ZAP Scan Baseline Report

github-actions[bot] commented 3 years ago

Site: https://marllus.com New Alerts
- Reverse Tabnabbing [10108] total: 11:
- Incomplete or No Cache-control and Pragma HTTP Header Set [10015] total: 11:
- Information Disclosure - Suspicious Comments [10027] total: 12:
- Cross-Domain JavaScript Source File Inclusion [10017] total: 14:
- Timestamp Disclosure - Unix [10096] total: 11:
- Cross-Domain Misconfiguration [10098] total: 11:
- Retrieved from Cache [10050] total: 11:
- Modern Web Application [10109] total: 11:
- Strict-Transport-Security Header Not Set [10035] total: 3:
- CSP: Notices [10055] total: 5:
- Absence of Anti-CSRF Tokens [10202] total: 11:
- Secure Pages Include Mixed Content [10040] total: 1:
  - https://marllus.com/tecnologia/2016/02/17/resizing-vdisks-vdis-xenserver-6-5.html
- CSP: Wildcard Directive [10055] total: 5:
- Vulnerable JS Library [10003] total: 1:
  - https://marllus.com/assets/js/jquery.min.js
- Content Security Policy (CSP) Header Not Set [10038] total: 1:
  - https://marllus.com/cdn-cgi/l/email-protection

View the following link to download the report. RunnerID:655607962

github-actions[bot] commented 3 years ago

Site: http://www.ufc.br New Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 11:
- Modern Web Application [10109] total: 11:
- X-Content-Type-Options Header Missing [10021] total: 11:
- Timestamp Disclosure - Unix [10096] total: 11:
- Absence of Anti-CSRF Tokens [10202] total: 11:
- Information Disclosure - Suspicious Comments [10027] total: 12:
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 12:
- Reverse Tabnabbing [10108] total: 4:
- HTTP to HTTPS Insecure Transition in Form Post [10041] total: 2:
  - http://www.ufc.br/biblioteca/biblioteca-universitaria
  - http://www.ufc.br/biblioteca/biblioteca-universitaria
- Cookie Without SameSite Attribute [10054] total: 3:
- X-Frame-Options Header Not Set [10020] total: 11:
- Hash Disclosure - Mac OSX salted SHA-1 [10097] total: 1:
  - http://www.ufc.br/images/_files/noticias/2021/210309_livro_programa_eu2020.pdf
- Application Error Disclosure [90022] total: 2:
  - http://www.ufc.br/index.php?option=com_users&view=reset
  - http://www.ufc.br/index.php?option=com_users&view=remind
- Vulnerable JS Library [10003] total: 1:
  - http://www.ufc.br/media/jui/js/jquery.min.js?f282902d8cc279cb3da5d93ab5b8a365

View the following link to download the report. RunnerID:655652419

github-actions[bot] commented 3 years ago

Site: https://marllus.com New Alerts
- Reverse Tabnabbing [10108] total: 11:
- Incomplete or No Cache-control and Pragma HTTP Header Set [10015] total: 11:
- Information Disclosure - Suspicious Comments [10027] total: 12:
- Retrieved from Cache [10050] total: 12:
- Timestamp Disclosure - Unix [10096] total: 11:
- Cross-Domain JavaScript Source File Inclusion [10017] total: 14:
- Cross-Domain Misconfiguration [10098] total: 11:
- Modern Web Application [10109] total: 11:
- Strict-Transport-Security Header Not Set [10035] total: 3:
- CSP: Notices [10055] total: 5:
- Absence of Anti-CSRF Tokens [10202] total: 11:
- Secure Pages Include Mixed Content [10040] total: 1:
  - https://marllus.com/tecnologia/2016/02/17/resizing-vdisks-vdis-xenserver-6-5.html
- CSP: Wildcard Directive [10055] total: 5:
- Vulnerable JS Library [10003] total: 1:
  - https://marllus.com/assets/js/jquery.min.js
- Content Security Policy (CSP) Header Not Set [10038] total: 1:
  - https://marllus.com/cdn-cgi/l/email-protection

View the following link to download the report. RunnerID:655680245

github-actions[bot] commented 3 years ago

Site: https://marllus.com Resolved Alerts
- Secure Pages Include Mixed Content [10040] total: 1:
- Vulnerable JS Library [10003] total: 1:

