| 98109 | DOM-based Cross-Site Scripting (XSS) | Web App Scanning | Cross Site Scripting | 7/10/2025 | medium |
| 114885 | MCP Server SSE DNS Rebinding | Web App Scanning | Artificial Intelligence | 7/3/2025 | medium |
| 114655 | SimpleHelp Detected | Web App Scanning | Component Vulnerability | 7/3/2025 | info |
| 114129 | Secret Data Disclosure | Web App Scanning | Data Exposure | 7/3/2025 | high |
| 114116 | XML Injection | Web App Scanning | Injection | 7/3/2025 | high |
| 113369 | BackupBuddy Plugin for WordPress < 8.7.5 Arbitrary File Read | Web App Scanning | Component Vulnerability | 7/3/2025 | high |
| 112439 | Server-Side Request Forgery | Web App Scanning | Web Applications | 7/3/2025 | high |
| 114313 | Flowise Chatflow Detected | Web App Scanning | Artificial Intelligence | 6/26/2025 | info |
| 113057 | Microsoft Exchange Server Autodiscover Cross-Site Scripting | Web App Scanning | Component Vulnerability | 6/24/2025 | medium |
| 113900 | Cross-Site Request Forgery Token Validation Bypass | Web App Scanning | Cross Site Request Forgery | 6/20/2025 | medium |
| 114791 | MCP Server Unauthenticated Access | Web App Scanning | Artificial Intelligence | 6/18/2025 | info |
| 98074 | Backup File | Web App Scanning | Data Exposure | 6/17/2025 | medium |
| 114790 | MCP Server Detected | Web App Scanning | Artificial Intelligence | 6/17/2025 | info |
| 113195 | Spring Boot Actuator Detected | Web App Scanning | Component Vulnerability | 6/17/2025 | info |
| 112290 | Apache Tomcat 9.0.0.M1 < 9.0.10 Multiple Vulnerabilities | Web App Scanning | Component Vulnerability | 6/17/2025 | critical |
| 114784 | Citrix Netscaler 14.1.x < 14.1-25.53 Information Disclosure | Web App Scanning | Component Vulnerability | 6/6/2025 | critical |
| 98008 | Web Application Firewall Detected | Web App Scanning | General | 6/4/2025 | info |
| 113908 | Advanced Custom Fields Pro for WordPress 6.0.x < 6.1.6 Cross-Site Scripting | Web App Scanning | Component Vulnerability | 6/4/2025 | medium |
| 113906 | Advanced Custom Fields for WordPress 6.0.x < 6.1.6 Cross-Site Scripting | Web App Scanning | Component Vulnerability | 6/4/2025 | medium |
| 112907 | GraphQL Interface Detected | Web App Scanning | Web Applications | 6/4/2025 | info |
| 114795 | FortiOS 7.0.x < 7.0.13 / 7.2.x < 7.2.6 / 7.4.x < 7.4.2 Remote Code Execution | Web App Scanning | Component Vulnerability | 5/27/2025 | critical |
| 98080 | Form-based File Upload | Web App Scanning | Web Applications | 5/22/2025 | info |
| 114434 | Flask Weak Secret Key | Web App Scanning | Web Applications | 5/22/2025 | high |
| 114006 | Web Cache Poisoning Denial of Service | Web App Scanning | Web Applications | 5/22/2025 | high |
| 98779 | Source Code Passive Disclosure | Web App Scanning | Data Exposure | 5/16/2025 | medium |
| 98648 | Missing 'Content-Type' Header | Web App Scanning | HTTP Security Header | 5/16/2025 | low |
| 98623 | Host Header Injection | Web App Scanning | Injection | 5/16/2025 | medium |
| 98056 | Missing HTTP Strict Transport Security Policy | Web App Scanning | HTTP Security Header | 5/16/2025 | medium |
| 114166 | SOAP API Detected | Web App Scanning | Web Applications | 5/16/2025 | info |
| 113973 | Web Services Description Language (WSDL) File Detected | Web App Scanning | Web Applications | 5/16/2025 | info |
| 113943 | Disclosed Hong Kong Identity Number | Web App Scanning | Data Exposure | 5/16/2025 | medium |
| 113373 | Atlassian Bitbucket Remote Code Execution | Web App Scanning | Component Vulnerability | 5/16/2025 | high |
| 113217 | Spring Framework < 5.2.20 / 5.3.x < 5.3.18 Remote Code Execution (Spring4Shell) | Web App Scanning | Component Vulnerability | 5/16/2025 | critical |
| 114615 | Username Disclosure | Web App Scanning | Data Exposure | 4/29/2025 | low |
| 114357 | Polyfill Detected | Web App Scanning | Component Vulnerability | 4/29/2025 | medium |
| 98125 | Local File Inclusion | Web App Scanning | File Inclusion | 4/17/2025 | high |
| 98123 | Operating System Command Injection | Web App Scanning | Code Execution | 4/17/2025 | critical |
| 98100 | Path Traversal | Web App Scanning | Web Applications | 4/17/2025 | high |
| 114168 | Jenkins < 2.442 / < LTS 2.426.3 Arbitrary File Read | Web App Scanning | Component Vulnerability | 4/17/2025 | critical |
| 113634 | Server-Side Inclusion Injection | Web App Scanning | Injection | 4/17/2025 | high |
| 112720 | Rails < 4.2.11.3 / 5.x < 5.0.1 Remote Code Execution | Web App Scanning | Component Vulnerability | 4/17/2025 | high |
| 112706 | Oracle WebLogic 10.3.6.0.0 / 12.1.3.0.0 / 12.2.1.3.0 Remote Code Execution | Web App Scanning | Component Vulnerability | 4/17/2025 | critical |
| 112704 | Oracle WebLogic 10.3.6.0.0 / 12.1.3.0.0 Remote Code Execution | Web App Scanning | Component Vulnerability | 4/17/2025 | critical |
| 112545 | Oracle WebLogic Server Administration Console Detected | Web App Scanning | Web Applications | 4/17/2025 | medium |
| 112524 | Oracle WebLogic WSAT Remote Code Execution | Web App Scanning | Component Vulnerability | 4/17/2025 | critical |
| 114668 | Langflow < 1.3.0 Unauthenticated Remote Code Execution | Web App Scanning | Artificial Intelligence | 4/10/2025 | critical |
| 113452 | WordPress Plugins Detected | Web App Scanning | Web Applications | 4/10/2025 | info |
| 114681 | Next.js 13.0.x < 13.5.9 Authorization Bypass | Web App Scanning | Component Vulnerability | 4/4/2025 | critical |
| 114575 | Ollama Multiples Vulnerabilities | Web App Scanning | Component Vulnerability | 4/4/2025 | high |
| 98920 | Disclosed US Social Security Number | Web App Scanning | Data Exposure | 4/3/2025 | medium |
