This is an informational plugin to inform the user that the scanner has detected a publicly accessible AnythingLLM instance on the target application. AnythingLLM let you choose between different LLM or vector database to use and allow to convert any document or content into references that the selected language model can use while chatting. This detection is included in the AI and LLM category.

This is an informational plugin to inform the user that the scanner has detected a publicly accessible Botpress chatbot on the target application. Botpress is an open-source visual framework to build & deploy GPT/LLM Agents. This detection is included in the AI and LLM category.

This is an informational plugin to inform the user that the scanner has detected a publicly accessible ZenML instance on the target application. ZenML is an open-source framework dedicated to MLOps abstracting the underlying infrastructure. This detection is included in the AI and LLM category.

This is an informational plugin to inform the user that the scanner has detected a publicly accessible LiteLLM instance on the target application. LiteLLM is a LLM Gateway to provide model access in the OpenAI format. This detection is included in the AI and LLM category.

This is an informational plugin to inform the user that the scanner has detected a publicly accessible Ray instance on the target application. Ray is an open-source framework to build and scale Machine Learning (ML) and Python applications. This detection is included in the AI and LLM category.

ModelContextProtocol (MCP) servers using SSE (Server-Sent Events) transport mode are prone to DNS rebinding attacks when they do not enforce strict verification of both the 'Origin' and 'Host' headers. This vulnerability allows an attacker to bypass same-origin policies, potentially leading to unauthorized access to sensitive data or actions on behalf of the user in the context of the vulnerable MCP server.

This detection is included in the AI and LLM category.

By default, MLflow does not require authentication to access the application. When enabling authentication, MLflow will enforce a basic authentication with default credentials. If not updated, a remote and unauthenticated attacker could access the MLflow UI and peform arbitrary actions on it. This detection is included in the AI and LLM category.

H2O Flow is an open-source user interface for H2O, an open-source, distributed and scalable machine learning and predictive analytics platform. By default, H2O Flow does not require authentication to access the application. This allows an attacker to access sensitive data. This detection is included in the AI and LLM category.

This is an informational plugin to inform the user that the scanner has detected a publicly accessible H2O Flow instance on the target application. H2O Flow is an open-source user interface for H2O, an open-source, distributed and scalable machine learning and predictive analytics platform. This detection is included in the AI and LLM category.

Model Context Protocol (MCP) Server Prompt Injection occurs when malicious actors use tools response to inject malicious prompts to the calling LLM through the MCP client. This can lead to the execution of unauthorized commands, data corruption, or the deployment of malicious tools. Such vulnerabilities are particularly dangerous in AI development environments, where malicious tools can compromise the integrity of the development process and lead to further exploitation. This detection is included in the AI and LLM category.

The scanner detected the presence of a Large Language Model (LLM) on the target application. LLMs are advanced AI models capable of understanding and generating human-like text based on the input they receive. They are commonly used in various applications, including chatbots, virtual assistants, content generation, and more.

The presence of an LLM can introduce unique security considerations, such as data privacy concerns, potential for generating misleading or harmful content, and vulnerabilities specific to AI models.

This detection is included in the AI and LLM category.

ID	Name	Product	Family	Published	Updated	Severity
114303	AnythingLLM Detected	Web App Scanning	Artificial Intelligence	6/20/2024	6/20/2024	info
114871	Botpress Chatbot Detected	Web App Scanning	Artificial Intelligence	6/4/2025	6/4/2025	info
114359	ZenML Detected	Web App Scanning	Artificial Intelligence	7/3/2024	7/3/2024	info
114622	LiteLLM Detected	Web App Scanning	Artificial Intelligence	3/11/2025	3/11/2025	info
114361	Ray Detected	Web App Scanning	Artificial Intelligence	7/3/2024	7/3/2024	info
114885	MCP Server SSE DNS Rebinding	Web App Scanning	Artificial Intelligence	6/20/2025	7/3/2025	medium
114323	MLflow Default Credentials	Web App Scanning	Artificial Intelligence	6/26/2024	6/26/2024	critical
114969	H2O Flow Unauthenticated Access	Web App Scanning	Artificial Intelligence	9/26/2025	9/26/2025	critical
114367	H2O Flow Detected	Web App Scanning	Artificial Intelligence	7/18/2024	7/18/2024	info
114928	MCP Server Prompt Injection	Web App Scanning	Artificial Intelligence	7/31/2025	7/31/2025	high
114959	LLM Detected	Web App Scanning	Artificial Intelligence	9/9/2025	9/9/2025	info

Detections

Analytics

Plugins Search

info

info

info

info

info

medium

critical

critical

info

high

info