# Supported Security Tests and Vulnerability Categories

Escape supports `423` security tests. Use the table to filter tests by scanner and category.

All (423) GraphQL (162) REST (150) WebApp (330) ASM (343) Automated Pentest (200)

All Categories

| Name | Category | GraphQL | REST | WebApp | ASM | Automated Pentest |
| --- | --- | --- | --- | --- | --- | --- |
| [Access Control Vulnerability](<https://docs.escape.tech/documentation/reference/vulnerabilities/access_control_agent/>) | Access Control | No | No | No | No | No |
| [Apache Druid - Remote Code Execution (Apache Log4j)](<https://docs.escape.tech/documentation/reference/vulnerabilities/apache_druid_log4j/>) | Access Control | No | No | Yes | Yes | No |
| [Apache Flink - Remote Code Execution](<https://docs.escape.tech/documentation/reference/vulnerabilities/apache_flink_unauth_rce/>) | Access Control | No | No | Yes | Yes | No |
| [Apache NiFi - Remote Code Execution](<https://docs.escape.tech/documentation/reference/vulnerabilities/apache_nifi_rce/>) | Access Control | No | No | Yes | Yes | No |
| [Apache OFBiz - JNDI Remote Code Execution (Apache Log4j)](<https://docs.escape.tech/documentation/reference/vulnerabilities/apache_ofbiz_log4j_rce/>) | Access Control | No | No | Yes | Yes | No |
| [Apache Solr 7+ - Remote Code Execution (Apache Log4j)](<https://docs.escape.tech/documentation/reference/vulnerabilities/apache_solr_log4j_rce/>) | Access Control | No | No | Yes | Yes | No |
| [Apache Solr 9.1 - Remote Code Execution](<https://docs.escape.tech/documentation/reference/vulnerabilities/apache_solr_rce/>) | Access Control | No | No | Yes | Yes | No |
| [Apache Solr \<=8.8.1 - Local File Inclusion](<https://docs.escape.tech/documentation/reference/vulnerabilities/apache_solr_file_read/>) | Access Control | No | No | Yes | Yes | No |
| [Authentication Bypass](<https://docs.escape.tech/documentation/reference/vulnerabilities/authentication_bypass/>) | Access Control | Yes | Yes | Yes | No | Yes |
| [Broken Function Level Authorization](<https://docs.escape.tech/documentation/reference/vulnerabilities/broken_function_level_authorization/>) | Access Control | No | No | No | No | Yes |
| [Broken Object Level Authorization](<https://docs.escape.tech/documentation/reference/vulnerabilities/bola/>) | Access Control | Yes | Yes | Yes | Yes | Yes |
| [Broken Object Level Authorization](<https://docs.escape.tech/documentation/reference/vulnerabilities/bola_idor/>) | Access Control | No | No | No | No | Yes |
| [Broken Object Level Authorization](<https://docs.escape.tech/documentation/reference/vulnerabilities/frontend_bola/>) | Access Control | No | No | Yes | Yes | Yes |
| [Cassandra AllowAllAuthenticator Enabled](<https://docs.escape.tech/documentation/reference/vulnerabilities/cassandra_allow_all_authenticator/>) | Access Control | No | No | No | No | Yes |
| [ClickHouse Authentication Disabled](<https://docs.escape.tech/documentation/reference/vulnerabilities/clickhouse_no_auth/>) | Access Control | No | No | No | No | Yes |
| [DbGate Web Client - Unauthenticated Remote Command Execution](<https://docs.escape.tech/documentation/reference/vulnerabilities/dbgate_unauth_rce/>) | Access Control | No | No | Yes | Yes | No |
| [Default Credentials Used](<https://docs.escape.tech/documentation/reference/vulnerabilities/default_credentials_used/>) | Access Control | No | No | No | Yes | Yes |
| [Default MSSQL Credentials](<https://docs.escape.tech/documentation/reference/vulnerabilities/mssql_default_credentials/>) | Access Control | No | No | No | Yes | Yes |
| [Default MySQL Credentials](<https://docs.escape.tech/documentation/reference/vulnerabilities/mysql_default_credentials/>) | Access Control | No | No | No | Yes | Yes |
| [Default PostgreSQL Credentials](<https://docs.escape.tech/documentation/reference/vulnerabilities/psql_default_credentials/>) | Access Control | No | No | No | Yes | Yes |
| [Default SNMP Read Community](<https://docs.escape.tech/documentation/reference/vulnerabilities/snmp_default_read_community/>) | Access Control | No | No | No | No | Yes |
| [Default SNMP Write Community](<https://docs.escape.tech/documentation/reference/vulnerabilities/snmp_default_write_community/>) | Access Control | No | No | No | No | Yes |
| [Default SSH Credentials](<https://docs.escape.tech/documentation/reference/vulnerabilities/ssh_default_credentials/>) | Access Control | No | No | No | Yes | Yes |
| [Drupal 7 Elfinder - Remote Code Execution](<https://docs.escape.tech/documentation/reference/vulnerabilities/drupal7_elfinder_rce/>) | Access Control | No | No | Yes | Yes | No |
| [Drupal Avatar Uploader - Cross-Site Scripting](<https://docs.escape.tech/documentation/reference/vulnerabilities/drupal_avatar_xss/>) | Access Control | No | No | Yes | Yes | No |
| [Enabled SSH Password Authentication](<https://docs.escape.tech/documentation/reference/vulnerabilities/ssh_password_auth_enabled/>) | Access Control | No | No | No | Yes | Yes |
| [Enumeration of a parameter (API)](<https://docs.escape.tech/documentation/reference/vulnerabilities/bola_enum/>) | Access Control | Yes | Yes | Yes | No | Yes |
| [Exposed JDWP Debug Port](<https://docs.escape.tech/documentation/reference/vulnerabilities/jdwp_debug_port_exposed/>) | Access Control | No | No | No | No | Yes |
| [Exposed MSSQL Server](<https://docs.escape.tech/documentation/reference/vulnerabilities/mssql_exposed/>) | Access Control | No | No | No | Yes | Yes |
| [Exposed MySQL Server](<https://docs.escape.tech/documentation/reference/vulnerabilities/mysql_exposed/>) | Access Control | No | No | No | Yes | Yes |
| [Exposed Node.js Inspector](<https://docs.escape.tech/documentation/reference/vulnerabilities/node_inspector_exposed/>) | Access Control | No | No | No | No | Yes |
| [Exposed PHP-FPM Port](<https://docs.escape.tech/documentation/reference/vulnerabilities/phpfpm_port_exposed/>) | Access Control | No | No | No | No | Yes |
| [Exposed PostgreSQL Server](<https://docs.escape.tech/documentation/reference/vulnerabilities/psql_exposed/>) | Access Control | No | No | No | Yes | Yes |
| [GraphQL Authorization Bypass](<https://docs.escape.tech/documentation/reference/vulnerabilities/graphql_authz_bypass/>) | Access Control | Yes | No | No | Yes | Yes |
| [Improper Session Invalidation](<https://docs.escape.tech/documentation/reference/vulnerabilities/improper_session_invalidation/>) | Access Control | No | No | No | No | Yes |
| [InfluxDB Authentication Disabled](<https://docs.escape.tech/documentation/reference/vulnerabilities/influxdb_no_auth/>) | Access Control | No | No | No | No | Yes |
| [Infoblox NetMRI \< 7.6.1 - Remote Code Execution via Hardcoded Ruby Cookie Secret Key](<https://docs.escape.tech/documentation/reference/vulnerabilities/infoblox_netmri_rails_cookie_rce/>) | Access Control | No | No | Yes | Yes | No |
| [IoTaWatt Configuration App Exposure](<https://docs.escape.tech/documentation/reference/vulnerabilities/iotawatt_app_exposure/>) | Access Control | No | No | Yes | Yes | No |
| [Jolokia \<= 1.7.1 Information Leakage](<https://docs.escape.tech/documentation/reference/vulnerabilities/jolokia_tomcat_creds_leak/>) | Access Control | No | No | Yes | Yes | No |
| [Joomla JLex Review 6.0.1 - Cross-Site Scripting](<https://docs.escape.tech/documentation/reference/vulnerabilities/joomla_jlex_xss/>) | Access Control | No | No | Yes | Yes | No |
| [Joomla JVTwitter - Cross-Site Scripting](<https://docs.escape.tech/documentation/reference/vulnerabilities/joomla_jvtwitter_xss/>) | Access Control | No | No | Yes | Yes | No |
| [Joomla JoomBri Careers 3.3.0 - Cross-Site Scripting](<https://docs.escape.tech/documentation/reference/vulnerabilities/joomla_joombri_careers_xss/>) | Access Control | No | No | Yes | Yes | No |
| [Joomla MarvikShop ShoppingCart 3.4 - Cross-Site Scripting](<https://docs.escape.tech/documentation/reference/vulnerabilities/joomla_marvikshop_xss/>) | Access Control | No | No | Yes | Yes | No |
| [Joomla Solidres 2.13.3 - Cross-Site Scripting](<https://docs.escape.tech/documentation/reference/vulnerabilities/joomla_solidres_xss/>) | Access Control | No | No | Yes | Yes | No |
| [Joomla iProperty Real Estate 4.1.1 - Cross-Site Scripting](<https://docs.escape.tech/documentation/reference/vulnerabilities/joomla_iproperty_xss/>) | Access Control | No | No | Yes | Yes | No |
| [Joomla jMarket 5.15 - Cross-Site Scripting](<https://docs.escape.tech/documentation/reference/vulnerabilities/joomla_jmarket_xss/>) | Access Control | No | No | Yes | Yes | No |
| [Joomla! CMS \<=3.4.6 - Remote Code Execution](<https://docs.escape.tech/documentation/reference/vulnerabilities/rusty_joomla/>) | Access Control | No | No | Yes | Yes | No |
