Notes

Notes - notes.io

hosts: 11
Sorun: 30
infermation olanlar sadece bilgilendirmedir low ise çok düşük zafiyat hig ise yüksek derece açıklar

+---------------+-------------------------------------------------------------+
| Occurrence ID | cb4eae3357e23ad2e2aa69c8292c37d4 |
+===============+=============================================================+
| Title | Possible subdomain leak |
+---------------+-------------------------------------------------------------+
| Found By | DNS Bruteforcer |
+---------------+-------------------------------------------------------------+
| Level | low |
+---------------+-------------------------------------------------------------+
| CVSS Base | 2.2 |
+---------------+-------------------------------------------------------------+
| Location | webmail.ciftlikworld.com |
+---------------+-------------------------------------------------------------+
| Description | A subdomain was discovered which may be an unwanted |
| | information disclosure. |
+---------------+-------------------------------------------------------------+
| Solution | Please visit the reference website for more information on |
| | how to patch this vulnerability. |
+---------------+-------------------------------------------------------------+
| Taxonomy | CWE-200 |
+---------------+-------------------------------------------------------------+
| References | https://cwe.mitre.org/data/definitions/200.html |
| | https://www.owasp.org/index.php/Information_Leakage |
+---------------+-------------------------------------------------------------+

+---------------+-------------------------------------------------------------+
| Occurrence ID | 1453ff98bdc7a56dc62e27e7c7659431 |
+===============+=============================================================+
| Title | Possible subdomain leak |
+---------------+-------------------------------------------------------------+
| Found By | DNS Bruteforcer |
+---------------+-------------------------------------------------------------+
| Level | low |
+---------------+-------------------------------------------------------------+
| CVSS Base | 2.2 |
+---------------+-------------------------------------------------------------+
| Location | mx.ciftlikworld.com |
+---------------+-------------------------------------------------------------+
| Description | A subdomain was discovered which may be an unwanted |
| | information disclosure. |
+---------------+-------------------------------------------------------------+
| Solution | Please visit the reference website for more information on |
| | how to patch this vulnerability. |
+---------------+-------------------------------------------------------------+
| Taxonomy | CWE-200 |
+---------------+-------------------------------------------------------------+
| References | https://cwe.mitre.org/data/definitions/200.html |
| | https://www.owasp.org/index.php/Information_Leakage |
+---------------+-------------------------------------------------------------+

-- URL Disclosure (vulnerability/information_disclosure/url_disclosure) --

+---------------+-------------------------------------------------------------+
| Occurrence ID | bfce7387d88b95fb8620d53713334864 |
+===============+=============================================================+
| Title | URL Disclosure |
+---------------+-------------------------------------------------------------+
| Found By | Bruteforce predictables discovery |
+---------------+-------------------------------------------------------------+
| Level | informational |
+---------------+-------------------------------------------------------------+
| CVSS Base | 2.9 |
+---------------+-------------------------------------------------------------+
| Location | http://ciftlikworld.com/admin.php |
+---------------+-------------------------------------------------------------+
| Description | These are URLs that are accessible but not linked from the |
| | web site itself. It may indicate a poor attempt at |
| | concealing information. For example: - Backup files: |
| | http://www.example.com/ **index.php.old** - Alternative |
| | file names: http://www.example.com/ **index4.php** - |
| | Remnants of deployment: http://www.example.com/ |
| | **build.xml** - Poorly configured servers: |
| | http://www.example.com/ **error_log** - Forgotten server |
| | files: http://www.example.com/ **server-status** |
+---------------+-------------------------------------------------------------+
| Solution | Remove any sensitive information that may have been left |
| | behind. If it's not possible to remove it, block access to |
| | it from the HTTP server. |
+---------------+-------------------------------------------------------------+
| Taxonomy | CWE-200 |
+---------------+-------------------------------------------------------------+
| References | https://cwe.mitre.org/data/definitions/200.html |
| | https://www.owasp.org/index.php/Information_Leakage |
+---------------+-------------------------------------------------------------+

