en
Trang chủ - BỆNH VIỆN BỆNH NHIỆT ĐỚI
Previous slide Next slide Lịch làm việc Đăng ký khám bệnh Hỏi đáp Bảng giá dịch vụ KCB Hướng dẫn KCB Tin mới THÔNG BÁO: TUYỂN DỤNG VỊ TRÍ HỘ LÝ 03/06/2026 THÔNG BÁO: KẾT QUẢ TUYỂN DỤNG VỊ TRÍ CÔNG NGHỆ THÔNG TIN HẠNG III 02/06/2026 Hoạt động bệnh viện GIÀNH LẠI SỰ SỐNG […]
IndustryOriginGlobal rankRank in Vietnam
Updated at The higher the score, the more externally observable protections the system has recorded. This page does not certify that the website is reputable, legitimate, or completely free of vulnerabilities.
As of September 10, 2026 at 13:14, www.bvbnd.vn has a security score of 77.6/100 (grade C – “Fair”). CyStack’s automated assessment recorded 13 issues to review after completing 94.5% of applicable checks. The website owner should address “Allowed browser content (CSP)” first, then review the remaining items in order of impact.
At assessment time, CyStack did not find www.bvbnd.vn or related infrastructure on any scam, phishing, or malware warning list after checking 5 online reputation sources. This result reflects external observations; it does not guarantee absolute safety or verify the organization’s legal status or reputation.
Addresses, servers and services that are visible from the Internet.
Frequently asked questions
A valid SSL certificate still does not prove that www.bvbnd.vn is safe, legitimate, or free of scam signals. For a more complete assessment, this report also checks phishing and malware, exposed email records, IPs and open ports, subdomains, technologies, and CVEs that may apply to observed versions.
www.bvbnd.vn used a valid SSL certificate at assessment time, valid until January 17, 2027. This status may change when the certificate expires or the server configuration changes.
Review HTTPS and certificateData sources
CyStack compiles scan results from its internal cybersecurity monitoring systems, including CyStack VulnScan and CyStack Threat Intelligence, together with publicly available Internet data. The assessment only observes and analyzes information already available; it does not attempt unauthorized access, test passwords, send exploit code, or change or disrupt the assessed system.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the enterprise.
These 3 failed checks or warnings have the greatest impact on the result for www.bvbnd.vn.
Why it matters
Content Security Policy (CSP) limits where scripts, styles, frames, and other browser content may come from. A strong policy reduces the impact if an attacker manages to inject content into a page.
What to do
Define only the sources the application needs, test the policy before activating it, and avoid broad wildcard (*) rules, unsafe-inline, and unsafe-eval where possible.
Scope of this check
This check only evaluates the homepage response and content that the scanner could reach. Other pages and sign-in flows may use different settings.
Evidence and check scope
References
Why it matters
DMARC lets the domain owner tell receiving services what to do when the visible From address is not verified by SPF or DKIM. Without DMARC, attackers have more opportunity to impersonate the domain in phishing email.
What to do
Publish a DMARC record at _dmarc, begin by collecting reports, and confirm that legitimate senders pass before applying a blocking policy.
Evidence and check scope
Why it matters
Older services such as Telnet, FTP, and unencrypted mail or directory protocols can send passwords and data in readable form. Anyone able to observe the network path may capture them.
What to do
Disable the legacy service or replace it with an encrypted alternative such as SSH, SFTP, HTTPS, or the secure version of the mail protocol.
Each public IP is grouped with its open services, identified products and any CVEs that may apply to the observed version.
103.77.162.26leipzig.maychu.cloudProduct not identified
PHPL
LiteSpeed Web Server3 potential CVEs
DovecotVersion not visibleLiteSpeed Web ServerNo record associated with an @bvbnd.vn email address was found in the currently available data. This does not rule out incidents that have not been observed.
Review exposed email recordsThe assessment identified 21 technologies on www.bvbnd.vn. Only 6 had a version reliable enough for accurate CVE matching.
Review technologies and CVEsThe assessment observed 1 public IPs and 9 open ports for www.bvbnd.vn. An open port is not the same as a vulnerability, but the website owner should keep every public service updated and appropriately restrict access.
Review IPs and open portsThe assessment observed 21 public subdomains of bvbnd.vn. This list can reveal additional entry points such as APIs, administration systems, or test environments, but it does not mean that every subdomain is risky.
Review discovered subdomainsReferences
Evidence and check scope
PHPProgramming Languages7.4.333 potential CVEsCVSS 9.8PHP is a general-purpose scripting language used for web development.
php.netPotential CVEs for this product
A command inject vulnerability allows an attacker to perform command injection on Windows applications that indirectly depend on the CreateProcess function when the specific conditions are satisfied.
NvdA vulnerability was found in PHP where setting the environment variable PHP_CLI_SERVER_WORKERS to a large value leads to a heap buffer overflow.
NvdIn PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, due to a code logic error, filtering functions such as filter_var when validating URLs (FILTER_VALIDATE_URL) for certain types of URLs the function will result in invalid user information (username + password part of URLs) being treated as valid user information. This may lead to the downstream code accepting invalid URLs as valid and parsing them incorrectly.
NvdLiteSpeed Web ServerVersion not visibleDovecotDovecotVersion not visibleProduct not identified
ElementorG
Google AnalyticsH
HTTP/3+9ElementorPage Builders · WordPress Plugins3.24.7Elementor is a website builder platform for professionals on WordPress.
elementor.comGoogle AnalyticsAnalyticsVersion not visibleProduct not identified
Product not identified
Product not identified
DovecotDovecotVersion not visibleGoogle Analytics is a free web analytics service that tracks and reports website traffic.
google.com/analyticsHTTP/3MiscellaneousVersion not visibleHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org
imagesLoadedJavaScript Libraries5.0.0jQuery plugin for seeing if the images are loaded.
imagesloaded.desandro.com
jQueryJavaScript LibrariesVersion not visiblejQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.
jquery.comjQuery MigrateJavaScript Libraries3.4.1Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.
github.com/jquery/jquery-migrate
LiteSpeedWeb ServersVersion not visibleLiteSpeed is a high-scalability web server.
litespeedtech.comLiteSpeed Web ServerVersion not visible
MySQLDatabasesVersion not visibleMySQL is an open-source relational database management system.
mysql.com
Site KitAnalytics · WordPress Plugins1.187.0Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.
sitekit.withgoogle.com
SlickJavaScript LibrariesVersion not visible
WordPressBlogs · CMS6.6.7WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.
wordpress.orgRecently completed assessments, prioritizing websites with a similar sector, country or security grade for easier comparison.
Vietnam