| [Jupyter Notebook - Remote Command Execution](<https://docs.escape.tech/documentation/reference/vulnerabilities/jupyter_notebook_rce/>) | Access Control | No | No | Yes | Yes | No |
| [MCP Server Accessible Without Authentication](<https://docs.escape.tech/documentation/reference/vulnerabilities/mcp_unauth/>) | Access Control | No | No | No | Yes | Yes |
| [MFA Bypass](<https://docs.escape.tech/documentation/reference/vulnerabilities/mfa_bypass/>) | Access Control | No | No | No | No | Yes |
| [Malwared BYOB - Unauthenticated Remote Code Execution](<https://docs.escape.tech/documentation/reference/vulnerabilities/malwared_byob_rce/>) | Access Control | No | No | Yes | Yes | No |
| [Memcached Authentication Disabled](<https://docs.escape.tech/documentation/reference/vulnerabilities/memcached_no_auth/>) | Access Control | No | No | No | No | Yes |
| [Missing Authentication](<https://docs.escape.tech/documentation/reference/vulnerabilities/missing_authentication/>) | Access Control | No | No | No | No | Yes |
| [MongoDB Authentication Disabled](<https://docs.escape.tech/documentation/reference/vulnerabilities/mongo_no_auth/>) | Access Control | No | No | No | No | Yes |
| [Multi User Access Control](<https://docs.escape.tech/documentation/reference/vulnerabilities/multi_user_access_control/>) | Access Control | Yes | Yes | Yes | No | Yes |
| [Neo4j Authentication Disabled](<https://docs.escape.tech/documentation/reference/vulnerabilities/neo4j_auth_disabled/>) | Access Control | No | No | No | No | Yes |
| [Nginx Server - Local File Inclusion](<https://docs.escape.tech/documentation/reference/vulnerabilities/nginx_merge_slashes_path_traversal/>) | Access Control | No | No | Yes | Yes | No |
| [Nginx Virtual Host Traffic Status Module - Cross-Site Scripting](<https://docs.escape.tech/documentation/reference/vulnerabilities/nginx_module_vts_xss/>) | Access Control | No | No | Yes | Yes | No |
| [Open SSH Server](<https://docs.escape.tech/documentation/reference/vulnerabilities/ssh_exposed/>) | Access Control | No | No | No | Yes | Yes |
| [PHP 8.1.0-dev - Backdoor Remote Code Execution](<https://docs.escape.tech/documentation/reference/vulnerabilities/php_zerodium_backdoor_rce/>) | Access Control | No | No | Yes | Yes | No |
| [PHP LDAP Admin \< 1.2.5 - Cross-Site Scripting](<https://docs.escape.tech/documentation/reference/vulnerabilities/phpldapadmin_xss/>) | Access Control | No | No | Yes | Yes | No |
| [PHP Timeclock \<=1.04 - Cross-Site Scripting](<https://docs.escape.tech/documentation/reference/vulnerabilities/php_timeclock_xss/>) | Access Control | No | No | Yes | Yes | No |
| [Path Traversal via File Upload](<https://docs.escape.tech/documentation/reference/vulnerabilities/file_upload_path_traversal/>) | Access Control | No | No | Yes | No | Yes |
| [Potentially Bruteforceable Login Form](<https://docs.escape.tech/documentation/reference/vulnerabilities/potentially_bruteforceable_login_form/>) | Access Control | No | No | No | Yes | Yes |
| [Private Data Exposure](<https://docs.escape.tech/documentation/reference/vulnerabilities/private_data/>) | Access Control | Yes | Yes | Yes | Yes | Yes |
| [React2Shell CVE-2025-55182 - Javascript RCE](<https://docs.escape.tech/documentation/reference/vulnerabilities/react2shell_2/>) | Access Control | No | No | Yes | Yes | No |
| [React2Shell CVE-2025-55182 - Shell RCE](<https://docs.escape.tech/documentation/reference/vulnerabilities/react2shell_1/>) | Access Control | No | No | Yes | Yes | No |
| [Ruby on Rails - CRLF Injection and Cross-Site Scripting](<https://docs.escape.tech/documentation/reference/vulnerabilities/rails6_xss/>) | Access Control | No | No | Yes | Yes | No |
| [Sangfor Log Center - Remote Command Execution](<https://docs.escape.tech/documentation/reference/vulnerabilities/sangfor_cphp_rce/>) | Access Control | No | No | Yes | Yes | No |
| [Session Fixation](<https://docs.escape.tech/documentation/reference/vulnerabilities/session_fixation/>) | Access Control | No | No | No | No | Yes |
| [ThinkPHP 2/3 - Remote Code Execution](<https://docs.escape.tech/documentation/reference/vulnerabilities/thinkphp_2_rce/>) | Access Control | No | No | Yes | Yes | No |
| [ThinkPHP 5.0.1 - Remote Code Execution](<https://docs.escape.tech/documentation/reference/vulnerabilities/thinkphp_501_rce/>) | Access Control | No | No | Yes | Yes | No |
| [ThinkPHP 5.0.23 - Remote Code Execution](<https://docs.escape.tech/documentation/reference/vulnerabilities/thinkphp_5023_rce/>) | Access Control | No | No | Yes | Yes | No |
| [ThinkPHP 6.0.0\~6.0.1 - Arbitrary File Write](<https://docs.escape.tech/documentation/reference/vulnerabilities/thinkphp6_arbitrary_write/>) | Access Control | No | No | Yes | Yes | No |
| [Twig PHP \<2.4.4 template engine - SSTI](<https://docs.escape.tech/documentation/reference/vulnerabilities/twig_php_ssti/>) | Access Control | No | No | Yes | Yes | No |
| [Unauthenticated DNS Dynamic Update](<https://docs.escape.tech/documentation/reference/vulnerabilities/dns_unauthenticated_dynamic_update/>) | Access Control | No | No | No | No | Yes |
| [Unauthenticated Modbus Write](<https://docs.escape.tech/documentation/reference/vulnerabilities/modbus_unauthenticated_write/>) | Access Control | No | No | No | No | Yes |
| [Unbound Session Token](<https://docs.escape.tech/documentation/reference/vulnerabilities/unbound_session_token/>) | Access Control | No | No | No | No | Yes |
| [Veeam Backup &amp; Replication - Unauthenticated](<https://docs.escape.tech/documentation/reference/vulnerabilities/cve_2024_40711/>) | Access Control | Yes | Yes | No | Yes | No |
| [WordPress Oembed Proxy - Server-Side Request Forgery](<https://docs.escape.tech/documentation/reference/vulnerabilities/wordpress_ssrf_oembed/>) | Access Control | No | No | Yes | Yes | No |
| [WordPress PHPFreeChat 0.2.8 - Cross-Site Scripting](<https://docs.escape.tech/documentation/reference/vulnerabilities/wp_phpfreechat_xss/>) | Access Control | No | No | Yes | Yes | No |
| [WordPress Woody Code Snippets \<2.4.6 - Cross-Site Scripting](<https://docs.escape.tech/documentation/reference/vulnerabilities/wp_insert_php_xss/>) | Access Control | No | No | Yes | Yes | No |
| [WordPress Wordfence - Cross-Site Scripting](<https://docs.escape.tech/documentation/reference/vulnerabilities/wordpress_wordfence_waf_bypass_xss/>) | Access Control | No | No | Yes | Yes | No |
| [WordPress Wordfence 7.4.6 - Cross-Site Scripting](<https://docs.escape.tech/documentation/reference/vulnerabilities/wordpress_wordfence_xss/>) | Access Control | No | No | Yes | Yes | No |
| [Xdebug remote code execution via xdebug.remote\_connect\_back](<https://docs.escape.tech/documentation/reference/vulnerabilities/php_xdebug_rce/>) | Access Control | No | No | Yes | Yes | No |
| [Zebra\_Form PHP Library \<= 2.9.8 - Cross-Site Scripting](<https://docs.escape.tech/documentation/reference/vulnerabilities/wordpress_zebra_form_xss/>) | Access Control | No | No | Yes | Yes | No |
| [ZenML ZenML Server - Improper Authentication](<https://docs.escape.tech/documentation/reference/vulnerabilities/cve_2024_25723/>) | Access Control | Yes | Yes | No | Yes | No |
| [Zip Slip via File Upload](<https://docs.escape.tech/documentation/reference/vulnerabilities/file_upload_zip_slip/>) | Access Control | No | No | Yes | No | Yes |
| [nginxWebUI ≤ 3.5.0 - Remote Command Execution](<https://docs.escape.tech/documentation/reference/vulnerabilities/nginx_webui_rce/>) | Access Control | No | No | Yes | Yes | No |
| [nginxWebUI ≤ 3.5.0 runCmd - Remote Command Execution](<https://docs.escape.tech/documentation/reference/vulnerabilities/nginxwebui_runcmd_rce/>) | Access Control | No | No | Yes | Yes | No |
| [ASP.NET ViewState Encryption](<https://docs.escape.tech/documentation/reference/vulnerabilities/asp_net_view_state_encryption/>) | Configuration | No | No | Yes | Yes | Yes |
| [ASP.NET ViewState MAC Validation Disabled](<https://docs.escape.tech/documentation/reference/vulnerabilities/asp_net_view_state_mac_validation_disabled/>) | Configuration | No | No | Yes | Yes | Yes |
| [Actuator Spring Boot Remote Restart](<https://docs.escape.tech/documentation/reference/vulnerabilities/springboot_actuator_restart/>) | Configuration | Yes | Yes | Yes | Yes | No |
| [Actuator Spring Boot Remote Shutdown](<https://docs.escape.tech/documentation/reference/vulnerabilities/springboot_actuator_shutdown/>) | Configuration | Yes | Yes | Yes | Yes | No |
| [Angular Development Build](<https://docs.escape.tech/documentation/reference/vulnerabilities/angular_development_build/>) | Configuration | No | No | Yes | Yes | Yes |
| [Business Logic](<https://docs.escape.tech/documentation/reference/vulnerabilities/business_logic_agent/>) | Configuration | No | No | No | No | Yes |