+---------------+-------------------------------------------------------------+
| Occurrence ID | fdc5d03851691760957a1dbfedb23335 |
+===============+=============================================================+
| Title | URL Disclosure |
+---------------+-------------------------------------------------------------+
| Found By | Bruteforce predictables discovery |
+---------------+-------------------------------------------------------------+
| Level | informational |
+---------------+-------------------------------------------------------------+
| CVSS Base | 2.9 |
+---------------+-------------------------------------------------------------+
| Location | https://ciftlikworld.com/admin.php |
+---------------+-------------------------------------------------------------+
| Description | These are URLs that are accessible but not linked from the |
| | web site itself. It may indicate a poor attempt at |
| | concealing information. For example: - Backup files: |
| | http://www.example.com/ **index.php.old** - Alternative |
| | file names: http://www.example.com/ **index4.php** - |
| | Remnants of deployment: http://www.example.com/ |
| | **build.xml** - Poorly configured servers: |
| | http://www.example.com/ **error_log** - Forgotten server |
| | files: http://www.example.com/ **server-status** |
+---------------+-------------------------------------------------------------+
| Solution | Remove any sensitive information that may have been left |
| | behind. If it's not possible to remove it, block access to |
| | it from the HTTP server. |
+---------------+-------------------------------------------------------------+
| Taxonomy | CWE-200 |
+---------------+-------------------------------------------------------------+
| References | https://cwe.mitre.org/data/definitions/200.html |
| | https://www.owasp.org/index.php/Information_Leakage |
+---------------+-------------------------------------------------------------+

-- Vulnerable Web Application (vulnerability/infrastructure/vulnerable_webapp) --

+---------------+-------------------------------------------------------------+
| Occurrence ID | 9a52eab4186aaf2dcad1e78574a5d5b1 |
+===============+=============================================================+
| Title | Vulnerable Web Application |
+---------------+-------------------------------------------------------------+
| Found By | Nikto |
+---------------+-------------------------------------------------------------+
| Level | high |
+---------------+-------------------------------------------------------------+
| CVSS Base | 8.5 |
+---------------+-------------------------------------------------------------+
| Location | http://ciftlikworld.com/server-status |
+---------------+-------------------------------------------------------------+
| Description | This reveals Apache information. Comment out appropriate |
| | line in the Apache conf file or restrict access to allowed |
| | sources. |
+---------------+-------------------------------------------------------------+
| Solution | Apply all missing patches or upgrade to a newer version. |
+---------------+-------------------------------------------------------------+
| Taxonomy | OSVDB-561 |
+---------------+-------------------------------------------------------------+
| References | http://osvdb.org/show/osvdb/561 |
+---------------+-------------------------------------------------------------+

+---------------+-------------------------------------------------------------+
| Occurrence ID | 82efb3f3107a17de626d83189c2a8712 |
+===============+=============================================================+
| Title | Vulnerable Web Application |
+---------------+-------------------------------------------------------------+
| Found By | Nikto |
+---------------+-------------------------------------------------------------+
| Level | high |
+---------------+-------------------------------------------------------------+
| CVSS Base | 8.5 |
+---------------+-------------------------------------------------------------+
| Location | http://ciftlikworld.com/mail/ |
+---------------+-------------------------------------------------------------+
| Description | This might be interesting... |
+---------------+-------------------------------------------------------------+
| Solution | Apply all missing patches or upgrade to a newer version. |
+---------------+-------------------------------------------------------------+
| Taxonomy | OSVDB-3092 |
+---------------+-------------------------------------------------------------+
| References | http://osvdb.org/show/osvdb/3092 |
+---------------+-------------------------------------------------------------+

+---------------+-------------------------------------------------------------+
| Occurrence ID | 6c4950f94533817ec3bd34701f3b5714 |
+===============+=============================================================+
| Title | Vulnerable Web Application |
+---------------+-------------------------------------------------------------+
| Found By | Nikto |
+---------------+-------------------------------------------------------------+
| Level | high |
+---------------+-------------------------------------------------------------+
| CVSS Base | 8.5 |
+---------------+-------------------------------------------------------------+
| Location | http://ciftlikworld.com/admin.php?action=users&en_log_id=0 |
+---------------+-------------------------------------------------------------+
| Description | EasyNews from http://www.webrc.ca version 4.3 allows remote |
| | admin access. This PHP file should be protected. |
+---------------+-------------------------------------------------------------+
| Solution | Apply all missing patches or upgrade to a newer version. |
+---------------+-------------------------------------------------------------+
| Taxonomy | OSVDB-29786 |
+---------------+-------------------------------------------------------------+
| References | http://osvdb.org/show/osvdb/29786 |
| | http://www.webrc.ca |
+---------------+-------------------------------------------------------------+

