ZAP Scan Baseline Report

github-actions[bot] commented 1 week ago

Site: https://www.zerobounce.net New Alerts
- Application Error Disclosure [90022] total: 1:
  - https://www.zerobounce.net/docs/api-dashboard/api-error-codes/
- CSP: Wildcard Directive [10055] total: 2:
  - https://www.zerobounce.net
  - https://www.zerobounce.net/
- CSP: script-src unsafe-eval [10055] total: 2:
  - https://www.zerobounce.net
  - https://www.zerobounce.net/
- CSP: script-src unsafe-inline [10055] total: 2:
  - https://www.zerobounce.net
  - https://www.zerobounce.net/
- CSP: style-src unsafe-inline [10055] total: 2:
  - https://www.zerobounce.net
  - https://www.zerobounce.net/
- Content Security Policy (CSP) Header Not Set [10038] total: 12:
  - https://www.zerobounce.net/blog/
  - https://www.zerobounce.net/blog/category/newsroom
  - https://www.zerobounce.net/cdn-cgi/image/fit=scale-down,format=auto,quality=90,width=160,metadata=none/static/hubspot-forms-logo.png
  - https://www.zerobounce.net/cdn-cgi/image/fit=scale-down,format=auto,quality=90,width=160,metadata=none/static/ios_logo.png
  - https://www.zerobounce.net/component---/
  - ..
- Cross-Domain Misconfiguration [10098] total: 2:
  - https://www.zerobounce.net/blog/
  - https://www.zerobounce.net/blog/category/newsroom
- Source Code Disclosure - ActiveVFP [10099] total: 1:
  - https://www.zerobounce.net/blog/
- Source Code Disclosure - SQL [10099] total: 10:
  - https://www.zerobounce.net/docs/about-zerobounce/data-processing-agreement/
  - https://www.zerobounce.net/docs/api-integrations/aweber/
  - https://www.zerobounce.net/docs/api-integrations/constant-contact/
  - https://www.zerobounce.net/docs/api-integrations/hubspot/
  - https://www.zerobounce.net/docs/api-integrations/mailchimp/
  - ..
- CSP: Notices [10055] total: 2:
  - https://www.zerobounce.net
  - https://www.zerobounce.net/
- Cookie with SameSite Attribute None [10054] total: 4:
  - https://www.zerobounce.net
  - https://www.zerobounce.net/members/signin
  - https://www.zerobounce.net/robots.txt
  - https://www.zerobounce.net/sitemap.xml
- Information Disclosure - Debug Error Messages [10023] total: 1:
  - https://www.zerobounce.net/docs/api-dashboard/api-error-codes/
- Permissions Policy Header Not Set [10063] total: 8:
  - https://www.zerobounce.net/blog/
  - https://www.zerobounce.net/blog/category/newsroom
  - https://www.zerobounce.net/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
  - https://www.zerobounce.net/component---/
  - https://www.zerobounce.net/members/forgot-password/
  - ..
- Private IP Disclosure [2] total: 1:
  - https://www.zerobounce.net/api/email-validation-api/
- Timestamp Disclosure - Unix [10096] total: 5:
  - https://www.zerobounce.net
  - https://www.zerobounce.net/cdn-cgi/image/fit=scale-down,format=auto,quality=90,width=160,metadata=none/static/hubspot-forms-logo.png
  - https://www.zerobounce.net/members/signin/register
  - https://www.zerobounce.net/robots.txt
  - https://www.zerobounce.net/sitemap.xml
- Information Disclosure - Sensitive Information in URL [10024] total: 7:
  - https://www.zerobounce.net/?email-validator=foo-bar%40example.com&file=test_file.txt&full-name=ZAP
  - https://www.zerobounce.net/blog/?email=zaproxy%40example.com&hidden=1
  - https://www.zerobounce.net/email-list-evaluator/?email-validator=foo-bar%40example.com&file=test_file.txt&full-name=ZAP
  - https://www.zerobounce.net/es/?email-validator=foo-bar%40example.com&file=test_file.txt&full-name=ZAP
  - https://www.zerobounce.net/es/free-email-verifier/?email-validator=foo-bar%40example.com&file=test_file.txt&full-name=ZAP
  - ..
- Information Disclosure - Suspicious Comments [10027] total: 11:
  - https://www.zerobounce.net
  - https://www.zerobounce.net/
  - https://www.zerobounce.net/component---/
  - https://www.zerobounce.net/es/
  - https://www.zerobounce.net/free-email-verifier/
  - ..
- Loosely Scoped Cookie [90033] total: 4:
  - https://www.zerobounce.net
  - https://www.zerobounce.net
  - https://www.zerobounce.net/robots.txt
  - https://www.zerobounce.net/sitemap.xml
- Modern Web Application [10109] total: 11:
  - https://www.zerobounce.net
  - https://www.zerobounce.net/
  - https://www.zerobounce.net/component---/
  - https://www.zerobounce.net/email-validation-pricing/
  - https://www.zerobounce.net/es/
  - ..
- Non-Storable Content [10049] total: 1:
  - https://www.zerobounce.net/members/signin/register
- Re-examine Cache-control Directives [10015] total: 11:
  - https://www.zerobounce.net
  - https://www.zerobounce.net/
  - https://www.zerobounce.net/email-validation-pricing/
  - https://www.zerobounce.net/es/
  - https://www.zerobounce.net/free-email-verifier/
  - ..
- Retrieved from Cache [10050] total: 11:
  - https://www.zerobounce.net
  - https://www.zerobounce.net/
  - https://www.zerobounce.net/email-validation-pricing/
  - https://www.zerobounce.net/es/
  - https://www.zerobounce.net/free-email-verifier/
  - ..
- Session Management Response Identified [10112] total: 5:
  - https://www.zerobounce.net
  - https://www.zerobounce.net
  - https://www.zerobounce.net/members/signin
  - https://www.zerobounce.net/robots.txt
  - https://www.zerobounce.net/sitemap.xml
- Storable and Cacheable Content [10049] total: 10:
  - https://www.zerobounce.net
  - https://www.zerobounce.net/
  - https://www.zerobounce.net/case-studies/barcups
  - https://www.zerobounce.net/case-studies/belkins
  - https://www.zerobounce.net/case-studies/mediashares
  - ..

