SharePoint Web Services Exposed to Anonymous Access #920401 Valid Information Disclosure Medium 2020-11-24 – 1 [CVE-2020-3452] Unauthenticated file read in Cisco ASA #1415825 Valid File and Path Handling Critical 2022-02-14 – 1 [CVE-2020-3452] Unauthenticated file read in Cisco ASA #1555021 Valid File and Path Handling High 2022-05-12 – 3 SharePoint Web Services Exposed to Anonymous Access #920403 Valid Access Control Medium 2020-11-24 – 4 [CVE-2020-3452] Unauthenticated file read in Cisco ASA #951530 Valid File and Path Handling High 2020-10-16 – 4 [CVE-2020-3452] Unauthenticated file read in Cisco ASA #1555015 Valid File and Path Handling High 2022-05-12 – 4 CVE-2020-3187 - Unauthenticated Arbitrary File Deletion #1555027 Valid File and Path Handling Critical 2022-05-12 – 6 https://██████ vulnerable to CVE-2020-3187 - Unauthenticated arbitrary file deletion in Cisco ASA/FTD #987090 Valid Memory Corruption Critical 2020-10-16 – 7 Unauthenticated PII leak on verified/requested to be verified profiles on ███████/app/org/{id}/profile/{id}/version/{id} [HtUS] #1627962 Valid Information Disclosure Medium 2022-10-14 – 7 Unauthenticated File Read Adobe ColdFusion #2870951 Valid Access Control High 2026-01-12 – 7 Pre-auth RCE in ForgeRock OpenAM (CVE-2021-35464) #1249456 Valid Command and Code Injection High 2021-07-29 – 8 CVE-2020-3452, unauthenticated file read in Cisco ASA & Cisco Firepower. #951508 Valid File and Path Handling High 2020-09-03 – 9 CVE-2020-3187 - Unauthenticated Arbitrary File Deletion #1555025 Valid File and Path Handling Critical 2022-05-12 – 9 Unauthenticated phpinfo()files could lead to ability file read at █████████ [HtUS] #1794884 Valid Cryptography Medium 2023-01-06 – 9 SharePoint Web Services Exposed to Anonymous Access Users #807915 Valid Access Control Medium 2020-07-14 – 10 Unauthenticated Arbitrary File Deletion ("CVE-2020-3187") in ████████ #978335 Valid File and Path Handling Critical 2020-09-29 – 10 Unauthenticated Arbitrary File Deletion "CVE-2020-3187" in █████ #1026265 Valid File and Path Handling Critical 2020-11-23 – 10 Pre-auth RCE in ForgeRock OpenAM (CVE-2021-35464) #1248040 Valid Command and Code Injection High 2021-07-29 – 11 Unauthenticated File Read Adobe ColdFusion #2248781 Valid Access Control High 2023-12-21 – 11 Unauthenticated arbitrary file upload on the https://█████/ (█████.mil) #698793 Valid Misconfiguration and Insecure Design High 2024-07-19 – 12 Remote Code Execution - Unauthenticated Remote Command Injection (via Microsoft SharePoint CVE-2019-0604) Analysed #534630 Valid Command and Code Injection High 2020-05-11 – 13 Unauthorized Access to Internal Server Panel without Authentication Analysed #1548067 Valid Access Control Medium 2022-06-27 – 13 Unauthenticated access to internal API at██████████.███.edu [HtUS] Analysed #1627980 Valid Access Control High 2024-07-19 – 13 Unauthenticated Access to Admin Panel Functions at https://███████/███ Analysed #1397564 Valid Access Control Critical 2021-11-29 – 14 [U.S. Air Force] Information disclosure due unauthenticated access to APIs and system browser functions Analysed #1822160 Valid Misconfiguration and Insecure Design Medium 2023-01-27 – 14 Unauth RCE on Jenkins Instance at https://█████████/ Analysed #1125329 Valid Command and Code Injection Critical 2021-03-24 – 15 IDOR + Account Takeover [UNAUTHENTICATED] Analysed #1004750 Valid Insecure Direct Object Reference Critical 2020-11-09 – 17 Elasticsearch is currently open without authentication on https://██████l Analysed #2231261 Valid Information Disclosure Medium 2023-12-21 – 17 Unauthenticated arbitrary file upload on the https://█████/ (█████████) Analysed #698789 Valid Misconfiguration and Insecure Design High 2024-08-16 – 19 https://██████ vulnerable to CVE-2020-3187 - Unauthenticated arbitrary file deletion in Cisco ASA/FTD Analysed #1031437 Valid Authentication Critical 2020-11-23 – 19 Unauth IDOR to mass account takeover without user interaction on the ███████ (https://███████.edu/) Analysed #685338 Valid Insecure Direct Object Reference High 2024-07-19 – 22 Docker Registry without authentication leads to docker images download Analysed #1989884 Valid Access Control Medium 2023-06-23 – 27 Unauthenticated Blind SSRF at https://█████ via xmlrpc.php file Analysed #1890719 Valid Server-Side Request Forgery High 2023-04-14 – 28 Unauthenticated Users Can Access Other Users’ Bug Report Attachments via Broken Access Control Analysed #3259610 Valid Insecure Direct Object Reference High 2026-01-12 – 28 Pre-auth RCE in ForgeRock OpenAM (CVE-2021-35464) Analysed #1248052 Valid Command and Code Injection High 2023-12-21 – 30 Unauthenticated Jenkins instance exposed information related to █████ Analysed #2178941 Valid Authentication High 2024-01-26 – 38 DoD workstation exposed to internet via TinyPilot KVM with no authentication Analysed #2633988 Valid Access Control Critical 2024-08-16 – 41 Create account without auth via response manipulation Analysed #2061982 Valid Input Validation and Logic Low 2026-01-12 – 42 Unauthenticated Access to Admin Panel Functions at https://██████████/████████ Analysed #1394910 Valid Access Control Critical 2021-11-29 – 47 Sensitive data exposure: █████████ candidate resumes/CVs available to download with no authentication through BAC/IDOR/Improper Salesforce config Analysed #2623715 Valid Access Control High 2024-12-18 – 55 Unauthenticated SQL Injection at █████████ [HtUS] Analysed #1626226 Valid SQL Injection Critical 2022-10-14 – 61 CVE-2020-7961 RCE Liferay Portal Unauthenticated via https://████████/ Analysed #2742457 Valid Command and Code Injection Critical 2024-10-25 – 62 Unauthenticated LFI (Local File Inclusion) using the symbol `!` At the target `https://████/` Analysed #2778380 Valid File and Path Handling High 2024-10-25 – 69 CVE-2020-3187 - Unauthenticated Arbitrary File Deletion Analysed #960330 Valid File and Path Handling Critical 2020-09-21 – 70 IDOR leading unauthenticated attacker to download documents discloses PII of users and soldiers via https://www.█████████/Download.aspx?id= [HtUS] Analysed #1626508 Valid Insecure Direct Object Reference High 2024-06-27 $500 77 [███████] Information disclosure due unauthenticated access to APIs and system browser functions Analysed #2122964 Valid Information Disclosure Medium 2023-11-03 – 97