Top des 100 failles les plus recensées : Nombre Nom du test Place 294 HTTP TRACE / TRACK Methods 1 178 Identd scan 2 139 DNS Cache Snooping 3 138 Version of BIND 4 135 Usable remote name server 5 129 RPC Services Enumeration 6 114 SSL Certificate 7 97 Deprecated SSL Protocol Usage 8 94 Default community names of the SNMP Agent 9 91 Obtain system info type via SNMP 10 71 Service Identification 2nd pass 11 71 Apache Remote Username Enumeration Vulnerability 12 71 SMB log in 13 63 Robots.txt Information Disclosure 14 62 Windows Terminal Services Enabled 15 57 Get the IMAP Banner 16 53 VNC security types 17 45 Local Checks Failed 18 42 HyperText Transfer Protocol Information 19 42 Microsoft Windows Remote Desktop Protocol Server Private Key Disclosure Vulnerability 20 26 Identifies services like FTP, SMTP, NNTP... 21 26 SSH protocol version 1 enabled 22 24 DNS Server on UDP and TCP 23 24 Telnet 24 23 SSL Certificate Expiry 25 23 Determine if Bind 9 is running 26 22 HTTP TRACE 27 20 Mailman private.py Directory Traversal Vulnerability 28 17 Mailman Password Retrieval 29 17 Check for VNC HTTP 30 16 Obtains the password policy 31 15 Apache Connection Blocking Denial of Service 32 15 Apache < 1.3.29 33 13 Squid Multiple Flaws 34 13 MS Task Scheduler vulnerability 35 13 Private IP address Leaked using the PROPFIND method 36 12 ProFTPD < 1.3.0rc2 Multiple Vulnerabilities 37 12 Horde Parent Page Title Cross-Site Scripting Vulnerability 38 12 proftpd < 1.2.11 remote user enumeration 39 11 PHP Image File Format Denial Of Service Vulnerabilities 40 11 php4/5 Vulnerabilities 41 11 php PHP_Variables Memory Disclosure 42 11 Installed Windows Hotfixes 43 10 Horde common-footer.inc Cross-Site Scripting Vulnerability 44 10 Apache mod_proxy content-length buffer overflow 45 10 QPopper Username Information Disclosure 46 10 Web Server Generic Cross-Site Scripting Vulnerability 47 9 Obtain installed software via SNMP 48 9 IMP common-footer.inc Cross-Site Scripting Vulnerability 49 9 Horde Help Subsystem XSS 50 9 IMP HTML MIME Viewer XSS Vulnerabilities 51 9 OpenSSL denial of service 52 9 Apache < 1.3.28 53 9 PHP Mail Function Header Spoofing Vulnerability 54 9 /doc directory browsable ?? 55 8 phpSysInfo < 2.4.1 Multiple Vulnerabilities 56 8 Identify unknown services with GET 57 8 Enable local security checks 58 8 Apache < 1.3.27 59 7 Web Server Uses Plain Text Authentication Forms 60 7 Mail relaying thorough test 61 6 Vulnerability in SMB Could Allow Remote Code Execution 896422 - Network Check 62 6 Detect Apache HTTPS 63 6 IMP HTML TIME XSS Vulnerability 64 6 mod_ssl hook functions format string vulnerability 65 6 IMP Content-Type XSS Vulnerability 66 6 mod_ssl SSL_Util_UUEncode_Binary Overflow 67 6 TCP sequence number approximation 68 6 Apache2 double slash dir index 69 6 IIS Service Pack - 404 70 6 IMP_MIME_Viewer_html class XSS vulnerabilities 71 6 Portable OpenSSH PAM timing attack 72 6 Proxy accepts gopher:// requests 73 6 Apache chunked encoding 74 6 Open Web Proxy Server 75 6 Microsoft Frontpage exploits 76 5 SMB NULL session 77 5 Outlook Web Access URL Injection 78 5 UDP packets with source port of 53 bypass firewall rules 79 5 NB1300 router default FTP account 80 5 OpenSSL password interception 81 5 MacOS X Finder reveals contents of Apache Web directories 82 5 IIS .IDA ISAPI filter applied 83 5 Microsoft SQL TCP/IP listener is running 84 5 FTP bounce check 85 4 Apache < 2.2.8 Multiple Vulnerabilities 86 4 PHP < 5.2.5 Multiple Vulnerabilities 87 4 Vulnerability in Web Client Service Could Allow Remote Code Execution 911927 - network check 88 4 Vulnerability in Plug and Play Service Could Allow Remote Code Execution 899588 - Network Check 89 4 Vulnerability in Printer Spooler Service Could Allow Remote Code Execution 896423 - Network Check 90 4 MySQL multiple flaws 4 91 4 Apache < 2.0.51 92 4 Buffer Overrun in Messenger Service real test 93 4 HP-UX FTPD REST Command Memory Disclosure Vulnerability 94 4 Oracle 9iAS access to SOAP documentation 95 4 MS FTPd DoS 96 4 Local users information : Never changed password 97 4 Users in the Admin group 98 4 ntpd overflow 99 3 SMB registry can not be accessed by the scanner 100

Ce site vous a plu ? Par avance, merci de bien vouloir nous adresser un don (transaction securisee par compte Paypal ou par carte de credit) si vous le desirez afin de preserver le caractere independant de nos recherches en cliquant sur le bouton suivant :