Split Viewstate in Use

Home/Alerts/Alert detail/

Risk:
Informational

Type:
Passive

CWE:
CWE-642

Summary: This website uses ASP.NET’s Viewstate and its value is split into several chunks.

Solution: None - the guys running the server may have tuned the configuration as this isn't the default setting.

Latest Security News

Canada Orders TikTok to Shut Down Canadian Operations Over Security Concerns

Hackers increasingly use Winos4.0 post-exploitation kit in attacks

Microsoft Notepad to get AI-powered rewriting tool on Windows 11

Cisco bug lets hackers run commands as root on UWRB access points

New SteelFox malware hijacks Windows PCs using vulnerable driver

VEILDrive Attack Exploits Microsoft Services to Evade Detection and Distribute Malware

Washington courts' systems offline following weekend cyberattack

Germany drafts law to protect researchers who find security flaws

Top Alert List

InformationalInformation Disclosure - Suspicious Comments

MediumAbsence of Anti-CSRF Tokens

LowCookie without SameSite Attribute

Cross-Domain Misconfiguration

MediumMissing Anti-clickjacking Header

MediumDirectory Browsing

LowCross-Domain JavaScript Source File Inclusion

LowInformation Disclosure - Debug Error Messages

Content Security Policy (CSP) Header Not Set

MediumCSP: Wildcard Directive

Latest CVE List

CVE-2024-8957 PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability

CVE-2024-8956 PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability

CVE-2024-20481 Cisco ASA and FTD Denial-of-Service Vulnerability

CVE-2024-37383 RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability

CVE-2024-47575 Fortinet FortiManager Missing Authentication Vulnerability

CVE-2024-38094 Microsoft SharePoint Deserialization Vulnerability

CVE-2024-9537 ScienceLogic SL1 Unspecified Vulnerability

CVE-2024-40711 Veeam Backup and Replication Deserialization Vulnerability

CVE-2024-30088 Microsoft Windows Kernel TOCTOU Race Condition Vulnerability

CVE-2024-9680 Mozilla Firefox Use-After-Free Vulnerability

Common CWEs

CWE-350 Reliance on Reverse DNS Resolution for a Security-Critical Action

CWE-231 Improper Handling of Extra Values

HighCWE-649 Reliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking

HighCWE-121 Stack-based Buffer Overflow

HighCWE-327 Use of a Broken or Risky Cryptographic Algorithm

CWE-842 Placement of User into Incorrect Group

CWE-616 Incomplete Identification of Uploaded File Variables (PHP)

CWE-1187 DEPRECATED: Use of Uninitialized Resource

CWE-1090 Method Containing Access of a Member Element from Another Class

CWE-1052 Excessive Use of Hard-Coded Literals in Initialization

Free security scan for your website

Don't show website scan report rating on the leaderboard