+---------------+-------------------------------------------------------------+
| Occurrence ID | c87cec7a04aa5c91fc884dbb61ece31a |
+===============+=============================================================+
| Title | Vulnerable Web Application |
+---------------+-------------------------------------------------------------+
| Found By | Nikto |
+---------------+-------------------------------------------------------------+
| Level | high |
+---------------+-------------------------------------------------------------+
| CVSS Base | 8.5 |
+---------------+-------------------------------------------------------------+
| Location | https://ciftlikworld.com/cgi-bin/ |
+---------------+-------------------------------------------------------------+
| Description | Directory indexing found. |
+---------------+-------------------------------------------------------------+
| Solution | Apply all missing patches or upgrade to a newer version. |
+---------------+-------------------------------------------------------------+
| Taxonomy | OSVDB-3268 |
+---------------+-------------------------------------------------------------+
| References | http://osvdb.org/show/osvdb/3268 |
+---------------+-------------------------------------------------------------+

+---------------+-------------------------------------------------------------+
| Occurrence ID | 53ffd5bb5a64c6b0add3dd52353b692e |
+===============+=============================================================+
| Title | Vulnerable Web Application |
+---------------+-------------------------------------------------------------+
| Found By | Nikto |
+---------------+-------------------------------------------------------------+
| Level | high |
+---------------+-------------------------------------------------------------+
| CVSS Base | 8.5 |
+---------------+-------------------------------------------------------------+
| Location | http://ciftlikworld.com/admin.php?action=config&en_log_id=0 |
+---------------+-------------------------------------------------------------+
| Description | EasyNews from http://www.webrc.ca version 4.3 allows remote |
| | admin access. This PHP file should be protected. |
+---------------+-------------------------------------------------------------+
| Solution | Apply all missing patches or upgrade to a newer version. |
+---------------+-------------------------------------------------------------+
| Taxonomy | OSVDB-29786 |
+---------------+-------------------------------------------------------------+
| References | http://osvdb.org/show/osvdb/29786 |
| | http://www.webrc.ca |
+---------------+-------------------------------------------------------------+

+---------------+-------------------------------------------------------------+
| Occurrence ID | 7a790ddf14955afb27a4577bf428c910 |
+===============+=============================================================+
| Title | Vulnerable Web Application |
+---------------+-------------------------------------------------------------+
| Found By | Nikto |
+---------------+-------------------------------------------------------------+
| Level | high |
+---------------+-------------------------------------------------------------+
| CVSS Base | 8.5 |
+---------------+-------------------------------------------------------------+
| Location | http://ciftlikworld.com/cgi-bin/ |
+---------------+-------------------------------------------------------------+
| Description | Directory indexing found. |
+---------------+-------------------------------------------------------------+
| Solution | Apply all missing patches or upgrade to a newer version. |
+---------------+-------------------------------------------------------------+
| Taxonomy | OSVDB-3268 |
+---------------+-------------------------------------------------------------+
| References | http://osvdb.org/show/osvdb/3268 |
+---------------+-------------------------------------------------------------+

+---------------+-------------------------------------------------------------+
| Occurrence ID | aa79a541071a1dc298e7dc2477023a7d |
+===============+=============================================================+
| Title | Vulnerable Web Application |
+---------------+-------------------------------------------------------------+
| Found By | Nikto |
+---------------+-------------------------------------------------------------+
| Level | high |
+---------------+-------------------------------------------------------------+
| CVSS Base | 8.5 |
+---------------+-------------------------------------------------------------+
| Location | http://ciftlikworld.com/mail/ |
+---------------+-------------------------------------------------------------+
| Description | Directory indexing found. |
+---------------+-------------------------------------------------------------+
| Solution | Apply all missing patches or upgrade to a newer version. |
+---------------+-------------------------------------------------------------+
| Taxonomy | OSVDB-3268 |
+---------------+-------------------------------------------------------------+
| References | http://osvdb.org/show/osvdb/3268 |
+---------------+-------------------------------------------------------------+

