Quick Summary Default Apache Status Page Enabled is a security misconfiguration where the Apache mod_status module is enabled and publicly accessible. This may expose sensitive server information including active connections, internal IP addresses, request details, and server performance metrics, aiding…
Quick Summary Exposed phpMyAdmin Interface is a critical security misconfiguration where the phpMyAdmin web administration panel is publicly accessible without proper access restrictions. This may allow attackers to attempt brute-force login attacks, exploit weak credentials, or gain direct administrative access…
Quick Summary IMAP Service Running Without Encryption is a security misconfiguration where the Internet Message Access Protocol (IMAP) service is accessible without enforcing SSL/TLS encryption. This allows email credentials and message content to be transmitted in cleartext, making them susceptible…
Quick Summary POP3 Service Running Without SSL/TLS is a security misconfiguration where the Post Office Protocol version 3 (POP3) service is enabled without encryption. This allows credentials and email content to be transmitted in cleartext, exposing them to interception through…
Quick Summary Open SMTP Relay Misconfiguration is a critical mail server configuration issue where the Simple Mail Transfer Protocol (SMTP) service allows unauthenticated users to relay emails to external domains. This may allow attackers to abuse the mail server for…
