/2013 7 x
  120. 3119 4/20/2013 USA Bad construction: hard-coded credentials 07/17/2013 88 x
  121. 3120 4/20/2013 USA Vulnerable service: not patched with known vulnerabilities 05/10/2013 20 x
  122. 3121 4/20/2013 USA Bad construction: URL Redirection to untrusted source 07/02/2013 73 x
  123. 3122 4/20/2013 The Netherlands Vulnerable service: default setting(s) / default credentials 05/05/2013 15 x
  124. 3123 4/20/2013 USA Vulnerable service: not patched with known vulnerabilities 05/07/2013 17 x
  125. 3124 4/21/2013 USA Remote File Inclusion 05/03/2013 12 x
  126. 3125 4/21/2013 USA Bad construction: hard-coded credentials 06/15/2013 55 x
  127. 3126 4/26/2013 Germany Cross Site Scripting (XSS) 06/14/2013 49 x
  128. 3127 4/26/2013 USA Service that should be firewalled 04/29/2013 3 x
  129. 3128 4/26/2013 The Netherlands Cross Site Scripting (XSS) 06/22/2013 57 x
  130. 3129 4/26/2013 USA Webserver: X-XSS-Protection: 1; mode=block header missing 07/08/2013 73 x
  131. 3130 4/26/2013 Germany Information disclosure: Sensitive files 07/12/2013 77 x
  132. 3131 4/26/2013 The Netherlands Information disclosure: DNS zone transfer (internal/external entries) 07/30/2013 95 x [redacted] refuses to block AFXR
  133. 3132 4/26/2013 Germany Bad construction: Path traversal 06/05/2013 40 x CVE-2012-4867 - vtiger CRM 5.1.0
  134. 3133 4/26/2013 The Netherlands Vulnerable service: mis-configured 07/15/2013 80 x
  135. 3134 4/27/2013 The Netherlands Cross Site Scripting (XSS) 06/22/2013 56 x
  136. 3135 4/27/2013 The Netherlands Cross Site Scripting (XSS) 06/12/2013 46 x
  137. 3136 4/27/2013 USA Bad construction: hard-coded credentials 06/11/2013 45 x
  138. 3137 4/27/2013 USA Webserver: X-Frame-Options: deny header missing 07/21/2013 85 x
  139. 3138 4/27/2013 USA Service that should be firewalled 07/27/2013 91 x
  140. 3139 4/29/2013 Germany Webserver: X-Frame-Options: deny header missing 05/01/2013 2 x x
  141. 3140 5/1/2013 USA Remote File Inclusion 05/13/2013 12 x
  142. 3141 5/11/2013 The Netherlands Vulnerable service: no authorization required 05/28/2013 17 x
  143. 3142 5/11/2013 Belgium Service that should be firewalled 06/30/2013 50 x
  144. 3143 5/11/2013 Norway Bad construction: URL Redirection to untrusted source 05/31/2013 20 x
  145. 3144 5/11/2013 USA Vulnerable service: not patched with known vulnerabilities 07/22/2013 72 x
  146. 3145 5/11/2013 The Netherlands Bad construction: hard-coded credentials 07/14/2013 64 x
  147. 3146 5/11/2013 USA XML External Entity Processing 06/15/2013 35 x
  148. 3147 5/11/2013 Spain Cross Site Scripting (XSS) 07/20/2013 70 x
  149. 3148 5/11/2013 The Netherlands Bad construction: hard-coded credentials 06/01/2013 21 x
  150. 3149 5/11/2013 USA Bad construction: URL Redirection to untrusted source 07/07/2013 57 x
  151. 3150 5/11/2013 USA Cross Site Scripting (XSS) 05/29/2013 18 x
  152. 3151 5/11/2013 The Netherlands XML External Entity Processing 06/29/2013 49 x
  153. 3152 5/11/2013 USA Vulnerable service: not patched with known vulnerabilities 07/10/2013 60 x
  154. 3153 5/11/2013 USA SQL Injection Data leak: > 1,000 customer/member records 4932 06/08/2013 28 x
  155. 3154 5/11/2013 The Netherlands Cross Site Scripting (XSS) 06/29/2013 49 x
  156. 3155 5/11/2013 USA Local File Inclusion 05/23/2013 12 x
  157. 3156 5/11/2013 USA Webserver: X-Frame-Options: deny header missing 05/31/2013 20 x
  158. 3157 5/11/2013 USA Vulnerable service: no authorization required 05/25/2013 14 x
  159. 3158 5/11/2013 Belgium Service that should be firewalled 07/05/2013 55 x
  160. 3159 5/11/2013 The Netherlands XML External Entity (XXE) 08/01/2013 82 x CVE-2012-6531 - Zend Framework
  161. 3160 5/11/2013 The Netherlands Information disclosure: credentials (visual) 06/14/2013 34 x
  162. 3161 5/14/2013 The Netherlands Vulnerable service: default setting(s) / default credentials 07/04/2013 51 x
  163. 3162 5/14/2013 The Netherlands Information disclosure: Mis-configured service 08/06/2013 84 x
  164. 3163 5/16/2013 USA Local File Inclusion 07/26/2013 71 x
  165. 3164 5/17/2013 Belgium Cross Site Scripting (XSS) 08/21/2013 96 x
  166. 3165 5/17/2013 USA Service that should be firewalled 06/22/2013 36 x
  167. 3166 5/17/2013 The Netherlands Remote File Inclusion 07/03/2013 47 x
  168. 3167 5/17/2013 USA Vulnerable service: not patched with known vulnerabilities 05/28/2013 11 x
  169. 3168 5/17/2013 USA Protection: Missing/bypass authorization with API 08/06/2013 81 x
  170. 3169 5/17/2013 The Netherlands Vulnerable service: default setting(s) / default credentials 05/22/2013 5 x
  171. 3170 5/17/2013 The Netherlands Bad construction: hard-coded credentials 06/06/2013 20 x
  172. 3171 5/17/2013 USA Vulnerable service: mis-configured 07/14/2013 58 x
  173. 3172 5/17/2013 The Netherlands Service that should be firewalled 07/07/2013 51 x
  174. 3173 5/24/2013 Belgium Webserver: HTTP Strict-Transport-Security (HSTS) header missing 08/12/2013 80 x
  175. 3174 5/24/2013 Germany Bad construction: Path traversal 06/10/2013 17 x CVE-2012-4867 - vtiger CRM 5.1.0
  176. 3175 5/24/2013 The Netherlands Vulnerable service: mis-configured 06/19/2013 26 x
  177. 3176 5/25/2013 The Netherlands Information disclosure: credentials (visual) 07/10/2013 46 x
  178. 3177 5/25/2013 The Netherlands Webserver: X-XSS-Protection: 1; mode=block header missing 08/05/2013 72 x
  179. 3178 5/26/2013 USA Vulnerable service: not patched with known vulnerabilities 07/07/2013 42 x
