This is an informational plugin to inform the user that the scanner has detected a publicly accessible LiteLLM instance on the target application. LiteLLM is a LLM Gateway to provide model access in the OpenAI format. This detection is included in the AI and LLM category.

This is an informational plugin to inform the user that the scanner has detected a publicly accessible Botpress chatbot on the target application. Botpress is an open-source visual framework to build & deploy GPT/LLM Agents. This detection is included in the AI and LLM category.

This is an informational plugin to inform the user that the scanner has detected a publicly accessible Ray instance on the target application. Ray is an open-source framework to build and scale Machine Learning (ML) and Python applications. This detection is included in the AI and LLM category.

ModelContextProtocol (MCP) servers using SSE (Server-Sent Events) transport mode are prone to DNS rebinding attacks when they do not enforce strict verification of both the 'Origin' and 'Host' headers. This vulnerability allows an attacker to bypass same-origin policies, potentially leading to unauthorized access to sensitive data or actions on behalf of the user in the context of the vulnerable MCP server.

This detection is included in the AI and LLM category.

By default, MLflow does not require authentication to access the application. When enabling authentication, MLflow will enforce a basic authentication with default credentials. If not updated, a remote and unauthenticated attacker could access the MLflow UI and peform arbitrary actions on it. This detection is included in the AI and LLM category.

Model Context Protocol (MCP) Server Prompt Injection occurs when malicious actors use tools response to inject malicious prompts to the calling LLM through the MCP client. This can lead to the execution of unauthorized commands, data corruption, or the deployment of malicious tools. Such vulnerabilities are particularly dangerous in AI development environments, where malicious tools can compromise the integrity of the development process and lead to further exploitation. This detection is included in the AI and LLM category.

This is an informational plugin to inform the user that the scanner has detected a publicly accessible H2O Flow instance on the target application. H2O Flow is an open-source user interface for H2O, an open-source, distributed and scalable machine learning and predictive analytics platform. This detection is included in the AI and LLM category.

ID	Name	Product	Family	Published	Updated	Severity
114622	LiteLLM Detected	Web App Scanning	Artificial Intelligence	3/11/2025	3/11/2025	info
114871	Botpress Chatbot Detected	Web App Scanning	Artificial Intelligence	6/4/2025	6/4/2025	info
114361	Ray Detected	Web App Scanning	Artificial Intelligence	7/3/2024	7/3/2024	info
114885	MCP Server SSE DNS Rebinding	Web App Scanning	Artificial Intelligence	6/20/2025	7/3/2025	medium
114323	MLflow Default Credentials	Web App Scanning	Artificial Intelligence	6/26/2024	6/26/2024	critical
114928	MCP Server Prompt Injection	Web App Scanning	Artificial Intelligence	7/31/2025	7/31/2025	high
114367	H2O Flow Detected	Web App Scanning	Artificial Intelligence	7/18/2024	7/18/2024	info

Detections

Analytics

Plugins Search

info

info

info

medium

critical

high

info