+---------------+-------------------------------------------------------------+
| Occurrence ID | 83574f71b5f3d76c8e07a1f8fa185d0d |
+===============+=============================================================+
| Title | Vulnerable Web Application |
+---------------+-------------------------------------------------------------+
| Found By | Nikto |
+---------------+-------------------------------------------------------------+
| Level | high |
+---------------+-------------------------------------------------------------+
| CVSS Base | 8.5 |
+---------------+-------------------------------------------------------------+
| Location | http://ciftlikworld.com/admin.php |
+---------------+-------------------------------------------------------------+
| Description | This might be interesting... |
+---------------+-------------------------------------------------------------+
| Solution | Apply all missing patches or upgrade to a newer version. |
+---------------+-------------------------------------------------------------+
| Taxonomy | OSVDB-3092 |
+---------------+-------------------------------------------------------------+
| References | http://osvdb.org/show/osvdb/3092 |
+---------------+-------------------------------------------------------------+

-- Uncategorized Vulnerability (vulnerability/generic) --

+---------------+-------------------------------------------------------------+
| Occurrence ID | 8a7f775395845323d08bbfc4efa9c7e6 |
+===============+=============================================================+
| Title | User attention required by: Nikto |
+---------------+-------------------------------------------------------------+
| Found By | Nikto |
+---------------+-------------------------------------------------------------+
| Level | informational |
+---------------+-------------------------------------------------------------+
| CVSS Base | 0.0 |
+---------------+-------------------------------------------------------------+
| Location | http://ciftlikworld.com/ |
+---------------+-------------------------------------------------------------+
| Description | IP address found in the 'YoncuKoruma' cookie. The IP is |
| | 85.106.102.203"." |
+---------------+-------------------------------------------------------------+
| Solution | No additional details are available. |
+---------------+-------------------------------------------------------------+

+---------------+-------------------------------------------------------------+
| Occurrence ID | a442b086a2c61cad505ac9cf344d3937 |
+===============+=============================================================+
| Title | User attention required by: Nikto |
+---------------+-------------------------------------------------------------+
| Found By | Nikto |
+---------------+-------------------------------------------------------------+
| Level | informational |
+---------------+-------------------------------------------------------------+
| CVSS Base | 0.0 |
+---------------+-------------------------------------------------------------+
| Location | http://ciftlikworld.com/ |
+---------------+-------------------------------------------------------------+
| Description | Cookie YoncuKoruma created without the httponly flag |
+---------------+-------------------------------------------------------------+
| Solution | No additional details are available. |
+---------------+-------------------------------------------------------------+

+---------------+-------------------------------------------------------------+
| Occurrence ID | 3345630d4b043298a15a5d0900672086 |
+===============+=============================================================+
| Title | User attention required by: Nikto |
+---------------+-------------------------------------------------------------+
| Found By | Nikto |
+---------------+-------------------------------------------------------------+
| Level | informational |
+---------------+-------------------------------------------------------------+
| CVSS Base | 0.0 |
+---------------+-------------------------------------------------------------+
| Location | https://ciftlikworld.com/ |
+---------------+-------------------------------------------------------------+
| Description | The anti-clickjacking X-Frame-Options header is not |
| | present. |
+---------------+-------------------------------------------------------------+
| Solution | No additional details are available. |
+---------------+-------------------------------------------------------------+

+---------------+-------------------------------------------------------------+
| Occurrence ID | 215b759f203e9198c369d23de7ab770a |
+===============+=============================================================+
| Title | User attention required by: Nikto |
+---------------+-------------------------------------------------------------+
| Found By | Nikto |
+---------------+-------------------------------------------------------------+
| Level | informational |
+---------------+-------------------------------------------------------------+
| CVSS Base | 0.0 |
+---------------+-------------------------------------------------------------+
| Location | https://ciftlikworld.com/ |
+---------------+-------------------------------------------------------------+
| Description | The X-XSS-Protection header is not defined. This header can |
| | hint to the user agent to protect against some forms of XSS |
+---------------+-------------------------------------------------------------+
| Solution | No additional details are available. |
+---------------+-------------------------------------------------------------+