View the following link to download the report. RunnerID:11794190701

github-actions[bot] commented 1 week ago

Site: https://www.zerobounce.net New Alerts
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 1:
  - https://www.zerobounce.net/email-open-rate-calculator/?bounced=1&sent=1

View the following link to download the report. RunnerID:11794524471

github-actions[bot] commented 1 week ago

Site: https://www.zerobounce.net Resolved Alerts
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 1:

View the following link to download the report. RunnerID:11799778504

github-actions[bot] commented 1 week ago

Site: https://www.zerobounce.net New Alerts
- Sub Resource Integrity Attribute Missing [90003] total: 2:
  - https://www.zerobounce.net/blog/email-resources/email-marketing/email-spam-trigger-words
  - https://www.zerobounce.net/blog/newsroom/the-latest/india-digital-personal-data-protection-act-zerobounce
- Cookie No HttpOnly Flag [10010] total: 5:
- Cookie Without Secure Flag [10011] total: 5:
- Cross-Domain JavaScript Source File Inclusion [10017] total: 2:
  - https://www.zerobounce.net/blog/email-resources/email-marketing/email-spam-trigger-words
  - https://www.zerobounce.net/blog/newsroom/the-latest/india-digital-personal-data-protection-act-zerobounce
- Dangerous JS Functions [10110] total: 1:
  - https://www.zerobounce.net/members/main.78b9731c9807b8dc.js
- Charset Mismatch [90011] total: 1:
  - https://www.zerobounce.net/blog/wp-json/oembed/1.0/embed?format=xml&url=https%3A%2F%2Fwww.zerobounce.net%2Fblog%2F
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 2:
  - https://www.zerobounce.net/email-bounce-rate-calculator/?bounced=1&sent=1
  - https://www.zerobounce.net/spam-complaint-rate-calculator/?bounced=1&sent=1

View the following link to download the report. RunnerID:11823585326

github-actions[bot] commented 1 week ago

Site: https://www.zerobounce.net Resolved Alerts
- Sub Resource Integrity Attribute Missing [90003] total: 2:
- Cross-Domain JavaScript Source File Inclusion [10017] total: 2:
- Charset Mismatch [90011] total: 1:
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 2:

View the following link to download the report. RunnerID:11829536309

github-actions[bot] commented 1 week ago

Site: https://www.zerobounce.net Resolved Alerts
- Cookie No HttpOnly Flag [10010] total: 7:
- Cookie Without Secure Flag [10011] total: 7:
- Dangerous JS Functions [10110] total: 1:

View the following link to download the report. RunnerID:11831531857

github-actions[bot] commented 1 week ago

Site: https://www.zerobounce.net New Alerts
- Cookie No HttpOnly Flag [10010] total: 2:
  - https://www.zerobounce.net/blog/email-resources/email-verification/crmdialer-zerobounce-email-validation
  - https://www.zerobounce.net/blog/email-resources/email-verification/difference-between-hard-bounces-vs-soft-bounces-email?email=zaproxyexample.com&hidden=1
- Cookie Without Secure Flag [10011] total: 2:
  - https://www.zerobounce.net/blog/email-resources/email-verification/crmdialer-zerobounce-email-validation
  - https://www.zerobounce.net/blog/email-resources/email-verification/difference-between-hard-bounces-vs-soft-bounces-email?email=zaproxyexample.com&hidden=1
- Dangerous JS Functions [10110] total: 1:
  - https://www.zerobounce.net/members/main.f738ddaa0d9e8981.js
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 2:
  - https://www.zerobounce.net/blog/email-resources/email-verification/difference-between-hard-bounces-vs-soft-bounces-email?email=zaproxyexample.com&hidden=1
  - https://www.zerobounce.net/email-verification-calculator/?bounced=1&sent=1

View the following link to download the report. RunnerID:11839670686

github-actions[bot] commented 1 week ago

Site: https://www.zerobounce.net Resolved Alerts
- Cookie No HttpOnly Flag [10010] total: 2:
- Cookie Without Secure Flag [10011] total: 2:
- Dangerous JS Functions [10110] total: 1:
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 2:

View the following link to download the report. RunnerID:11843379766

github-actions[bot] commented 1 week ago

Site: https://www.zerobounce.net New Alerts
- Charset Mismatch [90011] total: 1:
  - https://www.zerobounce.net/blog/wp-json/oembed/1.0/embed?format=xml&url=https%3A%2F%2Fwww.zerobounce.net%2Fblog%2F

View the following link to download the report. RunnerID:11853829726

github-actions[bot] commented 6 days ago

Site: https://www.zerobounce.net Resolved Alerts
- Charset Mismatch [90011] total: 1:

View the following link to download the report. RunnerID:11861603099

github-actions[bot] commented 5 days ago

Site: https://stats-trafficcop-prod.nba.com New Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 3:
- Permissions Policy Header Not Set [10063] total: 3:
- Timestamp Disclosure - Unix [10096] total: 3:
- Storable and Cacheable Content [10049] total: 3:

View the following link to download the report. RunnerID:11876884310

Rubics213 / cuben

ZAP Scan Baseline Report #16