114232 | PHP Development Server < 7.4.22 Source Disclosure | Web App Scanning | Web Applications | 8/11/2025 | medium |
114699 | Moodle 4.3.x < 4.3.10 Multiple Vulnerabilities | Web App Scanning | Component Vulnerability | 7/31/2025 | critical |
114129 | Secret Data Disclosure | Web App Scanning | Data Exposure | 7/28/2025 | high |
113258 | OpenAPI Permissive Input Validation | Web App Scanning | Web Applications | 7/28/2025 | medium |
114902 | Bootstrap Unsupported Version | Web App Scanning | Component Vulnerability | 7/24/2025 | critical |
114901 | Bootstrap 3.2.x <= 3.4.1 Cross-Site Scripting | Web App Scanning | Component Vulnerability | 7/24/2025 | medium |
114900 | Bootstrap < 4.0.0 Multiples Cross-Site Scripting | Web App Scanning | Component Vulnerability | 7/24/2025 | medium |
113310 | Blind XPath Injection (differential analysis) | Web App Scanning | Injection | 7/24/2025 | high |
114790 | MCP Server Detected | Web App Scanning | Artificial Intelligence | 7/22/2025 | info |
114276 | Database Connection String Disclosure | Web App Scanning | Data Exposure | 7/22/2025 | high |
114029 | Well-Known URIs Detected | Web App Scanning | Web Applications | 7/18/2025 | info |
98109 | DOM-based Cross-Site Scripting (XSS) | Web App Scanning | Cross Site Scripting | 7/10/2025 | medium |
114885 | MCP Server SSE DNS Rebinding | Web App Scanning | Artificial Intelligence | 7/3/2025 | medium |
114655 | SimpleHelp Detected | Web App Scanning | Component Vulnerability | 7/3/2025 | info |
114116 | XML Injection | Web App Scanning | Injection | 7/3/2025 | high |
113369 | BackupBuddy Plugin for WordPress < 8.7.5 Arbitrary File Read | Web App Scanning | Component Vulnerability | 7/3/2025 | high |
112439 | Server-Side Request Forgery | Web App Scanning | Web Applications | 7/3/2025 | high |
114313 | Flowise Chatflow Detected | Web App Scanning | Artificial Intelligence | 6/26/2025 | info |
113057 | Microsoft Exchange Server Autodiscover Cross-Site Scripting | Web App Scanning | Component Vulnerability | 6/24/2025 | medium |
113900 | Cross-Site Request Forgery Token Validation Bypass | Web App Scanning | Cross Site Request Forgery | 6/20/2025 | medium |
114791 | MCP Server Unauthenticated Access | Web App Scanning | Artificial Intelligence | 6/18/2025 | info |
98074 | Backup File | Web App Scanning | Data Exposure | 6/17/2025 | medium |
113195 | Spring Boot Actuator Detected | Web App Scanning | Component Vulnerability | 6/17/2025 | info |
112290 | Apache Tomcat 9.0.0.M1 < 9.0.10 Multiple Vulnerabilities | Web App Scanning | Component Vulnerability | 6/17/2025 | critical |
114784 | Citrix Netscaler 14.1.x < 14.1-25.53 Information Disclosure | Web App Scanning | Component Vulnerability | 6/6/2025 | critical |
98008 | Web Application Firewall Detected | Web App Scanning | General | 6/4/2025 | info |
113908 | Advanced Custom Fields Pro for WordPress 6.0.x < 6.1.6 Cross-Site Scripting | Web App Scanning | Component Vulnerability | 6/4/2025 | medium |
113906 | Advanced Custom Fields for WordPress 6.0.x < 6.1.6 Cross-Site Scripting | Web App Scanning | Component Vulnerability | 6/4/2025 | medium |
112907 | GraphQL Interface Detected | Web App Scanning | Web Applications | 6/4/2025 | info |
114795 | FortiOS 7.0.x < 7.0.13 / 7.2.x < 7.2.6 / 7.4.x < 7.4.2 Remote Code Execution | Web App Scanning | Component Vulnerability | 5/27/2025 | critical |
98080 | Form-based File Upload | Web App Scanning | Web Applications | 5/22/2025 | info |
114434 | Flask Weak Secret Key | Web App Scanning | Web Applications | 5/22/2025 | high |
114006 | Web Cache Poisoning Denial of Service | Web App Scanning | Web Applications | 5/22/2025 | high |
98779 | Source Code Passive Disclosure | Web App Scanning | Data Exposure | 5/16/2025 | medium |
98648 | Missing 'Content-Type' Header | Web App Scanning | HTTP Security Header | 5/16/2025 | low |
98623 | Host Header Injection | Web App Scanning | Injection | 5/16/2025 | medium |
98056 | Missing HTTP Strict Transport Security Policy | Web App Scanning | HTTP Security Header | 5/16/2025 | medium |
114166 | SOAP API Detected | Web App Scanning | Web Applications | 5/16/2025 | info |
113973 | Web Services Description Language (WSDL) File Detected | Web App Scanning | Web Applications | 5/16/2025 | info |
113943 | Disclosed Hong Kong Identity Number | Web App Scanning | Data Exposure | 5/16/2025 | medium |
113373 | Atlassian Bitbucket Remote Code Execution | Web App Scanning | Component Vulnerability | 5/16/2025 | high |
113217 | Spring Framework < 5.2.20 / 5.3.x < 5.3.18 Remote Code Execution (Spring4Shell) | Web App Scanning | Component Vulnerability | 5/16/2025 | critical |
114615 | Username Disclosure | Web App Scanning | Data Exposure | 4/29/2025 | low |
114357 | Polyfill Detected | Web App Scanning | Component Vulnerability | 4/29/2025 | medium |
98125 | Local File Inclusion | Web App Scanning | File Inclusion | 4/17/2025 | high |
98123 | Operating System Command Injection | Web App Scanning | Code Execution | 4/17/2025 | critical |
98100 | Path Traversal | Web App Scanning | Web Applications | 4/17/2025 | high |
114168 | Jenkins < 2.442 / < LTS 2.426.3 Arbitrary File Read | Web App Scanning | Component Vulnerability | 4/17/2025 | critical |
113634 | Server-Side Inclusion Injection | Web App Scanning | Injection | 4/17/2025 | high |
112720 | Rails < 4.2.11.3 / 5.x < 5.0.1 Remote Code Execution | Web App Scanning | Component Vulnerability | 4/17/2025 | high |