+---------------+-------------------------------------------------------------+
| Occurrence ID | a570faa887f700d4df4717d2693698f8 |
+===============+=============================================================+
| Title | User attention required by: Nikto |
+---------------+-------------------------------------------------------------+
| Found By | Nikto |
+---------------+-------------------------------------------------------------+
| Level | informational |
+---------------+-------------------------------------------------------------+
| CVSS Base | 0.0 |
+---------------+-------------------------------------------------------------+
| Location | http://ciftlikworld.com/ |
+---------------+-------------------------------------------------------------+
| Description | Retrieved via header: YoncuCache |
+---------------+-------------------------------------------------------------+
| Solution | No additional details are available. |
+---------------+-------------------------------------------------------------+

+---------------+-------------------------------------------------------------+
| Occurrence ID | 5221ebb4002c2916d372f2d5a2d30250 |
+===============+=============================================================+
| Title | User attention required by: Nikto |
+---------------+-------------------------------------------------------------+
| Found By | Nikto |
+---------------+-------------------------------------------------------------+
| Level | informational |
+---------------+-------------------------------------------------------------+
| CVSS Base | 0.0 |
+---------------+-------------------------------------------------------------+
| Location | https://ciftlikworld.com/ |
+---------------+-------------------------------------------------------------+
| Description | IP address found in the 'YoncuKoruma' cookie. The IP is |
| | 85.106.102.203"." |
+---------------+-------------------------------------------------------------+
| Solution | No additional details are available. |
+---------------+-------------------------------------------------------------+

+---------------+-------------------------------------------------------------+
| Occurrence ID | e5aa89bdee7e336b098cf4f90487bbe0 |
+===============+=============================================================+
| Title | User attention required by: Nikto |
+---------------+-------------------------------------------------------------+
| Found By | Nikto |
+---------------+-------------------------------------------------------------+
| Level | informational |
+---------------+-------------------------------------------------------------+
| CVSS Base | 0.0 |
+---------------+-------------------------------------------------------------+
| Location | http://ciftlikworld.com/ |
+---------------+-------------------------------------------------------------+
| Description | The X-XSS-Protection header is not defined. This header can |
| | hint to the user agent to protect against some forms of XSS |
+---------------+-------------------------------------------------------------+
| Solution | No additional details are available. |
+---------------+-------------------------------------------------------------+

+---------------+-------------------------------------------------------------+
| Occurrence ID | 41f8cfc35f0b864d278f140a07d634b1 |
+===============+=============================================================+
| Title | User attention required by: Nikto |
+---------------+-------------------------------------------------------------+
| Found By | Nikto |
+---------------+-------------------------------------------------------------+
| Level | informational |
+---------------+-------------------------------------------------------------+
| CVSS Base | 0.0 |
+---------------+-------------------------------------------------------------+
| Location | http://ciftlikworld.com/register.php?base_dir=http%3A%2F%2F |
| | cirt.net%2Frfiinc.txt%3F |
+---------------+-------------------------------------------------------------+
| Description | Cookie PHPSESSID created without the httponly flag |
+---------------+-------------------------------------------------------------+
| Solution | No additional details are available. |
+---------------+-------------------------------------------------------------+

+---------------+-------------------------------------------------------------+
| Occurrence ID | 020bb3ab18d8dd65a08e9dde732ef2df |
+===============+=============================================================+
| Title | User attention required by: Nikto |
+---------------+-------------------------------------------------------------+
| Found By | Nikto |
+---------------+-------------------------------------------------------------+
| Level | informational |
+---------------+-------------------------------------------------------------+
| CVSS Base | 0.0 |
+---------------+-------------------------------------------------------------+
| Location | https://ciftlikworld.com/ |
+---------------+-------------------------------------------------------------+
| Description | Cookie YoncuKoruma created without the httponly flag |
+---------------+-------------------------------------------------------------+
| Solution | No additional details are available. |
+---------------+-------------------------------------------------------------+

