|
Kahaconsulting · Security Report
|
CONFIDENTIAL |
|
|
Scan Summary · 2026-05-07
Vulnerability findings for kahaconsulting.com
http://www.kahaconsulting.com/ · 156.38.154.6
|
|
The latest scan identified 16 findings across the public-facing infrastructure. No critical or high-severity issues were observed in this run. 6 medium-severity item(s) should be scheduled for the next change window. Low: 5, Informational: 5.
|
|
Critical
0
|
High
0
|
Medium
6
|
Low
5
|
Info
5
|
|
|
REPORT 945119a3
|
SCAN 12:42 UTC
|
TOOLS httpx · nmap · zap
|
|
| Medium severity |
6 FINDINGS |
|
|
| M-01 |
Absence of Anti-CSRF Tokens
— · 1 instance(s)
|
Medium
|
|
| M-02 |
CSP: Wildcard Directive
— · 2 instance(s)
|
Medium
|
|
| M-03 |
CSP: script-src unsafe-eval
— · 2 instance(s)
|
Medium
|
|
| M-04 |
CSP: script-src unsafe-inline
— · 2 instance(s)
|
Medium
|
|
| M-05 |
CSP: style-src unsafe-inline
— · 2 instance(s)
|
Medium
|
|
| M-06 |
Sub Resource Integrity Attribute Missing
— · 5 instance(s)
|
Medium
|
|
|
|
| L-01 |
Cross-Domain JavaScript Source File Inclusion
— · 5 instance(s)
|
Low
|
|
| L-02 |
Cross-Origin-Embedder-Policy Header Missing or Invalid
— · 1 instance(s)
|
Low
|
|
| L-03 |
Cross-Origin-Opener-Policy Header Missing or Invalid
— · 1 instance(s)
|
Low
|
|
| L-04 |
Cross-Origin-Resource-Policy Header Missing or Invalid
— · 1 instance(s)
|
Low
|
|
| L-05 |
Timestamp Disclosure - Unix
— · 5 instance(s)
|
Low
|
|
|
|
| 2 network observation(s) on 156.38.154.6: http/80, https/443 plus httpx (1). |
|
|
The detailed HTML report (full_vulnerable_reports) lists evidence, endpoints, and remediation text where the scanner provided it.
|
This message contains confidential security information.
Do not forward outside the intended recipient list. |
REPORT 945119a3
2026-05-07 |
|