  180. 3179 5/26/2013 The Netherlands XML External Entity (XXE) 05/28/2013 2 x CVE-2012-6531 - Zend Framework
  181. 3180 5/26/2013 The Netherlands Cross Site Scripting (XSS) 06/10/2013 15 x
  182. 3181 5/26/2013 The Netherlands Vulnerable service: no authorization required 08/31/2013 97 x
  183. 3182 5/26/2013 The Netherlands XML External Entity Processing 07/19/2013 54 x
  184. 3183 5/26/2013 The Netherlands Vulnerable service: not patched with known vulnerabilities 07/07/2013 42 x
  185. 3184 5/26/2013 The Netherlands Information disclosure: DNS zone transfer (internal/external entries) 08/05/2013 71 x
  186. 3185 5/26/2013 The Netherlands Service that should be firewalled 06/13/2013 18 x
  187. 3186 5/26/2013 USA Vulnerable service: not patched with known vulnerabilities 06/05/2013 10 x
  188. 3187 5/26/2013 USA Bad construction: service runs with (too) much privileges 06/18/2013 23 x
  189. 3188 5/31/2013 Denmark Cross Site Scripting (XSS) 07/10/2013 40 x
  190. 3189 5/31/2013 The Netherlands Information disclosure: Mis-configured service 07/18/2013 48 x
  191. 3190 6/1/2013 USA Cross-Site Request Forgery (CSRF) 07/24/2013 53 x
  192. 3191 6/1/2013 The Netherlands Local File Inclusion 07/13/2013 42 x
  193. 3192 6/1/2013 The Netherlands Protection: Anti brute-force: lockout missing 07/19/2013 48 x
  194. 3193 6/5/2013 The Netherlands Information disclosure: Sensitive files 08/22/2013 78 x
  195. 3194 6/8/2013 The Netherlands Command Injection (remote) 08/14/2013 67 x WP Super Cache plugin
  196. 3195 6/8/2013 The Netherlands Protection: Missing/bypass authorization with API 07/01/2013 23 x
  197. 3196 6/8/2013 USA Information disclosure: Open web directory 09/04/2013 88 x
  198. 3197 6/8/2013 USA XML External Entity (XXE) 08/05/2013 58 x CVE-2012-6531 - Zend Framework
  199. 3198 6/8/2013 Belgium Webserver: X-Frame-Options: deny header missing 06/11/2013 3 x
  200. 3199 6/15/2013 The Netherlands Bad construction: hard-coded credentials 06/26/2013 11 x
  201. 3200 6/15/2013 Italy Protection: Missing/bypass authorization with API 09/20/2013 97 x
  202. 3201 6/15/2013 USA Information disclosure: Sensitive files 06/28/2013 13 x
  203. 3202 6/15/2013 The Netherlands XML External Entity (XXE) 08/26/2013 72 x CVE-2012-6531 - Zend Framework
  204. 3203 6/15/2013 The Netherlands Bad construction: URL Redirection to untrusted source 08/08/2013 54 x
  205. 3204 6/21/2013 USA Information disclosure: Open web directory 09/21/2013 92 x
  206. 3205 6/21/2013 USA Bad construction: unrestricted upload of dangerous files 06/30/2013 9 x
  207. 3206 6/21/2013 India Bad construction: Path traversal 09/13/2013 84 x CVE-2012-4867 - vtiger CRM 5.1.0
  208. 3207 6/21/2013 USA Information disclosure: credentials (visual) 08/09/2013 49 x
  209. 3208 6/21/2013 The Netherlands Webserver: HTTP Strict-Transport-Security (HSTS) header missing 07/20/2013 29 x
  210. 3209 6/29/2013 India Remote File Inclusion 08/15/2013 47 x
  211. 3210 6/29/2013 The Netherlands Webserver: HTTP Strict-Transport-Security (HSTS) header missing 09/12/2013 75 x
  212. 3211 6/29/2013 USA Bad construction: Path traversal 08/24/2013 56 x CVE-2012-4867 - vtiger CRM 5.1.0
  213. 3212 7/1/2013 Colombia Cross-Site Request Forgery (CSRF) 08/13/2013 43 x
  214. 3213 7/1/2013 USA SQL Injection 10/03/2013 94 x
  215. 3214 7/1/2013 The Netherlands Vulnerable CMS 08/06/2013 36 x
  216. 3215 7/1/2013 Germany Cross Site Scripting (XSS) 07/07/2013 6 x
  217. 3216 7/3/2013 The Netherlands Bad construction: Path traversal 07/04/2013 1 x x CVE-2012-4867 - vtiger CRM 5.1.0
  218. 3217 7/3/2013 The Netherlands Vulnerable service: not patched with known vulnerabilities 09/17/2013 76 x
  219. 3218 7/3/2013 USA Information disclosure: Open web directory 07/06/2013 3 x x
  220. 3219 7/5/2013 The Netherlands Remote File Inclusion 07/13/2013 8 x x
  221. 3220 7/5/2013 The Netherlands Vulnerable service: not patched with known vulnerabilities 10/05/2013 92 x
  222. 3221 7/5/2013 The Netherlands XML External Entity (XXE) 09/03/2013 60 x
  223. 3222 7/5/2013 The Netherlands Protection: Missing/bypass authorization with API 07/10/2013 5 x
  224. 3223 7/5/2013 USA Protection: Anti brute-force: lockout missing on API 08/05/2013 31 x
  225. 3224 7/5/2013 The Netherlands Protection: Anti brute-force: lockout missing on API 10/07/2013 94 x
  226. 3225 7/5/2013 USA Protection: Missing/bypass authorization with API 08/26/2013 52 x
  227. 3226 7/5/2013 USA Remote File Inclusion 09/13/2013 70 x
  228. 3227 7/5/2013 The Netherlands SQL Injection 08/02/2013 28 x
  229. 3228 7/5/2013 USA Webserver: X-Frame-Options: deny header missing 08/18/2013 44 x
  230. 3229 7/5/2013 Belgium SQL Injection 07/07/2013 2 x
  231. 3230 7/5/2013 USA Vulnerable service: no authorization required 08/18/2013 44 x
  232. 3231 7/5/2013 The Netherlands Cross Site Scripting (XSS) 10/01/2013 88 x
  233. 3232 7/5/2013 The Netherlands Vulnerable CMS 09/25/2013 82 x
  234. 3233 7/5/2013 USA Cross Site Scripting (XSS) 07/21/2013 16 x
  235. 3234 7/5/2013 USA Webserver: HTTP Strict-Transport-Security (HSTS) header missing 09/20/2013 77 x
  236. 3235 7/5/2013 USA Protection: Missing/bypass authorization with API 08/07/2013 33 x
  237. 3236 7/5/2013 The Netherlands Webserver: X-Frame-Options: deny header missing 09/08/2013 65 x
  238. 3237 7/5/2013 The Netherlands Vulnerable service: mis-configured 09/09/2013 66 x
  239. 3238 7/5/2013 The Netherlands Protection: Anti brute-force: lockout missing 07/14/2013 9 x
