| 115121 | Versa Concerto 11.4.x < 12.1.2 Authentication Bypass | Web App Scanning | Component Vulnerability | 2/3/2026 | critical |
| 98230 | PHP Unsupported Version | Web App Scanning | Component Vulnerability | 1/28/2026 | critical |
| 98064 | Cookie Without Secure Flag Detected | Web App Scanning | HTTP Security Header | 1/28/2026 | low |
| 98063 | Cookie Without HttpOnly Flag Detected | Web App Scanning | HTTP Security Header | 1/28/2026 | low |
| 98062 | Cookie Set For Parent Domain | Web App Scanning | HTTP Security Header | 1/28/2026 | info |
| 115540 | Cookie Without SameSite Flag Detected | Web App Scanning | HTTP Security Header | 1/28/2026 | low |
| 115122 | Zimbra Collaboration 10.0.x < 10.0.18 / 10.1.x < 10.1.13 Local File Inclusion | Web App Scanning | Component Vulnerability | 1/28/2026 | high |
| 115088 | PHP 8.5.x < 8.5.1 Multiple Vulnerabilities | Web App Scanning | Component Vulnerability | 1/28/2026 | medium |
| 115063 | AI Service Secret Disclosure | Web App Scanning | Data Exposure | 1/21/2026 | high |
| 115062 | Third-Party Service Secret Disclosure | Web App Scanning | Data Exposure | 1/21/2026 | high |
| 114129 | Generic Secret Disclosure | Web App Scanning | Data Exposure | 1/21/2026 | high |
| 115113 | Livewire 3.x < 3.6.4 Remote Code Execution | Web App Scanning | Component Vulnerability | 1/19/2026 | critical |
| 114116 | XML Injection | Web App Scanning | Injection | 1/19/2026 | high |
| 114200 | Google Cloud Platform Detected | Web App Scanning | Web Applications | 1/15/2026 | info |
| 98228 | Drupal Unsupported Version | Web App Scanning | Component Vulnerability | 1/5/2026 | critical |
| 114064 | MediaWiki Status Module Information Disclosure | Web App Scanning | Web Applications | 1/5/2026 | medium |
| 113943 | Disclosed Hong Kong Identity Number | Web App Scanning | Data Exposure | 1/5/2026 | medium |
| 113217 | Spring Framework < 5.2.20 / 5.3.x < 5.3.18 Remote Code Execution (Spring4Shell) | Web App Scanning | Component Vulnerability | 1/5/2026 | critical |
| 113029 | Microsoft IIS Unsupported Version | Web App Scanning | Component Vulnerability | 1/5/2026 | critical |
| 98538 | Environment Configuration File Detected | Web App Scanning | Web Applications | 12/17/2025 | high |
| 114276 | Database Connection String Disclosure | Web App Scanning | Data Exposure | 12/17/2025 | high |
| 98209 | Drupal User Enumeration | Web App Scanning | Web Applications | 12/11/2025 | medium |
| 115069 | React Server Components 19.0 / 19.1.0 / 19.1.1 / 19.2.0 Remote Code Execution (React2Shell) | Web App Scanning | Component Vulnerability | 12/11/2025 | critical |
| 115010 | Object-Relational Mapping (ORM) Leak | Web App Scanning | Injection | 12/11/2025 | high |
| 114907 | Citrix NetScaler Gateway / ADC Memory Disclosure | Web App Scanning | Component Vulnerability | 12/11/2025 | critical |
| 113067 | Basic Authentication Bruteforced | Web App Scanning | Authentication & Session | 12/11/2025 | high |
| 113164 | AWS Credentials Disclosure (deprecated) | Web App Scanning | Data Exposure | 12/8/2025 | medium |
| 113150 | Google Cloud Service Account Private Key Disclosure (deprecated) | Web App Scanning | Data Exposure | 12/8/2025 | high |
| 98112 | Cross-Site Request Forgery | Web App Scanning | Cross Site Request Forgery | 12/4/2025 | medium |
| 98115 | SQL Injection | Web App Scanning | Injection | 11/24/2025 | high |
| 114947 | User Enumeration | Web App Scanning | Data Exposure | 11/24/2025 | medium |
| 113448 | Microsoft Access Database Detected | Web App Scanning | Data Exposure | 11/24/2025 | medium |
| 113058 | Apache 2.4.10 < 2.4.44 Source Code Disclosure | Web App Scanning | Component Vulnerability | 11/24/2025 | high |
| 98146 | Password Submitted Using GET Method | Web App Scanning | Web Applications | 11/17/2025 | medium |
| 115040 | Fortinet FortiWeb Authentication Bypass | Web App Scanning | Component Vulnerability | 11/17/2025 | critical |
| 115029 | Lucee Unset Credentials | Web App Scanning | Web Applications | 11/17/2025 | critical |
| 115027 | Lucee Administration Panel Login Form Detected | Web App Scanning | Web Applications | 11/17/2025 | medium |
| 114128 | External Backend API Detected | Web App Scanning | General | 11/17/2025 | info |
| 112685 | Symfony Secret Fragments Remote Code Execution | Web App Scanning | Component Vulnerability | 11/17/2025 | critical |
| 114607 | Drupal 8.0.x < 10.3.13 Multiple Vulnerabilities | Web App Scanning | Component Vulnerability | 11/13/2025 | medium |
| 114606 | Drupal 10.4.x < 10.4.3 Multiple Vulnerabilities | Web App Scanning | Component Vulnerability | 11/13/2025 | medium |
| 114605 | Drupal 11.0.x < 11.0.12 Multiple Vulnerabilities | Web App Scanning | Component Vulnerability | 11/13/2025 | medium |
| 114604 | Drupal 11.1.x < 11.1.3 Multiple Vulnerabilities | Web App Scanning | Component Vulnerability | 11/13/2025 | medium |
| 114262 | Request URL Override | Web App Scanning | Web Applications | 11/10/2025 | medium |
| 113900 | Cross-Site Request Forgery Token Validation Bypass | Web App Scanning | Cross Site Request Forgery | 11/10/2025 | medium |
| 98646 | .DS_Store File Detected | Web App Scanning | Data Exposure | 11/4/2025 | medium |
| 98611 | Error Message | Web App Scanning | Data Exposure | 11/4/2025 | info |
| 98000 | Scan Information | Web App Scanning | General | 11/4/2025 | info |
| 115006 | Custom HTTP Header Detected | Web App Scanning | Web Applications | 11/4/2025 | info |
| 114899 | Bootstrap 4.x <= 4.6.2 Cross-Site Scripting (deprecated) | Web App Scanning | Component Vulnerability | 11/4/2025 | medium |