| [Business Logic (Negative Value)](<https://docs.escape.tech/documentation/reference/vulnerabilities/negative_value/>) | Configuration | Yes | Yes | Yes | No | Yes |
| [Client-Side State Tampering](<https://docs.escape.tech/documentation/reference/vulnerabilities/client_side_state_tampering/>) | Configuration | No | No | No | No | Yes |
| [CodiMD - File Upload](<https://docs.escape.tech/documentation/reference/vulnerabilities/codimd_unauth_file_upload/>) | Configuration | No | No | Yes | Yes | No |
| [Compromised Supply Chain](<https://docs.escape.tech/documentation/reference/vulnerabilities/compromised_supply_chain/>) | Configuration | No | No | Yes | Yes | Yes |
| [DNS record TXT length](<https://docs.escape.tech/documentation/reference/vulnerabilities/dnsrecord_txt_length/>) | Configuration | No | No | No | Yes | Yes |
| [DNS record loopback](<https://docs.escape.tech/documentation/reference/vulnerabilities/loopback/>) | Configuration | No | No | No | Yes | Yes |
| [DNSSEC Not Enabled](<https://docs.escape.tech/documentation/reference/vulnerabilities/dnssec_disabled/>) | Configuration | No | No | No | Yes | Yes |
| [Dangling CNAME record](<https://docs.escape.tech/documentation/reference/vulnerabilities/dangling_cname/>) | Configuration | No | No | No | Yes | Yes |
| [Domain Takeover](<https://docs.escape.tech/documentation/reference/vulnerabilities/domain_takeover/>) | Configuration | No | No | Yes | Yes | Yes |
| [Domain Takeover](<https://docs.escape.tech/documentation/reference/vulnerabilities/frontend_domain_takeover/>) | Configuration | No | No | No | No | No |
| [Excessive Browser Permissions](<https://docs.escape.tech/documentation/reference/vulnerabilities/excessive_browser_permissions/>) | Configuration | No | No | Yes | Yes | Yes |
| [File Upload Endpoint Detected](<https://docs.escape.tech/documentation/reference/vulnerabilities/file_upload_detected/>) | Configuration | No | No | Yes | No | Yes |
| [GraphQL IDE](<https://docs.escape.tech/documentation/reference/vulnerabilities/ide_enabled/>) | Configuration | Yes | No | No | Yes | Yes |
| [HTTP Method Override](<https://docs.escape.tech/documentation/reference/vulnerabilities/http_method_override/>) | Configuration | No | No | No | No | Yes |
| [HTTP without HTTPS Redirect](<https://docs.escape.tech/documentation/reference/vulnerabilities/http_no_https_redirect/>) | Configuration | No | No | No | Yes | Yes |
| [HTTP/2 Not Supported](<https://docs.escape.tech/documentation/reference/vulnerabilities/http2_not_supported/>) | Configuration | No | No | No | Yes | Yes |
| [Misconfigured DKIM DNS Record](<https://docs.escape.tech/documentation/reference/vulnerabilities/dkim/>) | Configuration | No | No | No | Yes | Yes |
| [Misconfigured DMARC DNS Record](<https://docs.escape.tech/documentation/reference/vulnerabilities/dmarc/>) | Configuration | No | No | No | Yes | Yes |
| [Missing PKCE](<https://docs.escape.tech/documentation/reference/vulnerabilities/missing_pkce/>) | Configuration | No | No | No | No | Yes |
| [Missing Subresource Integrity](<https://docs.escape.tech/documentation/reference/vulnerabilities/subresource_integrity_missing/>) | Configuration | No | No | Yes | Yes | Yes |
| [OAuth Grant Misconfiguration](<https://docs.escape.tech/documentation/reference/vulnerabilities/oauth_grant_misconfiguration/>) | Configuration | No | No | No | No | Yes |
| [Open DNS Recursive Resolver](<https://docs.escape.tech/documentation/reference/vulnerabilities/dns_open_recursive_resolver/>) | Configuration | No | No | No | No | Yes |
| [Permissive SPF DNS Record](<https://docs.escape.tech/documentation/reference/vulnerabilities/permisive_spf/>) | Configuration | No | No | No | Yes | Yes |
| [PhpMyAdmin - Unauthenticated Access](<https://docs.escape.tech/documentation/reference/vulnerabilities/phpmyadmin_unauth_access/>) | Configuration | No | No | Yes | Yes | No |
| [Private IP Disclosed in DNS Record](<https://docs.escape.tech/documentation/reference/vulnerabilities/dnsrecord_private_ip/>) | Configuration | No | No | No | Yes | Yes |
| [React Development Build](<https://docs.escape.tech/documentation/reference/vulnerabilities/react_development_build/>) | Configuration | No | No | Yes | Yes | Yes |
| [Request URL Override](<https://docs.escape.tech/documentation/reference/vulnerabilities/request_url_override/>) | Configuration | No | No | Yes | Yes | Yes |
| [Self Signed SSL Certificate](<https://docs.escape.tech/documentation/reference/vulnerabilities/self_signed_ssl/>) | Configuration | No | No | Yes | Yes | No |
| [Sensitive Data in DNS TXT Record](<https://docs.escape.tech/documentation/reference/vulnerabilities/dnsrecord_txt_sensitive/>) | Configuration | No | No | No | Yes | Yes |
| [Svelte Development Build](<https://docs.escape.tech/documentation/reference/vulnerabilities/svelte_development_build/>) | Configuration | No | No | Yes | Yes | Yes |
| [Unconfigured or Default Install](<https://docs.escape.tech/documentation/reference/vulnerabilities/frontend_page_fingerprint_unconfigured_webapp/>) | Configuration | No | No | No | Yes | Yes |
| [Unrestricted File Upload](<https://docs.escape.tech/documentation/reference/vulnerabilities/file_upload_unrestricted/>) | Configuration | No | No | Yes | No | Yes |
| [Unsafe Function Use](<https://docs.escape.tech/documentation/reference/vulnerabilities/unsafe_function_use/>) | Configuration | No | No | Yes | Yes | Yes |
| [Unusually High Number of Open Ports](<https://docs.escape.tech/documentation/reference/vulnerabilities/unusually_high_open_ports/>) | Configuration | No | No | No | Yes | Yes |
| [Vue.js Development Build](<https://docs.escape.tech/documentation/reference/vulnerabilities/vue_development_build/>) | Configuration | No | No | Yes | Yes | Yes |
| [WAF Bypass](<https://docs.escape.tech/documentation/reference/vulnerabilities/waf_bypass/>) | Configuration | No | No | No | Yes | Yes |
| [Weak Flask Session Secret](<https://docs.escape.tech/documentation/reference/vulnerabilities/flask_session_cookie/>) | Configuration | No | No | Yes | Yes | Yes |
| [Wildcard Ports Detected](<https://docs.escape.tech/documentation/reference/vulnerabilities/wildcard_ports_detected/>) | Configuration | No | No | No | Yes | Yes |
| [WordPress wp-config Detection](<https://docs.escape.tech/documentation/reference/vulnerabilities/wordpress_accessible_wpconfig/>) | Configuration | No | No | Yes | Yes | No |
| [XSS via Domain Takeover](<https://docs.escape.tech/documentation/reference/vulnerabilities/frontend_xss_via_domain_takeover/>) | Configuration | No | No | No | No | No |
| [Agentic Replay](<https://docs.escape.tech/documentation/reference/vulnerabilities/replay_agent/>) | Custom | No | No | No | No | Yes |
| [API Endpoint Exposed in JavaScript Bundle](<https://docs.escape.tech/documentation/reference/vulnerabilities/js_exposed_api/>) | Information Disclosure | No | No | No | No | Yes |
| [AWS Access Token](<https://docs.escape.tech/documentation/reference/vulnerabilities/aws_access_token/>) | Information Disclosure | Yes | Yes | Yes | Yes | Yes |
| [Application Information Disclosure](<https://docs.escape.tech/documentation/reference/vulnerabilities/application_enumeration/>) | Information Disclosure | No | No | No | No | Yes |
| [BSPHP - Information Disclosure](<https://docs.escape.tech/documentation/reference/vulnerabilities/bsphp_info/>) | Information Disclosure | No | No | Yes | Yes | No |
| [Console Error](<https://docs.escape.tech/documentation/reference/vulnerabilities/console_error/>) | Information Disclosure | No | No | Yes | Yes | Yes |
| [Crashing Page](<https://docs.escape.tech/documentation/reference/vulnerabilities/crashing_page/>) | Information Disclosure | No | No | Yes | Yes | Yes |
| [DNS Rebinding Attack](<https://docs.escape.tech/documentation/reference/vulnerabilities/dns_rebinding_attack/>) | Information Disclosure | No | No | No | Yes | No |
| [DNS Zone Transfer Allowed to Any Client](<https://docs.escape.tech/documentation/reference/vulnerabilities/dns_zone_transfer_any/>) | Information Disclosure | No | No | No | No | Yes |
| [Debug Mode Enabled](<https://docs.escape.tech/documentation/reference/vulnerabilities/debug_mode/>) | Information Disclosure | Yes | Yes | Yes | Yes | Yes |
| [Exploitable CVE](<https://docs.escape.tech/documentation/reference/vulnerabilities/exploitable_cve/>) | Information Disclosure | No | No | No | No | Yes |
| [Exposed Config File](<https://docs.escape.tech/documentation/reference/vulnerabilities/exposed_config_file/>) | Information Disclosure | No | No | Yes | Yes | Yes |