  240. 3239 7/5/2013 USA Vulnerable service: no authorization required 08/28/2013 54 x
  241. 3240 7/6/2013 USA Cross Site Scripting (XSS) 08/15/2013 40 x
  242. 3241 7/6/2013 USA Bad construction: unrestricted upload of dangerous files 07/16/2013 10 x
  243. 3242 7/9/2013 Sweden Local File Inclusion 07/11/2013 2 x
  244. 3243 7/13/2013 USA Webserver: HTTP Strict-Transport-Security (HSTS) header missing 07/24/2013 11 x
  245. 3244 7/13/2013 Germany SQL Injection 07/14/2013 1 x x
  246. 3245 7/13/2013 The Netherlands Service that should be firewalled 09/22/2013 71 x
  247. 3246 7/14/2013 The Netherlands Information disclosure: Sensitive files 08/29/2013 46 x
  248. 3247 7/19/2013 USA Bad construction: URL Redirection to untrusted source 08/27/2013 39 x
  249. 3248 7/19/2013 Belgium Service that should be firewalled 09/08/2013 51 x
  250. 3249 7/19/2013 Germany Information disclosure: DNS zone transfer (internal/external entries) 09/30/2013 73 x
  251. 3250 7/19/2013 The Netherlands Information disclosure: Open webdirectory 08/22/2013 34 x
  252. 3251 7/19/2013 Colombia Information disclosure: readable configs 08/28/2013 40 x
  253. 3252 7/20/2013 The Netherlands Protection: Anti brute-force: lockout missing on API 09/14/2013 56 x
  254. 3253 7/20/2013 The Netherlands Webserver: X-Frame-Options: deny header missing 09/05/2013 47 x
  255. 3254 7/20/2013 Norway Bad construction: Path traversal 09/17/2013 59 x CVE-2012-4701 - Tridium Niagara AX 3.7
  256. 3255 7/20/2013 USA Protection: No maximum use rate on API 10/25/2013 97 x
  257. 3256 7/20/2013 The Netherlands Cross Site Scripting (XSS) 10/14/2013 86 x
  258. 3257 7/20/2013 Germany Local File Inclusion 10/13/2013 85 x
  259. 3258 7/20/2013 USA Vulnerable service: default setting(s) / default credentials 08/18/2013 29 x
  260. 3259 7/20/2013 USA Remote File Inclusion 08/18/2013 29 x
  261. 3260 7/20/2013 The Netherlands Protection: No maximum use rate on API 10/10/2013 82 x
  262. 3261 7/20/2013 USA Bad construction: Path traversal 08/23/2013 34 x
  263. 3262 7/20/2013 USA Cross Site Scripting (XSS) 07/28/2013 8 x
  264. 3263 7/20/2013 The Netherlands Bad construction: unrestricted upload of dangerous files 09/23/2013 65 x
  265. 3264 7/20/2013 The Netherlands SQL Injection 10/24/2013 96 x
  266. 3265 7/20/2013 USA Protection: Anti brute-force: lockout missing on API 08/29/2013 40 x
  267. 3266 7/20/2013 USA XML External Entity Processing 08/29/2013 40 x
  268. 3267 7/20/2013 Germany Command Injection (remote) 10/01/2013 73 x WP Super Cache plugin
  269. 3268 7/26/2013 USA Bad construction: Path traversal 09/08/2013 44 x
  270. 3269 7/26/2013 USA Vulnerable service: default setting(s) / default credentials 10/06/2013 72 x
  271. 3270 7/26/2013 The Netherlands Bad construction: URL Redirection to untrusted source 08/31/2013 36 x
  272. 3271 7/26/2013 The Netherlands Vulnerable service: no authorization required 10/06/2013 72 x
  273. 3272 7/26/2013 Belgium Bad construction: Path traversal 08/10/2013 15 x
  274. 3273 7/26/2013 USA Service that should be firewalled 09/03/2013 39 x
  275. 3274 7/26/2013 The Netherlands Cross Site Scripting (XSS) 08/18/2013 23 x
  276. 3275 7/27/2013 The Netherlands Bad construction: Path traversal 08/01/2013 5 x x
  277. 3276 7/27/2013 The Netherlands Service that should be firewalled 07/31/2013 4 x x
  278. 3277 7/2/2013 The Netherlands Remote File Inclusion 09/17/2013 77 x
  279. 3278 7/4/2013 The Netherlands Vulnerable service: not patched with known vulnerabilities 07/14/2013 10 x
  280. 3279 7/4/2013 USA Service that should be firewalled 08/12/2013 39 x
  281. 3280 7/5/2013 The Netherlands Bad construction: service runs with (too) much privileges 09/15/2013 72 x
  282. 3281 7/5/2013 The Netherlands Webserver: X-XSS-Protection: 1; mode=block header missing 09/07/2013 64 x
  283. 3282 7/5/2013 Denmark Remote File Inclusion 08/29/2013 55 x
  284. 3283 7/5/2013 The Netherlands Bad construction: URL Redirection to untrusted source 09/20/2013 77 x
  285. 3284 7/5/2013 The Netherlands Bad construction: Path traversal 08/01/2013 27 x
  286. 3285 7/5/2013 USA Bad construction: Path traversal 08/17/2013 43 x
  287. 3286 7/5/2013 USA Protection: Anti brute-force: lockout missing 09/24/2013 81 x
  288. 3287 7/5/2013 The Netherlands Bad construction: Path traversal 08/19/2013 45 x
  289. 3288 7/5/2013 The Netherlands Bad construction: Path traversal 07/30/2013 25 x
  290. 3289 7/5/2013 USA Cross-Site Request Forgery (CSRF) 08/21/2013 47 x
  291. 3290 7/5/2013 USA Webserver: X-XSS-Protection: 1; mode=block header missing 07/23/2013 18 x
  292. 3291 7/5/2013 The Netherlands XML External Entity (XXE) 09/03/2013 60 x
  293. 3292 7/5/2013 USA Webserver: X-Frame-Options: deny header missing 10/06/2013 93 x
  294. 3293 7/5/2013 USA Local File Inclusion 10/08/2013 95 x
  295. 3294 7/5/2013 USA Vulnerable service: not patched with known vulnerabilities 09/10/2013 67 x
  296. 3295 7/5/2013 The Netherlands Protection: Anti brute-force: lockout missing 07/15/2013 10 x
  297. 3296 7/5/2013 USA Webserver: HTTP Strict-Transport-Security (HSTS) header missing 08/20/2013 46 x
  298. 3297 7/6/2013 The Netherlands Information disclosure: DNS zone transfer (internal/external entries) 09/26/2013 82 x
  299. 3298 7/6/2013 USA Cross-Site Request Forgery (CSRF) 07/20/2013 14 x
  300. 3299 7/6/2013 France Bad construction: URL Redirection to untrusted source 09/21/2013 77 x
  301. 3300 7/6/2013 The Netherlands Vulnerable CMS 09/26/2013 82 x
