114790 | MCP Server Detected | Web App Scanning | Artificial Intelligence | 6/11/2025 | info |
114784 | Citrix Netscaler 14.1.x < 14.1-25.53 Information Disclosure | Web App Scanning | Component Vulnerability | 6/6/2025 | critical |
98008 | Web Application Firewall Detected | Web App Scanning | General | 6/4/2025 | info |
114313 | Flowise Chatflow Detected | Web App Scanning | Artificial Intelligence | 6/4/2025 | info |
113908 | Advanced Custom Fields Pro for WordPress 6.0.x < 6.1.6 Cross-Site Scripting | Web App Scanning | Component Vulnerability | 6/4/2025 | medium |
113906 | Advanced Custom Fields for WordPress 6.0.x < 6.1.6 Cross-Site Scripting | Web App Scanning | Component Vulnerability | 6/4/2025 | medium |
112907 | GraphQL Interface Detected | Web App Scanning | Web Applications | 6/4/2025 | info |
114795 | FortiOS 7.0.x < 7.0.13 / 7.2.x < 7.2.6 / 7.4.x < 7.4.2 Remote Code Execution | Web App Scanning | Component Vulnerability | 5/27/2025 | critical |
98080 | Form-based File Upload | Web App Scanning | Web Applications | 5/22/2025 | info |
114434 | Flask Weak Secret Key | Web App Scanning | Web Applications | 5/22/2025 | high |
114006 | Web Cache Poisoning Denial of Service | Web App Scanning | Web Applications | 5/22/2025 | high |
98779 | Source Code Passive Disclosure | Web App Scanning | Data Exposure | 5/16/2025 | medium |
98648 | Missing 'Content-Type' Header | Web App Scanning | HTTP Security Header | 5/16/2025 | low |
98623 | Host Header Injection | Web App Scanning | Injection | 5/16/2025 | medium |
98109 | DOM-based Cross-Site Scripting (XSS) | Web App Scanning | Cross Site Scripting | 5/16/2025 | medium |
98056 | Missing HTTP Strict Transport Security Policy | Web App Scanning | HTTP Security Header | 5/16/2025 | medium |
114166 | SOAP API Detected | Web App Scanning | Web Applications | 5/16/2025 | info |
113973 | Web Services Description Language (WSDL) File Detected | Web App Scanning | Web Applications | 5/16/2025 | info |
113943 | Disclosed Hong Kong Identity Number | Web App Scanning | Data Exposure | 5/16/2025 | medium |
113373 | Atlassian Bitbucket Remote Code Execution | Web App Scanning | Component Vulnerability | 5/16/2025 | high |
113217 | Spring Framework < 5.2.20 / 5.3.x < 5.3.18 Remote Code Execution (Spring4Shell) | Web App Scanning | Component Vulnerability | 5/16/2025 | critical |
114615 | Username Disclosure | Web App Scanning | Data Exposure | 4/29/2025 | low |
114357 | Polyfill Detected | Web App Scanning | Component Vulnerability | 4/29/2025 | medium |
98125 | Local File Inclusion | Web App Scanning | File Inclusion | 4/17/2025 | high |
98123 | Operating System Command Injection | Web App Scanning | Code Execution | 4/17/2025 | critical |
98100 | Path Traversal | Web App Scanning | Web Applications | 4/17/2025 | high |
114168 | Jenkins < 2.442 / < LTS 2.426.3 Arbitrary File Read | Web App Scanning | Component Vulnerability | 4/17/2025 | critical |
114116 | XML Injection | Web App Scanning | Injection | 4/17/2025 | high |
113634 | Server-Side Inclusion Injection | Web App Scanning | Injection | 4/17/2025 | high |
112720 | Rails < 4.2.11.3 / 5.x < 5.0.1 Remote Code Execution | Web App Scanning | Component Vulnerability | 4/17/2025 | high |
112706 | Oracle WebLogic 10.3.6.0.0 / 12.1.3.0.0 / 12.2.1.3.0 Remote Code Execution | Web App Scanning | Component Vulnerability | 4/17/2025 | critical |
112704 | Oracle WebLogic 10.3.6.0.0 / 12.1.3.0.0 Remote Code Execution | Web App Scanning | Component Vulnerability | 4/17/2025 | critical |
112545 | Oracle WebLogic Server Administration Console Detected | Web App Scanning | Web Applications | 4/17/2025 | medium |
112524 | Oracle WebLogic WSAT Remote Code Execution | Web App Scanning | Component Vulnerability | 4/17/2025 | critical |
112439 | Server-Side Request Forgery | Web App Scanning | Web Applications | 4/17/2025 | high |
114668 | Langflow < 1.3.0 Unauthenticated Remote Code Execution | Web App Scanning | Artificial Intelligence | 4/10/2025 | high |
113452 | WordPress Plugins Detected | Web App Scanning | Web Applications | 4/10/2025 | info |
114681 | Next.js 13.0.x < 13.5.9 Authorization Bypass | Web App Scanning | Component Vulnerability | 4/4/2025 | critical |
114575 | Ollama Multiples Vulnerabilities | Web App Scanning | Component Vulnerability | 4/4/2025 | high |
98920 | Disclosed US Social Security Number | Web App Scanning | Data Exposure | 4/3/2025 | medium |
114129 | Secret Data Disclosure | Web App Scanning | Data Exposure | 4/2/2025 | high |
113168 | Docker Compose Configuration Detected | Web App Scanning | Data Exposure | 3/28/2025 | medium |
113123 | Dockerfile Detected | Web App Scanning | Data Exposure | 3/28/2025 | medium |
112541 | SSL/TLS Certificate Common Name Mismatch | Web App Scanning | SSL/TLS | 3/28/2025 | medium |
114386 | External Broken Resources Detected | Web App Scanning | Web Applications | 3/24/2025 | low |
98117 | Blind SQL Injection (differential analysis) | Web App Scanning | Injection | 3/18/2025 | high |
114621 | Docker Public Registry Detected | Web App Scanning | Web Applications | 3/18/2025 | info |
114400 | Apache OFBiz < 18.12.11 Server-Side Request Forgery | Web App Scanning | Component Vulnerability | 3/18/2025 | high |
98538 | Environment Configuration File Detected | Web App Scanning | Web Applications | 3/11/2025 | high |
98104 | Cross-Site Scripting (XSS) | Web App Scanning | Cross Site Scripting | 3/11/2025 | medium |