| [Exposed Source Map](<https://docs.escape.tech/documentation/reference/vulnerabilities/exposed_sourcemap/>) | Information Disclosure | No | No | Yes | Yes | Yes |
| [File Disclosure](<https://docs.escape.tech/documentation/reference/vulnerabilities/file_disclosure/>) | Information Disclosure | Yes | Yes | Yes | Yes | Yes |
| [Git Metadata Directory Exposure](<https://docs.escape.tech/documentation/reference/vulnerabilities/git_exposure/>) | Information Disclosure | No | No | Yes | Yes | No |
| [GraphQL Field Suggestion](<https://docs.escape.tech/documentation/reference/vulnerabilities/graphql_field_suggestion/>) | Information Disclosure | Yes | No | No | Yes | Yes |
| [Guessable Cookie Value](<https://docs.escape.tech/documentation/reference/vulnerabilities/guessable_cookie_value/>) | Information Disclosure | No | No | Yes | Yes | Yes |
| [Header Leak](<https://docs.escape.tech/documentation/reference/vulnerabilities/software_component_leak/>) | Information Disclosure | Yes | Yes | Yes | Yes | Yes |
| [Internal Organization Page](<https://docs.escape.tech/documentation/reference/vulnerabilities/frontend_page_fingerprint_internal/>) | Information Disclosure | No | No | No | Yes | Yes |
| [Introspection enabled](<https://docs.escape.tech/documentation/reference/vulnerabilities/introspection_enabled/>) | Information Disclosure | Yes | No | No | Yes | Yes |
| [JavaScript Library](<https://docs.escape.tech/documentation/reference/vulnerabilities/frontend_software_component_leak/>) | Information Disclosure | No | No | Yes | Yes | Yes |
| [LLM System Prompt Leakage](<https://docs.escape.tech/documentation/reference/vulnerabilities/llm_system_prompt_leak/>) | Information Disclosure | No | No | Yes | No | Yes |
| [LLM Tool / Function-Calling Exposure](<https://docs.escape.tech/documentation/reference/vulnerabilities/llm_tool_exposure/>) | Information Disclosure | No | No | Yes | No | Yes |
| [Leaked AWS Configuration](<https://docs.escape.tech/documentation/reference/vulnerabilities/aws_config_exposure/>) | Information Disclosure | Yes | Yes | Yes | Yes | No |
| [Leaked AWStats Config](<https://docs.escape.tech/documentation/reference/vulnerabilities/awstats_exposure/>) | Information Disclosure | Yes | Yes | Yes | Yes | No |
| [Leaked AWStats Script Config](<https://docs.escape.tech/documentation/reference/vulnerabilities/awstats_config_exposure/>) | Information Disclosure | Yes | Yes | Yes | Yes | No |
| [Leaked Actuator Spring Boot Dump](<https://docs.escape.tech/documentation/reference/vulnerabilities/springboot_actuator_dump/>) | Information Disclosure | Yes | Yes | Yes | Yes | No |
| [Leaked Actuator Spring Boot Heapdump](<https://docs.escape.tech/documentation/reference/vulnerabilities/springboot_actuator_heapdump/>) | Information Disclosure | Yes | Yes | Yes | Yes | No |
| [Leaked Actuator Spring Boot Trace](<https://docs.escape.tech/documentation/reference/vulnerabilities/springboot_actuator_trace/>) | Information Disclosure | Yes | Yes | Yes | Yes | No |
| [Leaked Alibaba Canal Config](<https://docs.escape.tech/documentation/reference/vulnerabilities/alibaba_canal_leak/>) | Information Disclosure | Yes | Yes | Yes | Yes | No |
| [Leaked Ansible Configuration Page](<https://docs.escape.tech/documentation/reference/vulnerabilities/ansible_config_exposure/>) | Information Disclosure | Yes | Yes | Yes | Yes | No |
| [Leaked Apache Airflow Configuration Page](<https://docs.escape.tech/documentation/reference/vulnerabilities/airflow_config_exposure/>) | Information Disclosure | Yes | Yes | Yes | Yes | No |
| [Leaked AppVeyor Configuration Page](<https://docs.escape.tech/documentation/reference/vulnerabilities/appveyor_config_exposure/>) | Information Disclosure | Yes | Yes | Yes | Yes | No |
| [Leaked Appspec YML/YAML](<https://docs.escape.tech/documentation/reference/vulnerabilities/appspec_exposure/>) | Information Disclosure | Yes | Yes | Yes | Yes | No |
| [Leaked Dockerrun AWS Configuration Page](<https://docs.escape.tech/documentation/reference/vulnerabilities/aws_docker_config_exposure/>) | Information Disclosure | Yes | Yes | Yes | Yes | No |
| [Leaked MySQL Dump Files](<https://docs.escape.tech/documentation/reference/vulnerabilities/exposed_sql_dumps/>) | Information Disclosure | Yes | Yes | Yes | Yes | No |
| [Leaked Spring Boot Actuator Environment](<https://docs.escape.tech/documentation/reference/vulnerabilities/springboot_actuator_env/>) | Information Disclosure | Yes | Yes | Yes | Yes | No |
| [Leaked Spring Boot Actuator Logfile](<https://docs.escape.tech/documentation/reference/vulnerabilities/springboot_actuator_logfile/>) | Information Disclosure | Yes | Yes | Yes | Yes | No |
| [Leaked Spring Boot Actuator Mappings](<https://docs.escape.tech/documentation/reference/vulnerabilities/springboot_actuator_mappings/>) | Information Disclosure | Yes | Yes | Yes | Yes | No |
| [Leaked mysql.initial Config](<https://docs.escape.tech/documentation/reference/vulnerabilities/exposed_mysql_config/>) | Information Disclosure | Yes | Yes | Yes | Yes | No |
| [Leaked settings.php](<https://docs.escape.tech/documentation/reference/vulnerabilities/exposed_settings_php/>) | Information Disclosure | Yes | Yes | Yes | Yes | No |
| [Node ecstatic Internal Path - Exposure](<https://docs.escape.tech/documentation/reference/vulnerabilities/node_ecstatic_internal_path/>) | Information Disclosure | No | No | Yes | Yes | No |
| [Password Field Autocompletion](<https://docs.escape.tech/documentation/reference/vulnerabilities/password_field_autocompletion/>) | Information Disclosure | No | No | Yes | Yes | Yes |
| [Possible User Enumeration](<https://docs.escape.tech/documentation/reference/vulnerabilities/leaking_authentication/>) | Information Disclosure | Yes | Yes | Yes | Yes | Yes |
| [Private IP Disclosure](<https://docs.escape.tech/documentation/reference/vulnerabilities/private_ip/>) | Information Disclosure | Yes | Yes | Yes | Yes | Yes |
| [Private Key Exposure](<https://docs.escape.tech/documentation/reference/vulnerabilities/private_key_exposure/>) | Information Disclosure | No | No | Yes | Yes | No |
| [Selenium - Node Exposure](<https://docs.escape.tech/documentation/reference/vulnerabilities/selenium_exposure/>) | Information Disclosure | No | No | Yes | Yes | No |
| [Sensitive Comments](<https://docs.escape.tech/documentation/reference/vulnerabilities/sensitive_comments/>) | Information Disclosure | No | No | Yes | Yes | Yes |
| [Spoofable SPF Records with PTR Mechanism](<https://docs.escape.tech/documentation/reference/vulnerabilities/spoofable_spf_records_ptr_mechanism/>) | Information Disclosure | No | No | No | Yes | No |
| [Stack Trace Disclosure](<https://docs.escape.tech/documentation/reference/vulnerabilities/stacktrace/>) | Information Disclosure | Yes | Yes | Yes | Yes | Yes |
| [ThinkPHP 5.0.9 - Information Disclosure](<https://docs.escape.tech/documentation/reference/vulnerabilities/thinkphp_509_information_disclosure/>) | Information Disclosure | No | No | Yes | Yes | No |
| [Vulnerable Dependency](<https://docs.escape.tech/documentation/reference/vulnerabilities/potential_cve/>) | Information Disclosure | No | No | No | Yes | Yes |
| [Vulnerable JavaScript Library](<https://docs.escape.tech/documentation/reference/vulnerabilities/frontend_potential_cve/>) | Information Disclosure | No | No | Yes | Yes | Yes |
| [WordPress DB Repair Exposed](<https://docs.escape.tech/documentation/reference/vulnerabilities/wordpress_db_repair/>) | Information Disclosure | No | No | Yes | Yes | No |
| [WordPress RDF Feed Users](<https://docs.escape.tech/documentation/reference/vulnerabilities/wordpress_rdf_feed_user_exposed/>) | Information Disclosure | Yes | Yes | Yes | Yes | No |
| [WordPress REST API Users](<https://docs.escape.tech/documentation/reference/vulnerabilities/wordpress_rest_api_users_exposed/>) | Information Disclosure | Yes | Yes | Yes | Yes | No |
| [WordPress oEmbed Endpoint](<https://docs.escape.tech/documentation/reference/vulnerabilities/wordpress_oembed_endpoint_exposed/>) | Information Disclosure | Yes | Yes | Yes | Yes | No |
| [WordPress wp-cron Exposed](<https://docs.escape.tech/documentation/reference/vulnerabilities/wordpress_wp_cron_exposed/>) | Information Disclosure | Yes | Yes | Yes | Yes | No |
| [Apache Log4j2 Remote Code Injection](<https://docs.escape.tech/documentation/reference/vulnerabilities/cve_2021_44228/>) | Injection | No | No | Yes | Yes | No |
| [Arcade.php - SQL Injection](<https://docs.escape.tech/documentation/reference/vulnerabilities/arcade_php_sqli/>) | Injection | No | No | Yes | Yes | No |
| [Boolean-based Blind SQL Injection](<https://docs.escape.tech/documentation/reference/vulnerabilities/sql_injection_boolean_based/>) | Injection | Yes | Yes | Yes | No | Yes |