  302. 3301 7/6/2013 The Netherlands Vulnerable service: not patched with known vulnerabilities 08/20/2013 45 x
  303. 3302 7/6/2013 France Information disclosure: Open web directory 09/03/2013 59 x
  304. 3303 7/6/2013 USA Vulnerable service: not patched with known vulnerabilities 07/13/2013 7 x
  305. 3304 7/6/2013 Belgium XML External Entity (XXE) 08/23/2013 48 x
  306. 3305 7/6/2013 USA Bad construction: Path traversal 09/16/2013 72 x
  307. 3306 7/6/2013 The Netherlands Information disclosure: Open web directory 08/15/2013 40 x
  308. 3307 7/6/2013 USA Vulnerable service: mis-configured 07/21/2013 15 x
  309. 3308 7/6/2013 The Netherlands Service that should be firewalled 08/16/2013 41 x
  310. 3309 7/6/2013 USA Remote File Inclusion 09/10/2013 66 x
  311. 3310 7/6/2013 USA Service that should be firewalled 10/02/2013 88 x
  312. 3311 7/6/2013 The Netherlands Webserver: X-Frame-Options: deny header missing 08/22/2013 47 x
  313. 3312 7/6/2013 The Netherlands Bad construction: URL Redirection to untrusted source 08/23/2013 48 x
  314. 3313 7/6/2013 The Netherlands Protection: No maximum use rate on API 08/05/2013 30 x
  315. 3314 7/6/2013 USA Remote File Inclusion 07/21/2013 15 x
  316. 3315 7/6/2013 The Netherlands Information disclosure: Sensitive files 10/10/2013 96 x
  317. 3316 7/7/2013 Belgium Vulnerable service: not patched with known vulnerabilities 08/06/2013 30 x
  318. 3317 7/7/2013 USA Vulnerable service: not patched with known vulnerabilities 09/23/2013 78 x
  319. 3318 7/7/2013 USA Vulnerable service: default setting(s) / default credentials 09/04/2013 59 x
  320. 3319 7/7/2013 The Netherlands Cross Site Scripting (XSS) 08/26/2013 50 x
  321. 3320 7/7/2013 Germany Bad construction: Path traversal 08/21/2013 45 x
  322. 3321 7/7/2013 India Vulnerable service: default setting(s) / default credentials 08/27/2013 51 x
  323. 3322 7/7/2013 India Vulnerable CMS 08/15/2013 39 x
  324. 3323 7/7/2013 USA Vulnerable service: mis-configured 09/28/2013 83 x
  325. 3324 7/7/2013 USA Protection: No maximum use rate on API 09/03/2013 58 x
  326. 3325 7/7/2013 The Netherlands Protection: Anti brute-force: lockout missing on API 07/10/2013 3 x x
  327. 3326 7/7/2013 The Netherlands Vulnerable service: not patched with known vulnerabilities 08/10/2013 34 x
  328. 3327 7/7/2013 USA SQL Injection 08/10/2013 34 x
  329. 3328 7/7/2013 USA Bad construction: Path traversal 07/21/2013 14 x
  330. 3329 7/7/2013 USA Webserver: X-XSS-Protection: 1; mode=block header missing 09/15/2013 70 x
  331. 3330 7/7/2013 Germany Webserver: X-XSS-Protection: 1; mode=block header missing 09/04/2013 59 x
  332. 3331 7/7/2013 USA Information disclosure: Mis-configured service 10/11/2013 96 x
  333. 3332 7/7/2013 The Netherlands Bad construction: URL Redirection to untrusted source 07/20/2013 13 x
  334. 3333 7/7/2013 The Netherlands Cross Site Scripting (XSS) 09/16/2013 71 x
  335. 3334 7/7/2013 The Netherlands Vulnerable service: no authorization required 08/28/2013 52 x
  336. 3335 7/7/2013 The Netherlands Service that should be firewalled 09/10/2013 65 x
  337. 3336 7/7/2013 Norway Cross Site Scripting (XSS) 07/14/2013 7 x
  338. 3337 7/7/2013 USA Bad construction: Path traversal 10/08/2013 93 x
  339. 3338 7/12/2013 USA Information disclosure: Open web directory 10/13/2013 93 x
  340. 3339 7/12/2013 The Netherlands Vulnerable service: not patched with known vulnerabilities 09/17/2013 67 x
  341. 3340 7/12/2013 USA Protection: Anti brute-force: lockout missing on API 08/14/2013 33 x
  342. 3341 7/12/2013 USA Bad construction: unrestricted upload of dangerous files 09/09/2013 59 x
  343. 3342 7/12/2013 The Netherlands Webserver: X-XSS-Protection: 1; mode=block header missing 10/02/2013 82 x
  344. 3343 7/12/2013 The Netherlands Webserver: HTTP Strict-Transport-Security (HSTS) header missing 08/08/2013 27 x
  345. 3344 7/12/2013 USA Webserver: X-Frame-Options: deny header missing 09/21/2013 71 x
  346. 3345 7/12/2013 The Netherlands Protection: No maximum use rate on API 07/27/2013 15 x x
  347. 3346 7/12/2013 The Netherlands Bad construction: unrestricted upload of dangerous files 10/10/2013 90 x
  348. 3347 7/12/2013 USA Cross Site Scripting (XSS) 10/09/2013 89 x
  349. 3348 7/12/2013 USA Vulnerable service: not patched with known vulnerabilities 08/13/2013 32 x
  350. 3349 7/12/2013 USA Bad construction: hard-coded credentials 08/07/2013 26 x
  351. 3350 7/12/2013 The Netherlands Vulnerable service: no authorization required 08/02/2013 21 x
  352. 3351 7/12/2013 The Netherlands Bad construction: URL Redirection to untrusted source 08/26/2013 45 x
  353. 3352 7/12/2013 Belgium SQL Injection 10/14/2013 94 x
  354. 3353 7/12/2013 The Netherlands Protection: Missing/bypass authorization with API 09/23/2013 73 x
  355. 3354 7/13/2013 The Netherlands Webserver: X-XSS-Protection: 1; mode=block header missing 07/16/2013 3 x x
  356. 3355 7/13/2013 Germany Cross Site Scripting (XSS) 07/25/2013 12 x
  357. 3356 7/13/2013 The Netherlands Protection: Anti brute-force: lockout missing on API 08/19/2013 37 x
  358. 3357 7/13/2013 USA Webserver: X-Frame-Options: deny header missing 10/07/2013 86 x
  359. 3358 7/13/2013 Belgium Protection: No maximum use rate on API 07/22/2013 9 x
  360. 3359 7/13/2013 USA Cross Site Scripting (XSS) 09/19/2013 68 x
  361. 3360 7/13/2013 The Netherlands Information disclosure: DNS zone transfer (internal/external entries) 09/16/2013 65 x
