Email address found in WebSocket message

Home/Alerts/Alert detail/

Risk:
Informational

Type:
WebSocket Passive

CWE:
CWE-200

Summary: An email address was found in a WebSocket Message.

Solution: Remove emails that are not public.

Latest Security News

Cisco Warns of Exploitation of Decade-Old ASA WebVPN Vulnerability

NachoVPN Tool Exploits Flaws in Popular VPN Clients for System Compromise

North Korean Kimsuky Hackers Use Russian Email Addresses for Credential Theft Attacks

Horns&Hooves Campaign Delivers RATs via Fake Emails and JavaScript Payloads

Korea arrests CEO for adding DDoS feature to satellite receivers

Russia sentences Hydra dark web market leader to life in prison

SmokeLoader Malware Resurfaces, Targeting Manufacturing and IT in Taiwan

Mozilla really wants you to set Firefox as default Windows browser

Common Alerts

MediumCSP: style-src unsafe-hashes

MediumSource Code Disclosure - PHP

HighHeartbleed OpenSSL Vulnerability (Indicative)

InformationalSec-Fetch-Mode Header Has an Invalid Value

HighServer Side Template Injection (Blind)

HighProperties File Disclosure - /WEB-INF folder

LowCross-Domain JavaScript Source File Inclusion

HighSource Code Disclosure - CVE-2012-1823

HighSQL Injection - PostgreSQL

InformationalRetrieved from Cache

Top CVE List

CVE-2024-44308 Apple Multiple Products Code Execution Vulnerability

CVE-2017-6736 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

CVE-2009-1151 phpMyAdmin Remote Code Execution Vulnerability

CVE-2015-2360 Microsoft Win32k Privilege Escalation Vulnerability

CVE-2017-3881 Cisco IOS and IOS XE Remote Code Execution Vulnerability

CVE-2021-26086 Atlassian Jira Server and Data Center Path Traversal Vulnerability

CVE-2021-26857 Microsoft Exchange Server Remote Code Execution Vulnerability

CVE-2021-27065 Microsoft Exchange Server Remote Code Execution Vulnerability

CVE-2022-2586 Linux Kernel Use-After-Free Vulnerability

CVE-2023-36884 Microsoft Windows Search Remote Code Execution Vulnerability

Top CWE List

CWE-15 External Control of System or Configuration Setting

HighCWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-1245 Improper Finite State Machines (FSMs) in Hardware Logic

CWE-1395 Dependency on Vulnerable Third-Party Component

HighCWE-200 Exposure of Sensitive Information to an Unauthorized Actor

CWE-614 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute

CWE-1426 Improper Validation of Generative AI Output

MediumCWE-190 Integer Overflow or Wraparound

CWE-236 Improper Handling of Undefined Parameters

CWE-328 Use of Weak Hash

Free security scan for your website

Don't show website scan report rating on the leaderboard