| [CGI-bin Remote Code Execution](<https://docs.escape.tech/documentation/reference/vulnerabilities/cgi_bin_rce/>) | Injection | Yes | Yes | Yes | No | Yes |
| [CRLF Injection](<https://docs.escape.tech/documentation/reference/vulnerabilities/frontend_crlf/>) | Injection | No | No | Yes | Yes | Yes |
| [CSP Bypass via Input Injection](<https://docs.escape.tech/documentation/reference/vulnerabilities/improper_input_csp_bypass/>) | Injection | No | No | Yes | Yes | Yes |
| [Change Detection - Server Side Template Injection](<https://docs.escape.tech/documentation/reference/vulnerabilities/cve_2024_32651/>) | Injection | Yes | Yes | No | Yes | No |
| [Client Side Prototype Pollution](<https://docs.escape.tech/documentation/reference/vulnerabilities/improper_input_client_side_proto_pollution/>) | Injection | No | No | Yes | Yes | Yes |
| [Command Injection](<https://docs.escape.tech/documentation/reference/vulnerabilities/command_injection_agent/>) | Injection | No | No | No | No | No |
| [Command Injection](<https://docs.escape.tech/documentation/reference/vulnerabilities/command/>) | Injection | Yes | Yes | Yes | No | Yes |
| [Command Injection](<https://docs.escape.tech/documentation/reference/vulnerabilities/frontend_command_injection/>) | Injection | No | No | Yes | Yes | Yes |
| [Cross-Site Scripting (XSS)](<https://docs.escape.tech/documentation/reference/vulnerabilities/xss_agent/>) | Injection | No | No | No | No | No |
| [Cross-Site Scripting (XSS)](<https://docs.escape.tech/documentation/reference/vulnerabilities/improper_input_xss/>) | Injection | No | No | Yes | Yes | Yes |
| [Dangerous Dynamic Code Execution in JavaScript](<https://docs.escape.tech/documentation/reference/vulnerabilities/js_dangerous_eval/>) | Injection | No | No | No | No | Yes |
| [Directory Traversal](<https://docs.escape.tech/documentation/reference/vulnerabilities/directory_traversal/>) | Injection | Yes | Yes | Yes | No | Yes |
| [Frontend HTTP Parameter Pollution](<https://docs.escape.tech/documentation/reference/vulnerabilities/http_param_pollution/>) | Injection | No | No | Yes | Yes | Yes |
| [GeoVision Geowebserver \<= 5.3.3 - Local File Inclusion / Cross-Site Scripting](<https://docs.escape.tech/documentation/reference/vulnerabilities/geovision_geowebserver_lfi_xss/>) | Injection | No | No | Yes | Yes | No |
| [HTML Injection](<https://docs.escape.tech/documentation/reference/vulnerabilities/html_injection/>) | Injection | No | No | Yes | Yes | Yes |
| [Host Header Injection (Redirect)](<https://docs.escape.tech/documentation/reference/vulnerabilities/host_header_injection_redirect/>) | Injection | Yes | Yes | Yes | No | Yes |
| [Host Header Injection (Reflected)](<https://docs.escape.tech/documentation/reference/vulnerabilities/host_header_injection_reflected/>) | Injection | Yes | Yes | Yes | No | Yes |
| [JWT Algorithm Confusion (RS256 to HS256)](<https://docs.escape.tech/documentation/reference/vulnerabilities/jwt_alg_confusion_rs_to_hs/>) | Injection | Yes | Yes | Yes | No | Yes |
| [JWT Signature Bypass (alg=none)](<https://docs.escape.tech/documentation/reference/vulnerabilities/jwt_alg_none/>) | Injection | Yes | Yes | Yes | No | Yes |
| [JWT Signature Not Verified](<https://docs.escape.tech/documentation/reference/vulnerabilities/jwt_sign_check/>) | Injection | Yes | Yes | Yes | No | Yes |
| [JWT Weak Secret Bruteforced](<https://docs.escape.tech/documentation/reference/vulnerabilities/jwt_weak_secret/>) | Injection | Yes | Yes | Yes | No | Yes |
| [Joomla MarvikShop ShoppingCart 3.4 - Sql Injection](<https://docs.escape.tech/documentation/reference/vulnerabilities/joomla_marvikshop_sqli/>) | Injection | No | No | Yes | Yes | No |
| [Joomla \`departments\` - SQL Injection](<https://docs.escape.tech/documentation/reference/vulnerabilities/joomla_department_sqli/>) | Injection | No | No | Yes | Yes | No |
| [LLM Command Injection](<https://docs.escape.tech/documentation/reference/vulnerabilities/llm_command_injection/>) | Injection | No | No | Yes | No | Yes |
| [LLM Insecure Output Handling](<https://docs.escape.tech/documentation/reference/vulnerabilities/llm_insecure_output_handling/>) | Injection | No | No | Yes | No | Yes |
| [LLM Prompt Injection](<https://docs.escape.tech/documentation/reference/vulnerabilities/llm_prompt_injection/>) | Injection | No | No | Yes | No | Yes |
| [Lucee \< 6.0.1.59 - Remote Code Execution](<https://docs.escape.tech/documentation/reference/vulnerabilities/lucee_rce/>) | Injection | No | No | Yes | Yes | No |
| [Mass Assignment](<https://docs.escape.tech/documentation/reference/vulnerabilities/mass_assignment/>) | Injection | Yes | Yes | Yes | No | Yes |
| [NoSQL Injection Stored](<https://docs.escape.tech/documentation/reference/vulnerabilities/nosql/>) | Injection | Yes | Yes | Yes | No | Yes |
| [NoSQL Injection Stored](<https://docs.escape.tech/documentation/reference/vulnerabilities/frontend_nosql_injection/>) | Injection | No | No | Yes | Yes | Yes |
| [PHP - var\_destroy Use-After-Free (php2shell)](<https://docs.escape.tech/documentation/reference/vulnerabilities/cve_2026_109619/>) | Injection | No | Yes | Yes | Yes | No |
| [PHPOK - SQL Injection](<https://docs.escape.tech/documentation/reference/vulnerabilities/phpok_sqli/>) | Injection | No | No | Yes | Yes | No |
| [Reflected URL Parameter](<https://docs.escape.tech/documentation/reference/vulnerabilities/reflected_url_parameter/>) | Injection | No | No | Yes | Yes | Yes |
| [Reflected XSS Injection](<https://docs.escape.tech/documentation/reference/vulnerabilities/reflected_xss/>) | Injection | No | No | No | No | Yes |
| [Remote Code Execution via File Upload (Polyglot)](<https://docs.escape.tech/documentation/reference/vulnerabilities/file_upload_rce/>) | Injection | No | No | Yes | No | Yes |
| [SQL Injection](<https://docs.escape.tech/documentation/reference/vulnerabilities/sql_injection_agent/>) | Injection | No | No | No | No | No |
| [SQL Injection](<https://docs.escape.tech/documentation/reference/vulnerabilities/frontend_sql_injection/>) | Injection | No | No | Yes | Yes | Yes |
| [SQL Injection](<https://docs.escape.tech/documentation/reference/vulnerabilities/sql/>) | Injection | Yes | Yes | Yes | No | Yes |
| [SQL Injection (Oracle-Based)](<https://docs.escape.tech/documentation/reference/vulnerabilities/sql_injection_oracle_based/>) | Injection | No | No | Yes | Yes | Yes |
| [SSTI (Server-Side Template Injection)](<https://docs.escape.tech/documentation/reference/vulnerabilities/ssti/>) | Injection | Yes | Yes | Yes | No | Yes |
| [Stored XSS Injection](<https://docs.escape.tech/documentation/reference/vulnerabilities/stored_xss/>) | Injection | Yes | Yes | Yes | No | Yes |
| [Stored XSS via File Upload](<https://docs.escape.tech/documentation/reference/vulnerabilities/file_upload_stored_xss/>) | Injection | No | No | Yes | No | Yes |
| [Template Injection](<https://docs.escape.tech/documentation/reference/vulnerabilities/improper_input_frontend_template_injection/>) | Injection | No | No | Yes | Yes | Yes |
| [WordPress Core - Pre-Authentication Blind SQL Injection](<https://docs.escape.tech/documentation/reference/vulnerabilities/cve_2026_63030/>) | Injection | No | No | Yes | Yes | No |
| [WordPress Core - Pre-Authentication Reflected XSS (XSS2Shell)](<https://docs.escape.tech/documentation/reference/vulnerabilities/cve_2026_64638/>) | Injection | No | No | Yes | Yes | No |
| [XML External Entity (XXE) via File Upload](<https://docs.escape.tech/documentation/reference/vulnerabilities/file_upload_xxe/>) | Injection | No | No | Yes | No | Yes |
| [XSS via Query Parameter](<https://docs.escape.tech/documentation/reference/vulnerabilities/improper_input_xss_query_params/>) | Injection | No | No | Yes | Yes | Yes |
| [XSS via Reflected Input](<https://docs.escape.tech/documentation/reference/vulnerabilities/improper_input_xss_reflection/>) | Injection | No | No | Yes | Yes | Yes |
| [XXE Injection](<https://docs.escape.tech/documentation/reference/vulnerabilities/xxe/>) | Injection | Yes | Yes | Yes | No | Yes |
| [Anonymous NULL TLS Ciphers Enabled](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_anonymous_null_ciphers/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [Broken TLS Certificate Chain of Trust](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_broken_chain_of_trust/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [CORS Misconfiguration](<https://docs.escape.tech/documentation/reference/vulnerabilities/cors/>) | Protocol | Yes | Yes | Yes | Yes | Yes |
| [CSP Allowlisted Script Resources](<https://docs.escape.tech/documentation/reference/vulnerabilities/csp_allowed_scripts/>) | Protocol | Yes | Yes | Yes | Yes | Yes |