  362. 3361 7/13/2013 USA Information disclosure: DNS zone transfer (internal/external entries) 09/30/2013 79 x
  363. 3362 7/13/2013 India Information disclosure: Sensitive files 07/18/2013 5 x
  364. 3363 7/13/2013 USA SQL Injection 08/20/2013 38 x
  365. 3364 7/13/2013 The Netherlands Webserver: X-Frame-Options: deny header missing 08/05/2013 23 x
  366. 3365 7/13/2013 USA Protection: Anti brute-force: lockout missing 09/20/2013 69 x
  367. 3366 7/13/2013 USA Vulnerable service: mis-configured 08/04/2013 22 x
  368. 3367 7/13/2013 USA Bad construction: unrestricted upload of dangerous files 09/02/2013 51 x
  369. 3368 7/13/2013 USA Bad construction: unrestricted upload of dangerous files 09/16/2013 65 x
  370. 3369 7/13/2013 Denmark Protection: No maximum use rate on API 07/23/2013 10 x
  371. 3370 7/13/2013 USA Local File Inclusion 09/06/2013 55 x
  372. 3371 7/13/2013 USA Information disclosure: Sensitive files 07/28/2013 15 x
  373. 3372 7/13/2013 The Netherlands SQL Injection 09/14/2013 63 x
  374. 3373 7/13/2013 USA Vulnerable CMS 09/23/2013 72 x
  375. 3374 7/13/2013 USA Vulnerable service: default setting(s) / default credentials 09/01/2013 50 x
  376. 3375 7/13/2013 USA Bad construction: URL Redirection to untrusted source 09/19/2013 68 x
  377. 3376 7/13/2013 USA Local File Inclusion 09/10/2013 59 x
  378. 3377 7/13/2013 USA Vulnerable service: not patched with known vulnerabilities 09/23/2013 72 x
  379. 3378 7/13/2013 France XML External Entity (XXE) 10/04/2013 83 x
  380. 3379 7/13/2013 The Netherlands Vulnerable CMS 09/09/2013 58 x
  381. 3380 7/13/2013 The Netherlands Cross Site Scripting (XSS) 09/26/2013 75 x
  382. 3381 7/13/2013 The Netherlands Webserver: HTTP Strict-Transport-Security (HSTS) header missing 08/02/2013 20 x
  383. 3382 7/13/2013 The Netherlands Cross-Site Request Forgery (CSRF) 07/20/2013 7 x
  384. 3383 7/13/2013 The Netherlands SQL Injection 08/01/2013 19 x
  385. 3384 7/13/2013 USA Information disclosure: Open webdirectory 10/07/2013 86 x
  386. 3385 7/13/2013 The Netherlands Protection: Anti brute-force: lockout missing on API 10/11/2013 90 x
  387. 3386 7/13/2013 The Netherlands Bad construction: service runs with (too) much privileges 09/17/2013 66 x
  388. 3387 7/13/2013 India Vulnerable service: default setting(s) / default credentials 09/08/2013 57 x
  389. 3388 7/14/2013 The Netherlands SQL Injection 09/21/2013 69 x
  390. 3389 7/14/2013 USA Information disclosure: credentials (visual) 07/31/2013 17 x
  391. 3390 7/14/2013 The Netherlands Vulnerable service: mis-configured 09/22/2013 70 x
  392. 3391 7/14/2013 The Netherlands Information disclosure: Sensitive files 08/23/2013 40 x
  393. 3392 7/14/2013 USA Vulnerable CMS 10/04/2013 82 x
  394. 3393 7/14/2013 The Netherlands Vulnerable CMS 09/22/2013 70 x
  395. 3394 7/14/2013 New Zealand Cross Site Scripting (XSS) 08/03/2013 20 x
  396. 3395 7/14/2013 USA Bad construction: unrestricted upload of dangerous files 10/10/2013 88 x
  397. 3396 7/14/2013 The Netherlands XML External Entity (XXE) 07/31/2013 17 x
  398. 3397 7/19/2013 The Netherlands Bad construction: Path traversal 08/24/2013 36 x
  399. 3398 7/19/2013 India Information disclosure: Sensitive files 09/13/2013 56 x
  400. 3399 7/19/2013 USA Cross Site Scripting (XSS) 10/18/2013 91 x
  401. 3400 7/19/2013 USA Vulnerable service: not patched with known vulnerabilities 10/16/2013 89 x
  402. 3401 7/19/2013 The Netherlands Information disclosure: readable configs 10/22/2013 95 x
  403. 3402 7/20/2013 The Netherlands SQL Injection 10/25/2013 97 x
  404. 3403 7/20/2013 The Netherlands Vulnerable service: not patched with known vulnerabilities 10/25/2013 97 x
  405. 3404 7/20/2013 The Netherlands Bad construction: hard-coded credentials 07/29/2013 9 x x
  406. 3405 7/20/2013 USA Bad construction: hard-coded credentials 10/12/2013 84 x
  407. 3406 7/20/2013 Belgium Webserver: X-XSS-Protection: 1; mode=block header missing 07/27/2013 7 x
  408. 3407 7/20/2013 The Netherlands Cross Site Scripting (XSS) 09/08/2013 50 x
  409. 3408 7/20/2013 Spain Webserver: X-Frame-Options: deny header missing 08/19/2013 30 x
  410. 3409 7/20/2013 USA Protection: No maximum use rate on API 09/19/2013 61 x
  411. 3410 7/20/2013 The Netherlands Vulnerable service: not patched with known vulnerabilities 09/17/2013 59 x
  412. 3411 7/20/2013 The Netherlands Local File Inclusion 10/03/2013 75 x
  413. 3412 7/20/2013 The Netherlands Information disclosure: Sensitive files 10/16/2013 88 x
  414. 3413 7/20/2013 USA Information disclosure: Open webdirectory 08/05/2013 16 x
  415. 3414 7/20/2013 USA XML External Entity (XXE) 09/29/2013 71 x
  416. 3415 7/20/2013 USA Bad construction: unrestricted upload of dangerous files 07/23/2013 3 x
  417. 3416 7/20/2013 USA Vulnerable service: not patched with known vulnerabilities 08/21/2013 32 x
  418. 3417 7/20/2013 The Netherlands XML External Entity (XXE) 07/29/2013 9 x
  419. 3418 7/20/2013 The Netherlands Cross-Site Request Forgery (CSRF) 08/27/2013 38 x
  420. 3419 7/20/2013 Colombia Information disclosure: Sensitive files 09/29/2013 71 x
  421. 3420 7/27/2013 The Netherlands Webserver: HTTP Strict-Transport-Security (HSTS) header missing 09/16/2013 51 x
  422. 3421 7/27/2013 The Netherlands Command Injection (remote) 10/14/2013 79 x WP Super Cache plugin
  423. 3422 7/27/2013 The Netherlands Bad construction: hard-coded credentials 08/31/2013 35 x
  424. 3423 7/27/2013 Belgium Information disclosure: Sensitive files 08/20/2013 24 x
