| 114791 | MCP 服务器未经认证的访问 | Web App Scanning | Artificial Intelligence | 2025/6/18 | info |
| 98074 | 备份文件 | Web App Scanning | Data Exposure | 2025/6/17 | medium |
| 113195 | 检测到 Spring Boot 执行器 | Web App Scanning | Component Vulnerability | 2025/6/17 | info |
| 112290 | Apache Tomcat 9.0.0.M1 < 9.0.10 多个漏洞 | Web App Scanning | Component Vulnerability | 2025/6/17 | critical |
| 114784 | Citrix Netscaler 14.1.x < 14.1-25.53 信息泄露 | Web App Scanning | Component Vulnerability | 2025/6/6 | critical |
| 113908 | Advanced Custom Fields Pro for WordPress 6.0.x < 6.1.6 跨站脚本 | Web App Scanning | Component Vulnerability | 2025/6/4 | medium |
| 113906 | Advanced Custom Fields for WordPress 6.0.x < 6.1.6 跨站脚本 | Web App Scanning | Component Vulnerability | 2025/6/4 | medium |
| 112907 | 检测到 GraphQL 界面 | Web App Scanning | Web Applications | 2025/6/4 | info |
| 114795 | FortiOS 7.0.x < 7.0.13 / 7.2.x < 7.2.6 / 7.4.x < 7.4.2 远程代码执行 | Web App Scanning | Component Vulnerability | 2025/5/27 | critical |
| 98080 | 基于表单的文件上传 | Web App Scanning | Web Applications | 2025/5/22 | info |
| 114434 | Flask 弱密钥 | Web App Scanning | Web Applications | 2025/5/22 | high |
| 114006 | Web 缓存中毒拒绝服务 | Web App Scanning | Web Applications | 2025/5/22 | high |
| 98648 | 缺少“Content-Type”标头 | Web App Scanning | HTTP Security Header | 2025/5/16 | low |
| 98623 | 主机标头注入 | Web App Scanning | Injection | 2025/5/16 | medium |
| 98056 | 缺少 HTTP 严格传输安全策略 | Web App Scanning | HTTP Security Header | 2025/5/16 | medium |
| 114166 | 检测到 SOAP API | Web App Scanning | Web Applications | 2025/5/16 | info |
| 113973 | 检测到 Web Services Description Language (WSDL) 文件 | Web App Scanning | Web Applications | 2025/5/16 | info |
| 113373 | Atlassian Bitbucket 远程代码执行 | Web App Scanning | Component Vulnerability | 2025/5/16 | high |
| 113217 | Spring Framework < 5.2.20/5.3.x < 5.3.18 远程代码执行漏洞 (Spring4Shell) | Web App Scanning | Component Vulnerability | 2025/5/16 | critical |
| 114615 | 用户名泄露 | Web App Scanning | Data Exposure | 2025/4/29 | low |
| 114357 | 检测到 Polyfill | Web App Scanning | Component Vulnerability | 2025/4/29 | medium |
| 98125 | 本地文件包含 | Web App Scanning | File Inclusion | 2025/4/17 | high |
| 98123 | 操作系统命令注入 | Web App Scanning | Code Execution | 2025/4/17 | critical |
| 98100 | 路径遍历 | Web App Scanning | Web Applications | 2025/4/17 | high |
| 114168 | Jenkins < 2.442/ < LTS 2.426.3 任意文件读取 | Web App Scanning | Component Vulnerability | 2025/4/17 | critical |
| 113634 | 服务器端包含注入 | Web App Scanning | Injection | 2025/4/17 | high |
| 112720 | Rails < 4.2.11.3/5.x < 5.0.1 远程代码执行 | Web App Scanning | Component Vulnerability | 2025/4/17 | high |
| 112706 | Oracle WebLogic 10.3.6.0.0/12.1.3.0.0/12.2.1.3.0 远程代码执行 | Web App Scanning | Component Vulnerability | 2025/4/17 | critical |
| 112704 | Oracle WebLogic 10.3.6.0.0/12.1.3.0.0 远程代码执行 | Web App Scanning | Component Vulnerability | 2025/4/17 | critical |
| 112545 | 检测到 Oracle WebLogic 服务器管理控制台 | Web App Scanning | Web Applications | 2025/4/17 | medium |
| 112524 | Oracle WebLogic WSAT 远程代码执行 | Web App Scanning | Component Vulnerability | 2025/4/17 | critical |
| 114668 | Langflow < 1.3.0 未经身份验证的远程代码执行 | Web App Scanning | Artificial Intelligence | 2025/4/10 | critical |
| 113452 | 检测到 WordPress 插件 | Web App Scanning | Web Applications | 2025/4/10 | info |
| 114681 | Next.js 13.0.x < 13.5.9 授权绕过 | Web App Scanning | Component Vulnerability | 2025/4/4 | critical |
| 114575 | Ollama 多个漏洞 | Web App Scanning | Component Vulnerability | 2025/4/4 | high |
| 98920 | 泄露的美国社会安全号码 | Web App Scanning | Data Exposure | 2025/4/3 | medium |
| 113168 | 检测到 Docker Compose 配置 | Web App Scanning | Data Exposure | 2025/3/28 | medium |
| 113123 | 检测到 Dockerfile | Web App Scanning | Data Exposure | 2025/3/28 | medium |
| 112541 | SSL/TLS 证书通用名不匹配 | Web App Scanning | SSL/TLS | 2025/3/28 | medium |
| 114386 | 检测到已损坏的外部资源 | Web App Scanning | Web Applications | 2025/3/24 | low |
| 98117 | SQL 盲注（差异分析） | Web App Scanning | Injection | 2025/3/18 | high |
| 114621 | 检测到 Docker 公共注册表 | Web App Scanning | Web Applications | 2025/3/18 | info |
| 114400 | Apache OFBiz < 18.12.11 服务器端请求伪造 | Web App Scanning | Component Vulnerability | 2025/3/18 | high |
| 98538 | 检测到环境配置文件 | Web App Scanning | Web Applications | 2025/3/11 | high |
| 98104 | 跨站脚本 (XSS) | Web App Scanning | Cross Site Scripting | 2025/3/11 | medium |
| 114614 | CraftCMS < 4.13.2 / 5.x < 5.5.2 远程代码执行 | Web App Scanning | Component Vulnerability | 2025/3/11 | critical |
| 98228 | Drupal 不受支持的版本 | Web App Scanning | Component Vulnerability | 2025/2/25 | critical |
| 98113 | XML 外部实体 | Web App Scanning | Injection | 2025/2/25 | critical |
| 98083 | CAPTCHA 检测 | Web App Scanning | Web Applications | 2025/2/25 | info |
| 113078 | AngularJS 不支持的版本 | Web App Scanning | Component Vulnerability | 2025/2/24 | high |