+---------------+-------------------------------------------------------------+
| Occurrence ID | 114fd2ce2cc6768ec2314ee5c4b687d3 |
+===============+=============================================================+
| Title | User attention required by: Nikto |
+---------------+-------------------------------------------------------------+
| Found By | Nikto |
+---------------+-------------------------------------------------------------+
| Level | informational |
+---------------+-------------------------------------------------------------+
| CVSS Base | 0.0 |
+---------------+-------------------------------------------------------------+
| Location | http://ciftlikworld.com/ |
+---------------+-------------------------------------------------------------+
| Description | The anti-clickjacking X-Frame-Options header is not |
| | present. |
+---------------+-------------------------------------------------------------+
| Solution | No additional details are available. |
+---------------+-------------------------------------------------------------+

+---------------+-------------------------------------------------------------+
| Occurrence ID | 450c8e1fdf6072fba2f9e984599dc8f3 |
+===============+=============================================================+
| Title | User attention required by: Nikto |
+---------------+-------------------------------------------------------------+
| Found By | Nikto |
+---------------+-------------------------------------------------------------+
| Level | informational |
+---------------+-------------------------------------------------------------+
| CVSS Base | 0.0 |
+---------------+-------------------------------------------------------------+
| Location | http://ciftlikworld.com/ |
+---------------+-------------------------------------------------------------+
| Description | The X-Content-Type-Options header is not set. This could |
| | allow the user agent to render the content of the site in a |
| | different fashion to the MIME type |
+---------------+-------------------------------------------------------------+
| Solution | No additional details are available. |
+---------------+-------------------------------------------------------------+

+---------------+-------------------------------------------------------------+
| Occurrence ID | 9b0e5c68908e6642f69f816e1145f498 |
+===============+=============================================================+
| Title | User attention required by: Nikto |
+---------------+-------------------------------------------------------------+
| Found By | Nikto |
+---------------+-------------------------------------------------------------+
| Level | informational |
+---------------+-------------------------------------------------------------+
| CVSS Base | 0.0 |
+---------------+-------------------------------------------------------------+
| Location | https://ciftlikworld.com/ |
+---------------+-------------------------------------------------------------+
| Description | Uncommon header 'ntcoent-length' found, with contents: 7233 |
+---------------+-------------------------------------------------------------+
| Solution | No additional details are available. |
+---------------+-------------------------------------------------------------+

+---------------+-------------------------------------------------------------+
| Occurrence ID | a21d1807f37512ee79f100185daf19a7 |
+===============+=============================================================+
| Title | User attention required by: Nikto |
+---------------+-------------------------------------------------------------+
| Found By | Nikto |
+---------------+-------------------------------------------------------------+
| Level | informational |
+---------------+-------------------------------------------------------------+
| CVSS Base | 0.0 |
+---------------+-------------------------------------------------------------+
| Location | http://ciftlikworld.com/ |
+---------------+-------------------------------------------------------------+
| Description | IP address found in the 'set-cookie' header. The IP is |
| | 85.106.102.203"." |
+---------------+-------------------------------------------------------------+
| Solution | No additional details are available. |
+---------------+-------------------------------------------------------------+

+---------------+-------------------------------------------------------------+
| Occurrence ID | 8c621104a56ba3a9c775e7784b0148d1 |
+===============+=============================================================+
| Title | User attention required by: Nikto |
+---------------+-------------------------------------------------------------+
| Found By | Nikto |
+---------------+-------------------------------------------------------------+
| Level | informational |
+---------------+-------------------------------------------------------------+
| CVSS Base | 0.0 |
+---------------+-------------------------------------------------------------+
| Location | http://ciftlikworld.com/ |
+---------------+-------------------------------------------------------------+
| Description | Uncommon header 'ntcoent-length' found, with contents: 7233 |
+---------------+-------------------------------------------------------------+
| Solution | No additional details are available. |
+---------------+-------------------------------------------------------------+