  425. 3424 7/27/2013 Belgium Bad construction: Path traversal 08/24/2013 28 x
  426. 3425 7/27/2013 The Netherlands Vulnerable CMS 10/17/2013 82 x
  427. 3426 7/27/2013 The Netherlands XML External Entity Processing 08/21/2013 25 x
  428. 3427 7/27/2013 Belgium Webserver: HTTP Strict-Transport-Security (HSTS) header missing 08/26/2013 30 x
  429. 3428 7/27/2013 USA Bad construction: Path traversal 08/08/2013 12 x
  430. 3429 7/28/2013 USA Information disclosure: Open webdirectory 09/17/2013 51 x
  431. 3430 9/1/2013 USA Protection: Anti brute-force: lockout missing on API 11/20/2013 80 x
  432. 3431 9/2/2013 Germany Bad construction: unrestricted upload of dangerous files 10/01/2013 29 x
  433. 3432 9/8/2013 The Netherlands Bad construction: Path traversal 11/11/2013 64 x
  434. 3433 9/8/2013 The Netherlands Bad construction: hard-coded credentials 11/18/2013 71 x
  435. 3434 9/12/2013 USA Vulnerable service: mis-configured 10/19/2013 37 x
  436. 3435 9/13/2013 USA Information disclosure: DNS zone transfer (internal/external entries) 12/17/2013 95 x
  437. 3436 9/13/2013 Sweden SQL Injection 10/30/2013 47 x
  438. 3437 9/13/2013 The Netherlands Service that should be firewalled 11/29/2013 77 x
  439. 3438 9/13/2013 The Netherlands Protection: Anti brute-force: lockout missing on API 12/09/2013 87 x
  440. 3439 9/13/2013 USA Information disclosure: credentials (visual) 11/29/2013 77 x
  441. 3440 9/13/2013 USA Command Injection (remote) 10/29/2013 46 x CVE-2013-2251 Apache Struts 2.1.1 accessible via [redacted].gov.us
  442. 3441 9/13/2013 USA Bad construction: unrestricted upload of dangerous files 09/24/2013 11 x
  443. 3442 9/13/2013 USA XML External Entity Processing 10/19/2013 36 x
  444. 3443 9/13/2013 USA Protection: No maximum use rate on API 11/04/2013 52 x
  445. 3444 9/13/2013 USA Vulnerable service: default setting(s) / default credentials 10/22/2013 39 x
  446. 3445 9/13/2013 USA Protection: Anti brute-force: lockout missing on API 10/14/2013 31 x
  447. 3446 9/13/2013 USA Command Injection (remote) 12/03/2013 81 x WP Super Cache plugin
  448. 3447 9/15/2013 USA Cross-Site Request Forgery (CSRF) 12/20/2013 96 x
  449. 3448 9/15/2013 USA Bad construction: service runs with (too) much privileges 12/07/2013 83 x
  450. 3449 9/15/2013 USA Vulnerable service: mis-configured 10/27/2013 42 x
  451. 3450 9/15/2013 Germany Vulnerable service: not patched with known vulnerabilities 09/30/2013 15 x
  452. 3451 9/15/2013 The Netherlands Vulnerable CMS 10/29/2013 44 x
  453. 3452 9/15/2013 USA Vulnerable CMS 12/12/2013 88 x
  454. 3453 9/15/2013 Belgium Vulnerable CMS 12/09/2013 85 x
  455. 3454 9/15/2013 USA Protection: Missing/bypass authorization with API 11/03/2013 49 x
  456. 3455 9/15/2013 Belgium Remote File Inclusion 12/03/2013 79 x
  457. 3456 9/15/2013 Belgium Vulnerable service: default setting(s) / default credentials 11/09/2013 55 x
  458. 3457 9/15/2013 USA Cross Site Scripting (XSS) 09/27/2013 12 x
  459. 3458 9/15/2013 USA Command Injection (remote) 10/18/2013 33 x WP Super Cache plugin
  460. 3459 9/15/2013 USA Information disclosure: Sensitive files 11/28/2013 74 x
  461. 3460 9/18/2013 The Netherlands Webserver: X-Frame-Options: deny header missing 12/24/2013 97 x
  462. 3461 9/20/2013 USA Information disclosure: credentials (visual) 12/03/2013 74 x
  463. 3462 9/20/2013 The Netherlands Cross-Site Request Forgery (CSRF) 11/30/2013 71 x
  464. 3463 9/20/2013 The Netherlands Information disclosure: Mis-configured service 10/25/2013 35 x
  465. 3464 9/20/2013 The Netherlands XML External Entity (XXE) 11/22/2013 63 x
  466. 3465 9/20/2013 USA Information disclosure: Mis-configured service 11/12/2013 53 x
  467. 3466 9/20/2013 USA Bad construction: service runs with (too) much privileges 12/09/2013 80 x
  468. 3467 9/20/2013 USA Bad construction: Path traversal 12/11/2013 82 x
  469. 3468 9/20/2013 USA Information disclosure: Open web directory 11/15/2013 56 x
  470. 3469 9/20/2013 Belgium Protection: Anti brute-force: lockout missing on API 10/03/2013 13
  471. 3470 9/20/2013 The Netherlands Protection: Anti brute-force: lockout missing on API 10/21/2013 31 x
  472. 3471 9/20/2013 USA Protection: Missing/bypass authorization with API 12/12/2013 83 x
  473. 3472 9/20/2013 The Netherlands Service that should be firewalled 10/18/2013 28 x
  474. 3473 9/20/2013 Spain XML External Entity (XXE) 11/17/2013 58 x
  475. 3474 9/20/2013 The Netherlands Bad construction: Path traversal 11/21/2013 62 x
  476. 3475 9/20/2013 USA Bad construction: Path traversal 10/29/2013 39 x
  477. 3476 9/20/2013 The Netherlands Cross Site Scripting (XSS) 11/05/2013 46 x &id='"--></style></scRIPt><scRI Pt>alert('XSS')</scRIPt>
  478. 3477 9/20/2013 The Netherlands Bad construction: service runs with (too) much privileges 11/24/2013 65 x
  479. 3478 9/20/2013 USA Bad construction: Path traversal 11/05/2013 46 x
  480. 3479 9/20/2013 USA Information disclosure: Mis-configured service 12/21/2013 92 x
  481. 3480 9/20/2013 USA Protection: Anti brute-force: lockout missing 11/08/2013 49 x
  482. 3481 9/20/2013 Belgium Cross Site Scripting (XSS) 12/09/2013 80 x
  483. 3482 9/20/2013 The Netherlands Webserver: HTTP Strict-Transport-Security (HSTS) header missing 12/24/2013 95 x
  484. 3483 9/27/2013 Germany Protection: Missing/bypass authorization with API 12/02/2013 66 x
  485. 3484 9/27/2013 USA Vulnerable service: default setting(s) / default credentials 11/05/2013 39 x
  486. 3485 9/27/2013 USA Remote File Inclusion 12/11/2013 75 x
