|
CONFIDENTIAL |
|
|
Scan Summary · 2026-07-14
Vulnerability findings for tauspace.com
https://tauspace.com · 104.21.85.127
|
|
The latest scan identified 40 findings across the public-facing infrastructure. No critical or high-severity issues were observed in this run. 5 medium-severity item(s) should be scheduled for the next change window. Low: 6, Informational: 29.
|
|
Critical
0
|
High
0
|
Medium
5
|
Low
6
|
Info
29
|
|
|
REPORT 3538e4c3
|
SCAN 07:19 UTC
|
TOOLS httpx · nmap · subfinder · zap
|
|
| Medium severity |
5 FINDINGS |
|
|
| M-01 |
Absence of Anti-CSRF Tokens
— · 4 instance(s)
|
Medium
|
|
| M-02 |
Content Security Policy (CSP) Header Not Set
— · 5 instance(s)
|
Medium
|
|
| M-03 |
Cross-Domain Misconfiguration
— · 5 instance(s)
|
Medium
|
|
| M-04 |
Missing Anti-clickjacking Header
— · 5 instance(s)
|
Medium
|
|
| M-05 |
Sub Resource Integrity Attribute Missing
— · 5 instance(s)
|
Medium
|
|
|
|
| L-01 |
Cross-Origin-Embedder-Policy Header Missing or Invalid
— · 5 instance(s)
|
Low
|
|
| L-02 |
Cross-Origin-Opener-Policy Header Missing or Invalid
— · 5 instance(s)
|
Low
|
|
| L-03 |
Information Disclosure - Debug Error Messages
— · 1 instance(s)
|
Low
|
|
| L-04 |
Permissions Policy Header Not Set
— · 5 instance(s)
|
Low
|
|
| L-05 |
Strict-Transport-Security Header Not Set
— · 5 instance(s)
|
Low
|
|
| L-06 |
X-Content-Type-Options Header Missing
— · 2 instance(s)
|
Low
|
|
| Informational |
29 FINDINGS |
|
| 4 network observation(s) on 104.21.85.127: http/80, https/443, http-proxy/8080, https-alt/8443 plus httpx (1) plus subfinder (18). |
|
This message contains confidential security information.
Do not forward outside the intended recipient list. |
REPORT 3538e4c3
2026-07-14 |
|