| 115010 | Object-Relational Mapping (ORM) Leak | Web App Scanning | Injection | 10/24/2025 | high |
| 115006 | Custom HTTP Header Detected | Web App Scanning | Web Applications | 10/24/2025 | info |
| 114146 | Subdomain Takeover | Web App Scanning | Web Applications | 10/21/2025 | medium |
| 114129 | Secret Data Disclosure | Web App Scanning | Data Exposure | 10/21/2025 | high |
| 113158 | Package Dependencies Detected | Web App Scanning | Data Exposure | 10/21/2025 | medium |
| 112544 | HTTP to HTTPS Redirect Not Enabled | Web App Scanning | SSL/TLS | 10/21/2025 | medium |
| 115002 | Netdisco Unauthenticated Access | Web App Scanning | Web Applications | 10/7/2025 | medium |
| 114923 | Microsoft SharePoint Remote Code Execution | Web App Scanning | Component Vulnerability | 10/7/2025 | critical |
| 98205 | Joomla! User Registration Form Detected | Web App Scanning | Web Applications | 9/26/2025 | info |
| 98202 | WordPress User Registration Form Detected | Web App Scanning | Web Applications | 9/26/2025 | info |
| 98201 | Drupal User Registration Form Detected | Web App Scanning | Web Applications | 9/26/2025 | info |
| 98091 | Mixed Resource Detection | Web App Scanning | Web Applications | 9/19/2025 | medium |
| 98008 | Web Application Firewall Detected | Web App Scanning | General | 9/19/2025 | info |
| 114947 | User Enumeration | Web App Scanning | Data Exposure | 9/19/2025 | medium |
| 114502 | Cross-Site WebSocket Hijacking | Web App Scanning | Web Applications | 9/19/2025 | high |
| 113219 | Insecure Redirect Chain | Web App Scanning | SSL/TLS | 9/12/2025 | medium |
| 98779 | Source Code Passive Disclosure | Web App Scanning | Data Exposure | 9/3/2025 | medium |
| 98101 | Response Splitting | Web App Scanning | Web Applications | 9/3/2025 | medium |
| 98054 | Unvalidated Redirection | Web App Scanning | Web Applications | 9/3/2025 | medium |
| 114867 | GraphQL Query Length Not Limited | Web App Scanning | Web Applications | 9/3/2025 | medium |
| 114796 | Content Security Policy Missing 'Report-To' | Web App Scanning | HTTP Security Header | 9/3/2025 | low |
| 114232 | PHP Development Server < 7.4.22 Source Disclosure | Web App Scanning | Web Applications | 9/3/2025 | medium |
| 113943 | Disclosed Hong Kong Identity Number | Web App Scanning | Data Exposure | 9/3/2025 | medium |
| 113059 | OPcache UI Detected | Web App Scanning | Web Applications | 9/3/2025 | medium |
| 114247 | Authentication Check Pattern Found in Unauthenticated Browser | Web App Scanning | Authentication & Session | 8/29/2025 | info |
| 114699 | Moodle 4.3.x < 4.3.10 Multiple Vulnerabilities | Web App Scanning | Component Vulnerability | 7/31/2025 | critical |
| 113258 | OpenAPI Permissive Input Validation | Web App Scanning | Web Applications | 7/28/2025 | medium |
| 114902 | Bootstrap Unsupported Version | Web App Scanning | Component Vulnerability | 7/24/2025 | critical |
| 114901 | Bootstrap 3.2.x <= 3.4.1 Cross-Site Scripting | Web App Scanning | Component Vulnerability | 7/24/2025 | medium |
| 114900 | Bootstrap < 4.0.0 Multiples Cross-Site Scripting | Web App Scanning | Component Vulnerability | 7/24/2025 | medium |
| 113310 | Blind XPath Injection (differential analysis) | Web App Scanning | Injection | 7/24/2025 | high |
| 114790 | MCP Server Detected | Web App Scanning | Artificial Intelligence | 7/22/2025 | info |
| 114276 | Database Connection String Disclosure | Web App Scanning | Data Exposure | 7/22/2025 | high |
| 114029 | Well-Known URIs Detected | Web App Scanning | Web Applications | 7/18/2025 | info |
| 98109 | DOM-based Cross-Site Scripting (XSS) | Web App Scanning | Cross Site Scripting | 7/10/2025 | medium |
| 114885 | MCP Server SSE DNS Rebinding | Web App Scanning | Artificial Intelligence | 7/3/2025 | medium |
| 114655 | SimpleHelp Detected | Web App Scanning | Component Vulnerability | 7/3/2025 | info |
| 114116 | XML Injection | Web App Scanning | Injection | 7/3/2025 | high |
| 113369 | BackupBuddy Plugin for WordPress < 8.7.5 Arbitrary File Read | Web App Scanning | Component Vulnerability | 7/3/2025 | high |
| 112439 | Server-Side Request Forgery | Web App Scanning | Web Applications | 7/3/2025 | high |
| 114313 | Flowise Chatflow Detected | Web App Scanning | Artificial Intelligence | 6/26/2025 | info |
| 114590 | Microsoft Exchange Autodiscover V2 User Enumeration | Web App Scanning | Web Applications | 6/24/2025 | medium |
| 113057 | Microsoft Exchange Server Autodiscover Cross-Site Scripting | Web App Scanning | Component Vulnerability | 6/24/2025 | medium |
| 113900 | Cross-Site Request Forgery Token Validation Bypass | Web App Scanning | Cross Site Request Forgery | 6/20/2025 | medium |
| 114791 | MCP Server Unauthenticated Access | Web App Scanning | Artificial Intelligence | 6/18/2025 | info |
| 98074 | Backup File | Web App Scanning | Data Exposure | 6/17/2025 | medium |
| 113195 | Spring Boot Actuator Detected | Web App Scanning | Component Vulnerability | 6/17/2025 | info |
| 112290 | Apache Tomcat 9.0.0.M1 < 9.0.10 Multiple Vulnerabilities | Web App Scanning | Component Vulnerability | 6/17/2025 | critical |
| 114784 | Citrix Netscaler 14.1.x < 14.1-25.53 Information Disclosure | Web App Scanning | Component Vulnerability | 6/6/2025 | critical |
| 113908 | Advanced Custom Fields Pro for WordPress 6.0.x < 6.1.6 Cross-Site Scripting | Web App Scanning | Component Vulnerability | 6/4/2025 | medium |