  487. 3486 9/27/2013 USA Bad construction: Path traversal 10/06/2013 9
  488. 3487 9/27/2013 Belgium Remote File Inclusion 11/06/2013 40 x
  489. 3488 9/27/2013 USA Bad construction: URL Redirection to untrusted source 10/21/2013 24 x
  490. 3489 9/27/2013 The Netherlands Protection: Anti brute-force: lockout missing 12/22/2013 86 x
  491. 3490 9/27/2013 USA Bad construction: Path traversal 11/25/2013 59 x
  492. 3491 9/27/2013 USA Command Injection (remote) 10/01/2013 4 x x WP Super Cache plugin
  493. 3492 9/28/2013 USA Vulnerable service: mis-configured 11/05/2013 38 x
  494. 3493 9/28/2013 USA Webserver: X-XSS-Protection: 1; mode=block header missing 10/17/2013 19 x
  495. 3494 9/28/2013 Germany XML External Entity Processing 12/04/2013 67 x
  496. 3495 9/28/2013 Germany Vulnerable service: not patched with known vulnerabilities 12/28/2013 91 x
  497. 3496 9/28/2013 Belgium Service that should be firewalled 10/03/2013 5
  498. 3497 9/28/2013 The Netherlands Protection: Anti brute-force: lockout missing 11/08/2013 41 x
  499. 3498 9/28/2013 Belgium Protection: No maximum use rate on API 12/17/2013 80 x
  500. 3499 9/28/2013 Belgium Cross Site Scripting (XSS) 12/25/2013 88 x /search?language=nl&search_field==Ik wil Belg "onload=prompt(/xss/) worden &search_submit=Zoek [redacted].be
  501. 3500 9/28/2013 USA Webserver: HTTP Strict-Transport-Security (HSTS) header missing 12/02/2013 65 x
  502. 3501 9/30/2013 The Netherlands Bad construction: service runs with (too) much privileges 10/07/2013 7
  503. 3502 10/5/2013 Belgium Vulnerable service: not patched with known vulnerabilities 12/05/2013 61 x
  504. 3503 10/5/2013 USA Bad construction: service runs with (too) much privileges 11/16/2013 42 x
  505. 3504 10/5/2013 USA Information disclosure: Sensitive files 11/17/2013 43 x
  506. 3505 10/5/2013 The Netherlands Bad construction: service runs with (too) much privileges 11/19/2013 45 x
  507. 3506 10/5/2013 Denmark Bad construction: hard-coded credentials 10/08/2013 3
  508. 3507 10/5/2013 The Netherlands Information disclosure: readable configs 12/09/2013 65 x
  509. 3508 10/5/2013 The Netherlands Cross Site Scripting (XSS) 10/13/2013 8
  510. 3509 10/5/2013 The Netherlands Vulnerable service: mis-configured 01/06/2014 93 x
  511. 3510 10/5/2013 France Webserver: X-XSS-Protection: 1; mode=block header missing 12/17/2013 73 x
  512. 3511 10/6/2013 USA Information disclosure: credentials (visual) 01/06/2014 92 x
  513. 3512 10/6/2013 The Netherlands Bad construction: URL Redirection to untrusted source 12/15/2013 70 x
  514. 3513 10/6/2013 The Netherlands Information disclosure: credentials (visual) 11/30/2013 55 x
  515. 3514 10/9/2013 USA Service that should be firewalled 01/01/2014 84 x
  516. 3515 10/9/2013 The Netherlands Vulnerable service: mis-configured 12/11/2013 63 x
  517. 3516 10/10/2013 The Netherlands Protection: Missing/bypass authorization with API 01/04/2014 86 x
  518. 3517 10/11/2013 The Netherlands Vulnerable service: not patched with known vulnerabilities 11/09/2013 29 x
  519. 3518 10/19/2013 USA Bad construction: hard-coded credentials 01/01/2014 74 x
  520. 3519 10/19/2013 USA XML External Entity (XXE) 01/19/2014 92 x
  521. 3520 10/19/2013 The Netherlands Webserver: X-Frame-Options: deny header missing 11/13/2013 25 x
  522. 3521 10/19/2013 Belgium Vulnerable service: no authorization required 11/20/2013 32 x
  523. 3522 10/19/2013 USA Information disclosure: Sensitive files 10/25/2013 6
  524. 3523 10/19/2013 The Netherlands Protection: No maximum use rate on API 11/15/2013 27 x
  525. 3524 10/20/2013 USA SQL Injection 11/28/2013 39 x
  526. 3525 10/20/2013 The Netherlands Service that should be firewalled 11/07/2013 18 x
  527. 3526 10/20/2013 USA Information disclosure: readable configs 01/02/2014 74 x
  528. 3527 10/20/2013 The Netherlands Webserver: HTTP Strict-Transport-Security (HSTS) header missing 11/27/2013 38 x
  529. 3528 10/26/2013 USA Webserver: HTTP Strict-Transport-Security (HSTS) header missing 01/31/2014 97 x
  530. 3529 10/26/2013 USA Information disclosure: readable configs 11/14/2013 19 x
  531. 3530 10/26/2013 USA Service that should be firewalled 11/06/2013 11 x
  532. 3531 10/26/2013 France Information disclosure: readable configs 01/22/2014 88 x
  533. 3532 10/26/2013 The Netherlands Webserver: HTTP Strict-Transport-Security (HSTS) header missing 12/08/2013 43 x
  534. 3533 10/26/2013 USA Command Injection (remote) 01/24/2014 90 x WP Super Cache plugin
  535. 3534 10/26/2013 USA Information disclosure: credentials (visual) 10/27/2013 1 x x
  536. 3535 10/26/2013 Germany Vulnerable service: mis-configured 12/07/2013 42 x
  537. 3536 10/26/2013 The Netherlands Cross Site Scripting (XSS) 11/06/2013 11 x
  538. 3537 10/26/2013 USA Information disclosure: Mis-configured service 12/01/2013 36 x
  539. 3538 10/26/2013 The Netherlands Protection: No maximum use rate on API 01/31/2014 97 x
  540. 3539 10/26/2013 Germany Webserver: HTTP Strict-Transport-Security (HSTS) header missing 10/31/2013 5 x
  541. 3540 10/27/2013 The Netherlands Webserver: HTTP Strict-Transport-Security (HSTS) header missing 12/04/2013 38 x
  542. 3541 10/27/2013 Germany Service that should be firewalled 01/27/2014 92 x
  543. 3542 10/28/2013 USA Vulnerable service: no authorization required 12/16/2013 49 x
  544. 3543 11/1/2013 Germany XML External Entity (XXE) 02/06/2014 97 x
  545. 3544 11/1/2013 The Netherlands Bad construction: Path traversal 11/08/2013 7 x
