| 114867 | GraphQL 查询长度无限制 | Web App Scanning | Web Applications | 2025/9/3 | medium |
| 114796 | 内容安全策略缺少“report-to” | Web App Scanning | HTTP Security Header | 2025/9/3 | low |
| 114232 | PHP Development Server < 7.4.22 源泄露 | Web App Scanning | Web Applications | 2025/9/3 | medium |
| 113059 | 检测到 OPcache UI | Web App Scanning | Web Applications | 2025/9/3 | medium |
| 114699 | Moodle 4.3.x < 4.3.10 多个漏洞 | Web App Scanning | Component Vulnerability | 2025/7/31 | critical |
| 113258 | OpenAPI 宽松输入验证 | Web App Scanning | Web Applications | 2025/7/28 | medium |
| 114902 | 不支持的 Bootstrap 版本 | Web App Scanning | Component Vulnerability | 2025/7/24 | critical |
| 114901 | Bootstrap 3.2.x <= 3.4.1 跨站脚本 | Web App Scanning | Component Vulnerability | 2025/7/24 | medium |
| 114900 | Bootstrap < 4.0.0 多站脚本 | Web App Scanning | Component Vulnerability | 2025/7/24 | medium |
| 114029 | 检测到广为人知的 URI | Web App Scanning | Web Applications | 2025/7/18 | info |
| 98109 | 基于 DOM 的跨站脚本 (XSS) | Web App Scanning | Cross Site Scripting | 2025/7/10 | medium |
| 114885 | MCP服务器SSE的DNS重绑定 | Web App Scanning | Artificial Intelligence | 2025/7/3 | medium |
| 114655 | 检测到 SimpleHelp | Web App Scanning | Component Vulnerability | 2025/7/3 | info |
| 113369 | BackupBuddy Plugin for WordPress < 8.7.5 任意文件读取 | Web App Scanning | Component Vulnerability | 2025/7/3 | high |
| 112439 | 服务器端请求伪造 | Web App Scanning | Web Applications | 2025/7/3 | high |
| 114313 | 检测到 Flowise Chatflow | Web App Scanning | Artificial Intelligence | 2025/6/26 | info |
| 114590 | Microsoft Exchange Autodiscover V2 用户枚举 | Web App Scanning | Web Applications | 2025/6/24 | medium |
| 113057 | Microsoft Exchange Server 自动发现跨站脚本 | Web App Scanning | Component Vulnerability | 2025/6/24 | medium |
| 114791 | MCP 服务器未经认证的访问 | Web App Scanning | Artificial Intelligence | 2025/6/18 | info |
| 98074 | 备份文件 | Web App Scanning | Data Exposure | 2025/6/17 | medium |
| 113195 | 检测到 Spring Boot 执行器 | Web App Scanning | Component Vulnerability | 2025/6/17 | info |
| 112290 | Apache Tomcat 9.0.0.M1 < 9.0.10 多个漏洞 | Web App Scanning | Component Vulnerability | 2025/6/17 | critical |
| 114784 | Citrix Netscaler 14.1.x < 14.1-25.53 信息披露 | Web App Scanning | Component Vulnerability | 2025/6/6 | critical |
| 113908 | Advanced Custom Fields Pro for WordPress 6.0.x < 6.1.6 跨站脚本 | Web App Scanning | Component Vulnerability | 2025/6/4 | medium |
| 113906 | Advanced Custom Fields for WordPress 6.0.x < 6.1.6 跨站脚本 | Web App Scanning | Component Vulnerability | 2025/6/4 | medium |
| 112907 | 检测到 GraphQL 界面 | Web App Scanning | Web Applications | 2025/6/4 | info |
| 114795 | FortiOS 7.0.x < 7.0.13 / 7.2.x < 7.2.6 / 7.4.x < 7.4.2 远程代码执行 | Web App Scanning | Component Vulnerability | 2025/5/27 | critical |
| 98080 | 基于表单的文件上传 | Web App Scanning | Web Applications | 2025/5/22 | info |
| 114434 | Flask 弱密钥 | Web App Scanning | Web Applications | 2025/5/22 | high |
| 114006 | Web 缓存中毒拒绝服务 | Web App Scanning | Web Applications | 2025/5/22 | high |
| 98648 | 缺少“Content-Type”标头 | Web App Scanning | HTTP Security Header | 2025/5/16 | low |
| 98623 | 主机标头注入 | Web App Scanning | Injection | 2025/5/16 | medium |
| 98056 | 缺少 HTTP 严格传输安全策略 | Web App Scanning | HTTP Security Header | 2025/5/16 | medium |
| 114166 | 检测到 SOAP API | Web App Scanning | Web Applications | 2025/5/16 | info |
| 113973 | 检测到 Web Services Description Language (WSDL) 文件 | Web App Scanning | Web Applications | 2025/5/16 | info |
| 113373 | Atlassian Bitbucket 远程代码执行 | Web App Scanning | Component Vulnerability | 2025/5/16 | high |
| 114615 | 用户名泄露 | Web App Scanning | Data Exposure | 2025/4/29 | low |
| 114357 | 检测到 Polyfill | Web App Scanning | Component Vulnerability | 2025/4/29 | medium |
| 98125 | 本地文件包含 | Web App Scanning | File Inclusion | 2025/4/17 | high |
| 98123 | 操作系统命令注入 | Web App Scanning | Code Execution | 2025/4/17 | critical |
| 98100 | 路径遍历 | Web App Scanning | Web Applications | 2025/4/17 | high |
| 114168 | Jenkins < 2.442/ < LTS 2.426.3 任意文件读取 | Web App Scanning | Component Vulnerability | 2025/4/17 | critical |
| 113634 | 服务器端包含注入 | Web App Scanning | Injection | 2025/4/17 | high |
| 112720 | Rails < 4.2.11.3/5.x < 5.0.1 远程代码执行 | Web App Scanning | Component Vulnerability | 2025/4/17 | high |
| 112706 | Oracle WebLogic 10.3.6.0.0/12.1.3.0.0/12.2.1.3.0 远程代码执行 | Web App Scanning | Component Vulnerability | 2025/4/17 | critical |
| 112704 | Oracle WebLogic 10.3.6.0.0/12.1.3.0.0 远程代码执行 | Web App Scanning | Component Vulnerability | 2025/4/17 | critical |
| 112545 | 检测到 Oracle WebLogic 服务器管理控制台 | Web App Scanning | Web Applications | 2025/4/17 | medium |
| 112524 | Oracle WebLogic WSAT 远程代码执行 | Web App Scanning | Component Vulnerability | 2025/4/17 | critical |
| 114668 | Langflow < 1.3.0 未经身份验证的远程代码执行 | Web App Scanning | Artificial Intelligence | 2025/4/10 | critical |
| 113452 | 检测到 WordPress 插件 | Web App Scanning | Web Applications | 2025/4/10 | info |