| [DROWN-Vulnerable SSLv2 Service](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_drown_vulnerability/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [Excessive TLS Server Certificates](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_excessive_server_certificates/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [Frontend Server Error](<https://docs.escape.tech/documentation/reference/vulnerabilities/frontend_server_error/>) | Protocol | No | No | Yes | Yes | Yes |
| [Improper TLS 1.0 Cipher Order](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_improper_tls10_cipher_order/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [Improper TLS 1.1 Cipher Order](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_improper_tls11_cipher_order/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [Improper TLS 1.2 Cipher Order](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_improper_tls12_cipher_order/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [Improper TLS 1.3 Cipher Order](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_improper_tls13_cipher_order/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [Improper TLS Certificate Chain Order](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_improper_certificate_chain_order/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [Improper TLS Certificate Extended Key Usage](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_improper_certificate_eku/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [Improper TLS Certificate Key Usage](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_improper_certificate_key_usage/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [Improper TLS Cipher Suite Order](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_improper_cipher_suite_order/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [Improper TLS Handshake Timestamp](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_improper_tls_handshake_timestamp/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [Insecure HTTP Request](<https://docs.escape.tech/documentation/reference/vulnerabilities/frontend_ssl/>) | Protocol | No | No | Yes | Yes | Yes |
| [Insecure TLS Protocol Negotiation](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_insecure_protocol_negotiation/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [Insecure Technology Used](<https://docs.escape.tech/documentation/reference/vulnerabilities/insecure_technology_used/>) | Protocol | No | No | No | Yes | Yes |
| [Insecure WebSocket Connection](<https://docs.escape.tech/documentation/reference/vulnerabilities/frontend_insecure_websocket/>) | Protocol | No | No | Yes | Yes | Yes |
| [Insufficient SSL Certificate Key Size](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_insufficient_certificate_key_size/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [Invalid SSL Certificate Validity Period](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_invalid_certificate_validity_period/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [Logjam Common Diffie-Hellman Primes](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_logjam_common_primes/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [Misconfigured Cache Control Header](<https://docs.escape.tech/documentation/reference/vulnerabilities/header_cache_control/>) | Protocol | Yes | Yes | Yes | Yes | Yes |
| [Misconfigured Content-Type Header](<https://docs.escape.tech/documentation/reference/vulnerabilities/header_content_type/>) | Protocol | Yes | Yes | Yes | Yes | Yes |
| [Misconfigured SSL Certificate Subject Alternative Name](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_misconfigured_san/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [Misconfigured Set-Cookie Header](<https://docs.escape.tech/documentation/reference/vulnerabilities/frontend_header_set_cookie/>) | Protocol | No | No | Yes | Yes | Yes |
| [Misconfigured Set-Cookie Header](<https://docs.escape.tech/documentation/reference/vulnerabilities/header_set_cookie/>) | Protocol | Yes | Yes | Yes | Yes | Yes |
| [Misconfigured Strict-Transport-Security Header](<https://docs.escape.tech/documentation/reference/vulnerabilities/header_strict_transport_security/>) | Protocol | Yes | Yes | Yes | Yes | Yes |
| [Misconfigured TLS 1.2](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_misconfigured_tls12/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [Misconfigured X-Content-Type-Options Header](<https://docs.escape.tech/documentation/reference/vulnerabilities/header_x_content_type_options/>) | Protocol | Yes | Yes | Yes | Yes | Yes |
| [Misconfigured X-Frame-Options Header](<https://docs.escape.tech/documentation/reference/vulnerabilities/header_x_frame_options/>) | Protocol | Yes | Yes | Yes | Yes | Yes |
| [Mismatched SSL Certificate Common Name](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_mismatched_certificate_common_name/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [Mismatched SSL Common Name Without SNI](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_mismatched_common_name_without_sni/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [Missing Access-Control-Allow-Origin Header](<https://docs.escape.tech/documentation/reference/vulnerabilities/cors_acao_missing/>) | Protocol | Yes | Yes | Yes | Yes | Yes |
| [Missing Certificate Revocation List Distribution Points](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_missing_crl_distribution_points/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [Missing Certificate Transparency](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_missing_certificate_transparency/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [Missing Content Security Policy Header](<https://docs.escape.tech/documentation/reference/vulnerabilities/csp_missing/>) | Protocol | Yes | Yes | Yes | Yes | Yes |
| [Missing Content Security Policy Header](<https://docs.escape.tech/documentation/reference/vulnerabilities/header_content_security_policy/>) | Protocol | Yes | Yes | Yes | Yes | Yes |
| [Missing Extended TLS Support](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_missing_etls/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [Missing Extended Validation Certificate Policies](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_missing_ev_certificate_policies/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [Missing Next Protocol Negotiation](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_missing_npn/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [Missing OCSP Responder URLs](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_missing_ocsp_urls/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [Missing OCSP Stapling](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_missing_ocsp_stapling/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [Missing Post-Quantum Key Exchange](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_missing_post_quantum_key_exchange/>) | Protocol | Yes | Yes | Yes | Yes | Yes |
| [Missing SSL Secure Renegotiation](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_missing_secure_renegotiation/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [Missing SSL Session ID Support](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_missing_ssl_session_id_support/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [Missing SSL Session Resumption IDs](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_missing_session_resumption_ids/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [Missing SSL Session Resumption Tickets](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_missing_session_resumption_tickets/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [Missing Secure Client Renegotiation](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_missing_secure_client_renegotiation/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [Missing TLS 1.3 Support](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_missing_tls13_support/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [Missing TLS ALPN](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_missing_alpn/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [Missing TLS Extensions](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_missing_tls_extensions/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [Missing TLS Fallback SCSV](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_missing_tls_fallback_scsv/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [Missing TLS Must-Staple](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_missing_must_staple/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [Missing TLS Session Tickets](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_missing_tls_session_tickets/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [Missing Vary: Origin Header in CORS Response](<https://docs.escape.tech/documentation/reference/vulnerabilities/cors_vary_header/>) | Protocol | Yes | Yes | Yes | Yes | Yes |