  546. 3545 11/1/2013 USA Protection: Missing/bypass authorization with API 01/12/2014 72 x
  547. 3546 11/1/2013 The Netherlands Cross Site Scripting (XSS) 01/29/2014 89 x &q=aangifte <img src=a onload=alert(/XSS/)>doen
  548. 3547 11/9/2013 The Netherlands Command Injection (remote) 02/09/2014 92 x WP Super Cache plugin
  549. 3548 11/9/2013 The Netherlands Vulnerable service: not patched with known vulnerabilities 01/16/2014 68 x
  550. 3549 11/9/2013 USA Cross Site Scripting (XSS) 01/25/2014 77 x
  551. 3550 11/16/2013 USA Cross-Site Request Forgery (CSRF) 02/19/2014 95 x
  552. 3551 11/16/2013 The Netherlands SQL Injection 01/12/2014 57 x
  553. 3552 11/16/2013 USA Bad construction: Path traversal 12/30/2013 44 x
  554. 3553 11/16/2013 USA Webserver: X-XSS-Protection: 1; mode=block header missing 02/03/2014 79 x
  555. 3554 11/16/2013 USA Information disclosure: Open webdirectory 01/21/2014 66 x
  556. 3555 11/16/2013 Germany Cross Site Scripting (XSS) 02/17/2014 93 x
  557. 3556 11/16/2013 USA Cross Site Scripting (XSS) 02/02/2014 78 x
  558. 3557 11/16/2013 Italy Webserver: HTTP Strict-Transport-Security (HSTS) header missing 11/24/2013 8 Screen PoC link send
  559. 3558 11/16/2013 The Netherlands Webserver: HTTP Strict-Transport-Security (HSTS) header missing 12/28/2013 42 x Screen PoC link send
  560. 3559 11/16/2013 The Netherlands Cross-Site Request Forgery (CSRF) 01/09/2014 54 x CVE-2012-4448 WordPress > 3.4.2
  561. 3560 11/22/2013 USA Information disclosure: DNS zone transfer (internal/external entries) 12/19/2013 27 x
  562. 3561 11/22/2013 USA Command Injection (remote) 12/26/2013 34 x WP Super Cache plugin
  563. 3562 11/23/2013 USA Vulnerable service: not patched with known vulnerabilities 01/25/2014 63 x
  564. 3563 11/29/2013 USA Protection: Anti brute-force: lockout missing on API 12/03/2013 4 x
  565. 3564 11/29/2013 USA Webserver: X-XSS-Protection: 1; mode=block header missing 01/30/2014 62 x
  566. 3565 11/30/2013 The Netherlands XML External Entity (XXE) 12/06/2013 6 x CVE-2012-6531 - Zend Framework 1.11.1 vulnerable
  567. 3566 11/30/2013 Sweden Webserver: X-XSS-Protection: 1; mode=block header missing 12/09/2013 9 x
  568. 3567 12/1/2013 The Netherlands Information disclosure: Open web directory 12/05/2013 4 x
  569. 3568 12/4/2013 USA Protection: Anti brute-force: lockout missing on API 12/09/2013 5 x
  570. 3569 12/6/2013 The Netherlands Webserver: X-Frame-Options: deny header missing 12/11/2013 5 x
  571. 3570 12/6/2013 Norway XML External Entity Processing 12/11/2013 5 x
  572. 3571 12/6/2013 USA Vulnerable service: not patched with known vulnerabilities 12/11/2013 5 x
  573. 3572 12/6/2013 The Netherlands Service that should be firewalled 12/07/2013 1 x x
  574. 3573 12/7/2013 The Netherlands Cross Site Scripting (XSS) 12/09/2013 2 x x url=data:text/html;PHNjcmlwdD5hbGVydCgvWFNTLyk8L3NjcmlwdD4=
  575. 3574 12/7/2013 The Netherlands Information disclosure: readable configs 12/11/2013 4 x
  576. 3575 12/7/2013 The Netherlands Information disclosure: Sensitive files 12/08/2013 1 x x
  577. 3576 12/7/2013 USA Command Injection (remote) 12/12/2013 5 x CVE-2013-4338 Wordpress WordPress > 3.6.0
  578. 3577 12/7/2013 The Netherlands SQL Injection 12/08/2013 1 x x
  579. 3578 12/13/2013 USA Bad construction: hard-coded credentials 12/14/2013 1 x x
  580. 3579 12/13/2013 The Netherlands Webserver: X-Frame-Options: deny header missing 12/14/2013 1 x x
  581. 3580 12/13/2013 The Netherlands Vulnerable service: no authorization required 12/18/2013 5 x
  582. 3581 12/14/2013 The Netherlands Bad construction: service runs with (too) much privileges 12/18/2013 4 x
  583. 3582 12/14/2013 The Netherlands Service that should be firewalled 12/15/2013 1 x x www.[redacted].eu
  584. 3583 12/14/2013 The Netherlands Vulnerable service: not patched with known vulnerabilities 12/15/2013 1 x x [redacted].nl
  585. 3584 12/20/2013 The Netherlands Service that should be firewalled 12/25/2013 5 x
  586. 3585 12/20/2013 USA Bad construction: unrestricted upload of dangerous files 12/24/2013 4 x
  587. 3586 12/20/2013 The Netherlands Remote File Inclusion 12/21/2013 1 x x
  588. 3587 12/20/2013 USA Protection: Anti brute-force: lockout missing 12/25/2013 5 x
  589. 3588 12/20/2013 The Netherlands Information disclosure: Open webdirectory 12/21/2013 1 x x
  590. 3589 12/20/2013 USA Bad construction: hard-coded credentials 12/21/2013 1 x x
  591. 3590 12/21/2013 The Netherlands Service that should be firewalled 12/22/2013 1 x x SIP/SN\NP service.[redacted].nl
  592. 3591 12/21/2013 USA Vulnerable service: mis-configured 12/26/2013 5 x
  593. 3592 12/21/2013 USA Vulnerable service: default setting(s) / default credentials 12/26/2013 5 x
  594. 3593 12/21/2013 USA Vulnerable CMS 12/24/2013 3 x CVE-2013-4338 Wordpress WordPress > 3.6.0
  595. 3594 12/21/2013 The Netherlands Information disclosure: Mis-configured service 12/25/2013 4 x
  596. 3595 12/27/2013 The Netherlands Webserver: HTTP Strict-Transport-Security (HSTS) header missing 12/30/2013 3 x
  597. 3596 12/27/2013 USA Bad construction: Path traversal 12/29/2013 2 x x
  598. 3597 12/28/2013 Belgium Cross-Site Request Forgery (CSRF) 01/01/2014 4 x CVE-2013-6443 - CF 3.0 > 5.2.1.6 exploitable via [redacted].belgium.be
  599. 3598 12/28/2013 The Netherlands Vulnerable service: not patched with known vulnerabilities 12/30/2013 2 x x [redacted].nl
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!