|
Silicon Overdrive · Security Report
|
CONFIDENTIAL |
|
|
Scan Summary · 2026-06-07
Vulnerability findings for scan.overdrive.co.za
https://scan.overdrive.co.za/ · 129.232.138.226
|
|
The latest scan identified 34 findings across the public-facing infrastructure. Critical: 0, High: 1 — review urgently. Low: 8, Informational: 22.
|
|
Critical
0
|
High
1
|
Medium
3
|
Low
8
|
Info
22
|
|
|
REPORT 32bc8a47
|
SCAN 19:44 UTC
|
TOOLS httpx · nmap · nuclei · subfinder · zap
|
|
|
|
| H-01 |
Generic Env File Disclosure
scan.overdrive.co.za · 1 instance(s)
|
High
|
|
| Medium severity |
3 FINDINGS |
|
|
| M-01 |
Content Security Policy (CSP) Header Not Set
— · 5 instance(s)
|
Medium
|
|
| M-02 |
Missing Anti-clickjacking Header
— · 5 instance(s)
|
Medium
|
|
| M-03 |
Sub Resource Integrity Attribute Missing
— · 4 instance(s)
|
Medium
|
|
|
|
| L-01 |
Application Error Disclosure
— · 11 instance(s)
|
Low
|
|
| L-02 |
Cross-Origin-Embedder-Policy Header Missing or Invalid
— · 2 instance(s)
|
Low
|
|
| L-03 |
Cross-Origin-Opener-Policy Header Missing or Invalid
— · 2 instance(s)
|
Low
|
|
| L-04 |
Cross-Origin-Resource-Policy Header Missing or Invalid
— · 5 instance(s)
|
Low
|
|
| L-05 |
Information Disclosure - Debug Error Messages
— · 11 instance(s)
|
Low
|
|
| L-06 |
Permissions Policy Header Not Set
— · 5 instance(s)
|
Low
|
|
| L-07 |
Strict-Transport-Security Header Not Set
— · 5 instance(s)
|
Low
|
|
| L-08 |
X-Content-Type-Options Header Missing
— · 5 instance(s)
|
Low
|
|
| Informational |
22 FINDINGS |
|
| 10 network observation(s) on 129.232.138.226: ftp/21, ssh/22, http/80, pop3/110, imap/143, https/443, smtps/465, submission/587, imaps/993, pop3s/995 plus httpx (1). Nuclei: 1 detection(s) plus subfinder (4). |
|
This message contains confidential security information.
Do not forward outside the intended recipient list. |
REPORT 32bc8a47
2026-06-07 |
|