| [NULL TLS Ciphers Enabled](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_null_ciphers/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [Non-Compliant SSL Certificate Details](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_non_compliant_certificate_details/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [Overly Permissive Access-Control-Allow-Origin Header](<https://docs.escape.tech/documentation/reference/vulnerabilities/cors_acao_misconfig/>) | Protocol | Yes | Yes | Yes | Yes | Yes |
| [RC4 TLS Cipher Usage](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_rc4_cipher_usage/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [SSL Certificate Misconfiguration](<https://docs.escape.tech/documentation/reference/vulnerabilities/ssl_certificate/>) | Protocol | Yes | Yes | Yes | Yes | Yes |
| [SSL Certificate Uses a SHA-1 Fingerprint](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_sha1_certificate_fingerprint/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [SSL Configuration](<https://docs.escape.tech/documentation/reference/vulnerabilities/ssl/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [SSL ROBOT Vulnerability](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_robot_vulnerability/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [SSL Revoked Certificate via OCSP](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_revoked_certificate_ocsp/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [SSL SWEET32 Vulnerability](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_sweet32_vulnerability/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [SSL Ticketbleed Vulnerability](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_ticketbleed_vulnerability/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [SSL Untrusted Certificate](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_untrusted_certificate/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [SSL Untrusted Certificate Authorities](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_untrusted_certificate_authorities/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [SSLv2 Supported](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_sslv2_support/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [Server Error](<https://docs.escape.tech/documentation/reference/vulnerabilities/server_error/>) | Protocol | Yes | Yes | Yes | Yes | Yes |
| [Suboptimal Average Strength Ciphers](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_suboptimal_average_strength_ciphers/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [TLS 1.0 CBC Ciphers Vulnerable to BEAST](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_beast_tls10_cbc_ciphers/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [TLS 1.0 Supported](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_tls10_support/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [TLS 1.1 Supported](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_tls11_support/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [TLS Certificate Revocation Status Issue](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_certificate_revocation_status_issue/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [TLS ChangeCipherSpec Injection Vulnerability](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_ccs_injection_vulnerability/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [TLS Compression Enabled](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_crime_tls_compression/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [Unsafe Eval or Inline in Content Security Policy](<https://docs.escape.tech/documentation/reference/vulnerabilities/csp_unsafe_eval/>) | Protocol | Yes | Yes | Yes | Yes | Yes |
| [Weak SSL 3DES and IDEA Ciphers](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_weak_3des_idea_ciphers/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [Weak SSL Certificate Signature Algorithm](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_weak_certificate_signature_algorithm/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [Weak SSL Cipher Negotiation](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_weak_cipher_negotiation/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [Weak SSL Low-Security Ciphers](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_weak_low_security_ciphers/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [Weak SSL Pre-RFC 128-bit Ciphers](<https://docs.escape.tech/documentation/reference/vulnerabilities/issue_ssl_weak_pre_rfc_128bit_ciphers/>) | Protocol | Yes | Yes | Yes | Yes | No |
| [CSRF Token Invalidation](<https://docs.escape.tech/documentation/reference/vulnerabilities/csrf_token_invalidation/>) | Request Forgery | No | No | No | No | Yes |
| [GET based CSRF](<https://docs.escape.tech/documentation/reference/vulnerabilities/csrf_get_based/>) | Request Forgery | Yes | No | No | Yes | Yes |
| [GET based CSRF](<https://docs.escape.tech/documentation/reference/vulnerabilities/frontend_csrf_get_based/>) | Request Forgery | No | No | Yes | Yes | Yes |
| [LLM-Enabled Server-Side Request Forgery](<https://docs.escape.tech/documentation/reference/vulnerabilities/llm_ssrf/>) | Request Forgery | No | No | Yes | No | Yes |
| [OAuth Missing State Validation](<https://docs.escape.tech/documentation/reference/vulnerabilities/oauth_missing_state_validation/>) | Request Forgery | No | No | No | No | Yes |
| [Open Redirect](<https://docs.escape.tech/documentation/reference/vulnerabilities/frontend_open_redirect/>) | Request Forgery | No | No | Yes | Yes | Yes |
| [POST based CSRF](<https://docs.escape.tech/documentation/reference/vulnerabilities/csrf_post_based/>) | Request Forgery | Yes | No | No | Yes | Yes |
| [POST based CSRF](<https://docs.escape.tech/documentation/reference/vulnerabilities/frontend_csrf_post_based/>) | Request Forgery | No | No | Yes | Yes | Yes |
| [Server Side Request Forgery](<https://docs.escape.tech/documentation/reference/vulnerabilities/ssrf/>) | Request Forgery | Yes | Yes | Yes | No | Yes |
| [Server Side Request Forgery via Frontend](<https://docs.escape.tech/documentation/reference/vulnerabilities/frontend_ssrf_header/>) | Request Forgery | No | No | Yes | Yes | Yes |
| [Server-Side Request Forgery](<https://docs.escape.tech/documentation/reference/vulnerabilities/ssrf_agent/>) | Request Forgery | No | No | No | No | No |
| [Server-Side Request Forgery via File Upload](<https://docs.escape.tech/documentation/reference/vulnerabilities/file_upload_ssrf/>) | Request Forgery | No | No | Yes | No | Yes |
| [kkFileView 4.0.0 - Server-Side Request Forgery](<https://docs.escape.tech/documentation/reference/vulnerabilities/kkfileview_ssrf/>) | Request Forgery | No | No | Yes | Yes | No |
| [Character limit](<https://docs.escape.tech/documentation/reference/vulnerabilities/character_limit/>) | Resource Limitation | Yes | No | No | Yes | Yes |
| [GraphQL Alias Limit](<https://docs.escape.tech/documentation/reference/vulnerabilities/graphql_alias_limit/>) | Resource Limitation | Yes | No | No | Yes | Yes |
| [GraphQL Batch Limit](<https://docs.escape.tech/documentation/reference/vulnerabilities/graphql_batch_limit/>) | Resource Limitation | Yes | No | No | Yes | Yes |
| [GraphQL Cyclic Recursive Query](<https://docs.escape.tech/documentation/reference/vulnerabilities/graphql_circular_introspection/>) | Resource Limitation | Yes | No | No | Yes | Yes |
| [GraphQL Directive Overloading](<https://docs.escape.tech/documentation/reference/vulnerabilities/graphql_directive_overload/>) | Resource Limitation | Yes | No | No | Yes | Yes |
| [GraphQL Field Duplication](<https://docs.escape.tech/documentation/reference/vulnerabilities/graphql_field_duplication/>) | Resource Limitation | Yes | No | No | Yes | Yes |
| [GraphQL Recursive Fragment](<https://docs.escape.tech/documentation/reference/vulnerabilities/graphql_recursive_fragment/>) | Resource Limitation | Yes | No | No | Yes | Yes |
| [Missing Rate Limiting](<https://docs.escape.tech/documentation/reference/vulnerabilities/missing_rate_limiting/>) | Resource Limitation | No | No | No | No | Yes |
| [Pagination missing](<https://docs.escape.tech/documentation/reference/vulnerabilities/pagination_missing/>) | Resource Limitation | Yes | Yes | Yes | Yes | Yes |
