Quick Summary TFTP Service Enabled on Internal Network is a network service misconfiguration where the Trivial File Transfer Protocol (TFTP) service is running and accessible within the internal network. TFTP does not provide authentication or encryption, which may allow unauthorized…
Quick Summary VNC Service Exposed Without Authentication is a critical misconfiguration where the Virtual Network Computing (VNC) remote desktop service is accessible without requiring proper authentication. This may allow unauthorized users to gain graphical remote access to the target system,…
Quick Summary Microsoft SQL Server Exposed to Internet is a critical misconfiguration where the MSSQL database service is directly accessible from the public internet. This significantly increases the risk of brute-force attacks, credential compromise, unauthorized data access, ransomware deployment, and…
Quick Summary PostgreSQL Service Listening on All Interfaces is a security misconfiguration where the PostgreSQL database server is configured to listen on all network interfaces (0.0.0.0) instead of restricting access to localhost or trusted internal IP addresses. This increases exposure…
Quick Summary MySQL Database Accessible from Public Network is a critical misconfiguration where the MySQL database service is exposed to the internet or untrusted networks. Public exposure of MySQL significantly increases the risk of brute-force attacks, unauthorized data access, data…
