Web App Vulnerabilities

1. Introduction Power Apps Application Detected refers to the presence of applications created using Microsoft Power Apps, a low-code development...

1. Introduction Power Apps OData Feeds Detected refers to publicly accessible data feeds created within Microsoft Power Apps. This allows...

1. Introduction The PowerPortal modules/private_messages/index.php Multiple Parame… vulnerability is a cross-site scripting (XSS) flaw in the PowerPortal content management system....

1. Introduction The Prado Framework sr Parameter Directory Traversal vulnerability affects web servers using the Prado Framework. This issue allows...

1. Introduction Prizm Content Connect contains a default configuration vulnerability in its ‘default.aspx’ document parameter, allowing remote file inclusion attacks....

1. Introduction The Progress MOVEit Transfer Web Interface Detection indicates that the web interface for Progress MOVEit Transfer is present...

1. Introduction Project Woodstock 404 Error Page UTF-7 Encoded XSS is a cross-site scripting vulnerability affecting web applications using Woodstock...

1. Introduction Prometheus Sensitive Endpoint Detected refers to a publicly accessible endpoint on a Prometheus monitoring server. Prometheus is designed...

1. Introduction The PPA functions.inc.php config[ppa_root_path] parameter is vulnerable to a remote file include attack. This means an attacker could...

1. Introduction Pprof debug files are output created by a profiling tool used for analysing application performance. If exposed via...