PCI Scan Vulnerability Report 漏洞修复

博主研究各种漏洞修复，各种修复漏洞技巧和方法希望和大家共同探讨和学习。欢迎留言！一起共同学习进步！难解决的漏洞可以留言或私信。

Sysnet Scanning Management System March 08, 2024

HTTP Security Header Not Detected   port 443 / tcp

SHA1 deprecated setting for SSH  port 22 / tcp

Content-Security-Policy HTTP Security Header Not Detected  port 443 / tcp

SSL Certificate - Signature Verification Failed Vulnerability port 443 / tcp over ssl

SSL Certificate - Invalid Maximum Validity Date Detected port 443 / tcp over ssl

X.509 Certificate MD5 Signature Collision Vulnerability port 443 / tcp over ssl

SSL Certificate - Self-Signed Certificate port 443 / tcp over ssl

SSL Certificate - Subject Common Name Does Not Match Server FQDN

port 443 / tcp over ssl

SSH Prefix Truncation Vulnerability (Terrapin) port 22 / tcp

Deprecated SSH Cryptographic Settings port 22 / tcp

WordPress REST API User Enumeration Vulnerability port 443 / tcp

SSL Certificate - Improper Usage Vulnerability port 21 / tcp over ssl

SSL Certificate - Self-Signed Certificate port 21 / tcp over ssl

SSL Certificate - Invalid Maximum Validity Date Detected port 000 / tcp over ssl

SSL Certificate - Signature Verification Failed Vulnerability port 000/ tcp over ssl

HTTP Security Header Not Detected port 80 / tcp

SSL Certificate - Invalid Maximum Validity Date Detected port 21 / tcp over ssl

SSL Certificate - Signature Verification Failed Vulnerability port 21 / tcp over ssl

WordPress XML-RPC Pingback Abuse port 443 / tcp

Secure Sockets Layer/Transport Layer Security (SSL/TLS) Server Supports Transport Layer Security (TLSv1.1) port 443 / tcp over ssl

AutoComplete Attribute Not Disabled for Password in Form Based Authentication port 443 / tcp

Sensitive form field has not disabled autocomplete port 443 / tcp

SHA1 deprecated setting for SSH port 22 / tcp

OpenSSH Command Injection Vulnerability

OpenSSH Authentication Bypass Vulnerability

OpenSSH OS Command Injection Vulnerability

OpenSSH Man-in-the-Middle (MITM) Attack Vulnerability

OpenSSH Remote Code Execution (RCE) Vulnerability in its forwarded ssh-agent

OpenSSH Probable User Enumeration Vulnerability

OpenSSH Improper Authorization Vulnerability (CVE-2017-15906）

OpenSSH Public-Key Authentication Vulnerability

DEFLATE Data Compression Algorithm Used for HTTPS

Content-Security-Policy HTTP Security Header Not Detected port 80 / tcp

Content-Security-Policy HTTP Security Header Not Detected port 443 / tcp

Remote Access or Management Service Detected

Host Uptime Based on TCP TimeStamp Option

Secure Sockets Layer/Transport Layer Security (SSL/TLS) Protocol Properties port 21 / tcp over ssl

List of Web Directories port 443 / tcp

SSL Certificate - Information port 21 / tcp over ssl

Links Rejected By Crawl Scope or Exclusion List CERT Web port 80 / tcp

漏洞列表