+---------------+-------------------------------------------------------------+
| Occurrence ID | 288402e4f9650e1ff8ceddd5f5e0d41c |
+===============+=============================================================+
| Title | User attention required by: Nikto |
+---------------+-------------------------------------------------------------+
| Found By | Nikto |
+---------------+-------------------------------------------------------------+
| Level | informational |
+---------------+-------------------------------------------------------------+
| CVSS Base | 0.0 |
+---------------+-------------------------------------------------------------+
| Location | https://ciftlikworld.com/ |
+---------------+-------------------------------------------------------------+
| Description | Cookie YoncuKoruma created without the secure flag |
+---------------+-------------------------------------------------------------+
| Solution | No additional details are available. |
+---------------+-------------------------------------------------------------+

+---------------+-------------------------------------------------------------+
| Occurrence ID | f5ddcd476cd2b64078680a228ede8a23 |
+===============+=============================================================+
| Title | User attention required by: Nikto |
+---------------+-------------------------------------------------------------+
| Found By | Nikto |
+---------------+-------------------------------------------------------------+
| Level | informational |
+---------------+-------------------------------------------------------------+
| CVSS Base | 0.0 |
+---------------+-------------------------------------------------------------+
| Location | https://ciftlikworld.com/ |
+---------------+-------------------------------------------------------------+
| Description | The X-Content-Type-Options header is not set. This could |
| | allow the user agent to render the content of the site in a |
| | different fashion to the MIME type |
+---------------+-------------------------------------------------------------+
| Solution | No additional details are available. |
+---------------+-------------------------------------------------------------+

+---------------+-------------------------------------------------------------+
| Occurrence ID | f2460edf7fbbd92d330982727d5bb2e1 |
+===============+=============================================================+
| Title | User attention required by: Nikto |
+---------------+-------------------------------------------------------------+
| Found By | Nikto |
+---------------+-------------------------------------------------------------+
| Level | informational |
+---------------+-------------------------------------------------------------+
| CVSS Base | 0.0 |
+---------------+-------------------------------------------------------------+
| Location | https://ciftlikworld.com/ |
+---------------+-------------------------------------------------------------+
| Description | IP address found in the 'set-cookie' header. The IP is |
| | 85.106.102.203"." |
+---------------+-------------------------------------------------------------+
| Solution | No additional details are available. |
+---------------+-------------------------------------------------------------+

+---------------+-------------------------------------------------------------+
| Occurrence ID | 2a2cb857ab7228dd413c2f9df13e02e1 |
+===============+=============================================================+
| Title | User attention required by: Nikto |
+---------------+-------------------------------------------------------------+
| Found By | Nikto |
+---------------+-------------------------------------------------------------+
| Level | informational |
+---------------+-------------------------------------------------------------+
| CVSS Base | 0.0 |
+---------------+-------------------------------------------------------------+
| Location | https://ciftlikworld.com/ |
+---------------+-------------------------------------------------------------+
| Description | The Content-Encoding header is set to deflate" this may |
| | mean that the server is vulnerable to the BREACH attack." |
+---------------+-------------------------------------------------------------+
| Solution | No additional details are available. |
+---------------+-------------------------------------------------------------+

Notes.io is a web-based application for taking notes. You can take your notes and share with others people. If you like taking long notes, notes.io is designed for you. To date, over 8,000,000,000 notes created and continuing...

With notes.io;

* You can take a note from anywhere and any device with internet connection.
* You can share the notes in social platforms (YouTube, Facebook, Twitter, instagram etc.).
* You can quickly share your contents without website, blog and e-mail.
* You don't need to create any Account to share a note. As you wish you can use quick, easy and best shortened notes with sms, websites, e-mail, or messaging services (WhatsApp, iMessage, Telegram, Signal).
* Notes.io has fabulous infrastructure design for a short link and allows you to share the note as an easy and understandable link.

Fast: Notes.io is built for speed and performance. You can take a notes quickly and browse your archive.

Easy: Notes.io doesn’t require installation. Just write and share note!

Short: Notes.io’s url just 8 character. You’ll get shorten link of your note when you want to share. (Ex: notes.io/q )

Free: Notes.io works for 12 years and has been free since the day it was started.

You immediately create your first note and start sharing with the ones you wish. If you want to contact us, you can use the following communication channels;

Email: [email protected]

Twitter: http://twitter.com/notesio

Instagram: http://instagram.com/notes.io

Facebook: http://facebook.com/notesio

Regards;
Notes.io Team

Notes

Notes - notes.io

Shortened Note Link

Long File

Notes