View the following link to download the report. RunnerID:848001456

github-actions[bot] commented 3 years ago

Site: https://marllus.com New Alerts
- Secure Pages Include Mixed Content [10040] total: 1:
  - https://marllus.com/tecnologia/2016/02/17/resizing-vdisks-vdis-xenserver-6-5.html
- Vulnerable JS Library [10003] total: 1:
  - https://marllus.com/assets/js/jquery.min.js

View the following link to download the report. RunnerID:851412104

github-actions[bot] commented 3 years ago

Site: https://marllus.com New Alerts
- PII Disclosure [10062] total: 2:
  - https://marllus.com/page9/sobre
  - https://marllus.com/page4/sobre

View the following link to download the report. RunnerID:886690974

github-actions[bot] commented 3 years ago

Site: https://marllus.com Resolved Alerts
- PII Disclosure [10062] total: 2:

View the following link to download the report. RunnerID:886697238

github-actions[bot] commented 3 years ago

Site: https://marllus.com New Alerts
- PII Disclosure [10062] total: 1:
  - https://marllus.com/page4/sobre

View the following link to download the report. RunnerID:893905135

github-actions[bot] commented 3 years ago

Site: https://marllus.com Resolved Alerts
- PII Disclosure [10062] total: 1:

View the following link to download the report. RunnerID:894650022

github-actions[bot] commented 3 years ago

Site: https://marllus.com Resolved Alerts
- Cross-Domain Misconfiguration [10098] total: 11:

View the following link to download the report. RunnerID:903880892

github-actions[bot] commented 3 years ago

Site: https://marllus.com New Alerts
- Cross-Domain Misconfiguration [10098] total: 3:

View the following link to download the report. RunnerID:906144151

github-actions[bot] commented 3 years ago

Site: https://marllus.com Resolved Alerts
- Cross-Domain Misconfiguration [10098] total: 3:

View the following link to download the report. RunnerID:919503508

github-actions[bot] commented 3 years ago

Site: https://marllus.com New Alerts
- Cross-Domain Misconfiguration [10098] total: 7:

View the following link to download the report. RunnerID:919546444

github-actions[bot] commented 3 years ago

Site: https://marllus.com Resolved Alerts
- Cross-Domain Misconfiguration [10098] total: 7:

View the following link to download the report. RunnerID:923793647

github-actions[bot] commented 3 years ago

Site: https://marllus.com Resolved Alerts
- Retrieved from Cache [10050] total: 12:

View the following link to download the report. RunnerID:923804756

github-actions[bot] commented 3 years ago

Site: https://marllus.com New Alerts
- Retrieved from Cache [10050] total: 3:

View the following link to download the report. RunnerID:928609108

github-actions[bot] commented 3 years ago

Site: https://marllus.com Resolved Alerts
- Retrieved from Cache [10050] total: 3:

View the following link to download the report. RunnerID:944882460

github-actions[bot] commented 3 years ago

Site: https://marllus.com New Alerts
- Retrieved from Cache [10050] total: 2:
  - https://marllus.com/assets/css/screen.css
  - https://marllus.com/robots.txt

View the following link to download the report. RunnerID:947167320

github-actions[bot] commented 3 years ago

Site: https://marllus.com Resolved Alerts
- Retrieved from Cache [10050] total: 2:

View the following link to download the report. RunnerID:947248176

github-actions[bot] commented 3 years ago

Site: https://marllus.com New Alerts
- Retrieved from Cache [10050] total: 5:

View the following link to download the report. RunnerID:965417802

github-actions[bot] commented 3 years ago

Site: https://marllus.com New Alerts
- PII Disclosure [10062] total: 1:
  - https://marllus.com/tecnologia/2016/02/17/docker-no-xenserver-6-5

View the following link to download the report. RunnerID:1004348031

github-actions[bot] commented 3 years ago

Site: https://marllus.com Resolved Alerts
- PII Disclosure [10062] total: 1:
- Retrieved from Cache [10050] total: 4:

View the following link to download the report. RunnerID:1056035404

github-actions[bot] commented 3 years ago

Site: https://marllus.com New Alerts
- Retrieved from Cache [10050] total: 6:

View the following link to download the report. RunnerID:1072376789

marlluslustosa / myblog

ZAP Scan Baseline Report #17