Findings

All discovered vulnerabilities across your projects

TOTAL FINDINGS

0

+4

new this week

AFFECTED HOSTS

0

+3

new hosts

CREDENTIALS

0

+5

exposed

SERVICES

0

+2

new

Severity Distribution14 total

All Findings

Domain Admin Compromise via Kerberoasting

Domain Compromise · CWE-916

/auth/kerberos

Acme Corp4 hosts

Remote Code Execution — Spring Boot Actuator

Remote Code Execution · CWE-94

/actuator/env

TechStart Inc3 hosts

SQL Injection — User Authentication Endpoint

Injection · CWE-89

/api/auth/login

Global Retail Co1 hosts

Exposed JMX Service — Unauthenticated Access

Service Exploitation · CWE-306

FinServ Group3 hosts

LDAP Injection via Search Parameter

Injection · CWE-90

/api/directory/search

Acme Corp2 hosts

Privilege Escalation — Misconfigured sudo Rules

Privilege Escalation · CWE-269

HealthcarePro2 hosts

Cross-Site Scripting (Stored) — Comment Field

Client-Side Attack · CWE-79

/api/comments

NovaTech Solutions1 hosts

Outdated TLS 1.0 Enabled on HTTPS Endpoint

Configuration Weakness · CWE-326

Acme Corp3 hosts

Missing HTTP Security Headers (CSP, HSTS)

Configuration Weakness · CWE-693

TechStart Inc2 hosts

Default Credentials on Admin Panel

Credential Weakness · CWE-798

Global Retail Co1 hosts

All Findings

Severity		CWE		Affected	Time	Status	Assignee
Critical	Domain Admin Compromise via KerberoastingDomain Compromise · Acme Corp`/auth/kerberos`	CWE-916	9.8	dc01.acmecorp.comdc02.acmecorp.comsrv-app01+7	2m 34s	Open	Sarah
Critical	Remote Code Execution — Spring Boot ActuatorRemote Code Execution · TechStart Inc`/actuator/env`	CWE-94	9.6	api.techstart.io10.2.1.1510.2.1.16+2	45s	In Progress	James
Critical	SQL Injection — User Authentication EndpointInjection · Global Retail Co`/api/auth/login`	CWE-89	9.1	auth.globalretail.couser_credentialspayment_info+2	1m 12s	Open
High	Exposed JMX Service — Unauthenticated AccessService Exploitation · FinServ Group`/jmx-console`	CWE-306	8.4	jmx.finservgroup.com172.16.0.22172.16.0.23+4	5m 18s	Open	Priya
High	LDAP Injection via Search ParameterInjection · Acme Corp`/api/directory/search`	CWE-90	8.1	ldap.acmecorp.cominternal.acmecorp.comldap_bind+3	3m 47s	In Progress	Sarah
High	Privilege Escalation — Misconfigured sudo RulesPrivilege Escalation · HealthcarePro`/etc/sudoers`	CWE-269	7.8	web01.healthcarepro.orgweb02.healthcarepro.orgwww-data+3	8m 02s	Resolved	Michael
High	Cross-Site Scripting (Stored) — Comment FieldClient-Side Attack · NovaTech Solutions`/api/comments`	CWE-79	7.2	app.novatech.devsession_tokensHTTP:443	12m 15s	Open
Medium	Outdated TLS 1.0 Enabled on HTTPS EndpointConfiguration Weakness · Acme Corp`/ssl/config`	CWE-326	6.5	legacy.acmecorp.com10.1.0.5010.1.0.51+3	—	Accepted Risk	James
Medium	Missing HTTP Security Headers (CSP, HSTS)Configuration Weakness · TechStart Inc`/headers`	CWE-693	5.9	app.techstart.iocdn.techstart.ioHTTP:443+1	—	In Progress	Priya
Medium	Default Credentials on Admin PanelCredential Weakness · Global Retail Co`/admin/login`	CWE-798	5.3	admin.globalretail.coadmin:adminroot:toor+1	30s	Resolved	Michael

Showing 1–10 of 14 findings