| [Request Timeout (Resource Exhaustion)](<https://docs.escape.tech/documentation/reference/vulnerabilities/frontend_timeout/>) | Resource Limitation | No | No | Yes | Yes | Yes |
| [Request Timeout (Resource Exhaustion)](<https://docs.escape.tech/documentation/reference/vulnerabilities/timeout/>) | Resource Limitation | Yes | Yes | Yes | Yes | Yes |
| [Response Size Exceeded](<https://docs.escape.tech/documentation/reference/vulnerabilities/response_size/>) | Resource Limitation | Yes | Yes | Yes | Yes | Yes |
| [Unreachable server](<https://docs.escape.tech/documentation/reference/vulnerabilities/unreachable_server/>) | Resource Limitation | Yes | Yes | Yes | Yes | Yes |
| [WordPress xmlrpc.php Exposed](<https://docs.escape.tech/documentation/reference/vulnerabilities/wordpress_xmlrpc_php_exposed/>) | Resource Limitation | Yes | Yes | Yes | Yes | No |
| [Invalid integer format](<https://docs.escape.tech/documentation/reference/vulnerabilities/positive_integer_validation/>) | Schema | Yes | Yes | Yes | Yes | Yes |
| [Adminer Default Login - Detect](<https://docs.escape.tech/documentation/reference/vulnerabilities/adminer_default_login/>) | Sensitive Data | No | No | Yes | Yes | No |
| [Apache Airflow Default Login](<https://docs.escape.tech/documentation/reference/vulnerabilities/airflow_default_login/>) | Sensitive Data | No | No | Yes | Yes | No |
| [Apache Airflow v3 Default Login](<https://docs.escape.tech/documentation/reference/vulnerabilities/airflow_v3_default_login/>) | Sensitive Data | No | No | Yes | Yes | No |
| [Apache Apisix Admin - Default Login](<https://docs.escape.tech/documentation/reference/vulnerabilities/apisix_default_login/>) | Sensitive Data | No | No | Yes | Yes | No |
| [Apache Apollo - Default Login](<https://docs.escape.tech/documentation/reference/vulnerabilities/apache_apollo_default_login/>) | Sensitive Data | No | No | Yes | Yes | No |
| [Apache CloudStack - Default Login](<https://docs.escape.tech/documentation/reference/vulnerabilities/cloudstack_default_login/>) | Sensitive Data | No | No | Yes | Yes | No |
| [Apache DolphinScheduler Default Login](<https://docs.escape.tech/documentation/reference/vulnerabilities/dolphinscheduler_default_login/>) | Sensitive Data | No | No | Yes | Yes | No |
| [Apache Doris - Default Login](<https://docs.escape.tech/documentation/reference/vulnerabilities/doris_default_login/>) | Sensitive Data | No | No | Yes | Yes | No |
| [Apache Dubbo - Default Admin Discovery](<https://docs.escape.tech/documentation/reference/vulnerabilities/dubbo_admin_default_login/>) | Sensitive Data | No | No | Yes | Yes | No |
| [Apache HertzBeat - Default Credentials](<https://docs.escape.tech/documentation/reference/vulnerabilities/apache_hertzbeat_default_login/>) | Sensitive Data | No | No | Yes | Yes | No |
| [Apache Kafka Center Default Login](<https://docs.escape.tech/documentation/reference/vulnerabilities/kafka_center_default_login/>) | Sensitive Data | No | No | Yes | Yes | No |
| [Apache Karaf - Default Login](<https://docs.escape.tech/documentation/reference/vulnerabilities/karaf_default_login/>) | Sensitive Data | No | No | Yes | Yes | No |
| [Apache Kylin Console - Default Login](<https://docs.escape.tech/documentation/reference/vulnerabilities/kylin_default_login/>) | Sensitive Data | No | No | Yes | Yes | No |
| [Apache Ranger - Default Login](<https://docs.escape.tech/documentation/reference/vulnerabilities/ranger_default_login/>) | Sensitive Data | No | No | Yes | Yes | No |
| [Apache Tomcat - Default Login Discovery](<https://docs.escape.tech/documentation/reference/vulnerabilities/tomcat_examples_login/>) | Sensitive Data | No | No | Yes | Yes | No |
| [Apache Tomcat Manager Default Login](<https://docs.escape.tech/documentation/reference/vulnerabilities/tomcat_default_login/>) | Sensitive Data | No | No | Yes | Yes | No |
| [Django Secret Key Exposure](<https://docs.escape.tech/documentation/reference/vulnerabilities/django_secret_key/>) | Sensitive Data | No | No | Yes | Yes | No |
| [EasyImage down.php - Arbitrary File Read](<https://docs.escape.tech/documentation/reference/vulnerabilities/easyimage_downphp_lfi/>) | Sensitive Data | No | No | Yes | Yes | No |
| [ElasticSearch - Default Login](<https://docs.escape.tech/documentation/reference/vulnerabilities/elasticsearch_default_login/>) | Sensitive Data | No | No | Yes | Yes | No |
| [Esafenet CDG mysql - File Read](<https://docs.escape.tech/documentation/reference/vulnerabilities/esafenet_mysql_fileread/>) | Sensitive Data | No | No | Yes | Yes | No |
| [Exposed JSON Configuration Files](<https://docs.escape.tech/documentation/reference/vulnerabilities/config_json_exposure_fuzz/>) | Sensitive Data | No | No | Yes | Yes | No |
| [Exposed JWT Token](<https://docs.escape.tech/documentation/reference/vulnerabilities/exposed_jwt/>) | Sensitive Data | Yes | Yes | Yes | Yes | Yes |
| [Fanwei OA E-Office - Information Disclosure](<https://docs.escape.tech/documentation/reference/vulnerabilities/ecology_mysql_config/>) | Sensitive Data | No | No | Yes | Yes | No |
| [GLPI Default Login](<https://docs.escape.tech/documentation/reference/vulnerabilities/glpi_default_login/>) | Sensitive Data | No | No | Yes | Yes | No |
| [Gitlab Default Login](<https://docs.escape.tech/documentation/reference/vulnerabilities/gitlab_weak_login/>) | Sensitive Data | No | No | Yes | Yes | No |
| [Grafana Default Login](<https://docs.escape.tech/documentation/reference/vulnerabilities/grafana_default_login/>) | Sensitive Data | No | No | Yes | Yes | No |
| [Hardcoded Secret in JavaScript Bundle](<https://docs.escape.tech/documentation/reference/vulnerabilities/js_hardcoded_secret/>) | Sensitive Data | No | No | Yes | Yes | Yes |
| [High number of Custom Scalars](<https://docs.escape.tech/documentation/reference/vulnerabilities/high_number_of_custom_scalars/>) | Sensitive Data | Yes | Yes | Yes | Yes | Yes |
| [High number of Payment Card Industry Data](<https://docs.escape.tech/documentation/reference/vulnerabilities/high_number_of_pci/>) | Sensitive Data | Yes | Yes | Yes | Yes | Yes |
| [High number of Personal Health Information](<https://docs.escape.tech/documentation/reference/vulnerabilities/high_number_of_phi/>) | Sensitive Data | Yes | Yes | Yes | Yes | Yes |
| [High number of Personal Identifiable Information](<https://docs.escape.tech/documentation/reference/vulnerabilities/high_number_of_pii/>) | Sensitive Data | Yes | Yes | Yes | Yes | Yes |
| [High number of Secrets](<https://docs.escape.tech/documentation/reference/vulnerabilities/high_number_of_secrets/>) | Sensitive Data | Yes | Yes | Yes | Yes | Yes |
| [Jenkins Default Login](<https://docs.escape.tech/documentation/reference/vulnerabilities/jenkins_weak_password/>) | Sensitive Data | No | No | Yes | Yes | No |
| [Joomla! Component Easy Shop 1.2.3 - Local File Inclusion](<https://docs.escape.tech/documentation/reference/vulnerabilities/joomla_easyshop_lfi/>) | Sensitive Data | No | No | Yes | Yes | No |
| [Joomla! Component com\_sef - Local File Inclusion](<https://docs.escape.tech/documentation/reference/vulnerabilities/joomla_jvehicles_lfi/>) | Sensitive Data | No | No | Yes | Yes | No |
| [Joomla! com\_booking component 2.4.9 - Information Leak](<https://docs.escape.tech/documentation/reference/vulnerabilities/joomla_com_booking_component/>) | Sensitive Data | No | No | Yes | Yes | No |
| [Joomla! com\_fabrik 3.9.11 - Local File Inclusion](<https://docs.escape.tech/documentation/reference/vulnerabilities/joomla_com_fabrik_lfi/>) | Sensitive Data | No | No | Yes | Yes | No |
| [Microsoft Access Database File - Detect](<https://docs.escape.tech/documentation/reference/vulnerabilities/mdb_database_file/>) | Sensitive Data | No | No | Yes | Yes | No |
| [Minio Default Login](<https://docs.escape.tech/documentation/reference/vulnerabilities/minio_default_login/>) | Sensitive Data | No | No | Yes | Yes | No |
| [Nginx Proxy Manager - Default Login](<https://docs.escape.tech/documentation/reference/vulnerabilities/nginx_proxy_manager_default_login/>) | Sensitive Data | No | No | Yes | Yes | No |
| [Node-Red - Default Login](<https://docs.escape.tech/documentation/reference/vulnerabilities/nodered_default_login/>) | Sensitive Data | No | No | Yes | Yes | No |
| [OA E-Office mysql\_config.ini - Information Disclosure](<https://docs.escape.tech/documentation/reference/vulnerabilities/weaver_mysql_config_exposure/>) | Sensitive Data | No | No | Yes | Yes | No |
| [OpenMediaVault - Default Login](<https://docs.escape.tech/documentation/reference/vulnerabilities/openmediavault_default_login/>) | Sensitive Data | No | No | Yes | Yes | No |
| [OpenSearch Dashboard - Default Login](<https://docs.escape.tech/documentation/reference/vulnerabilities/opensearch_dashboard_default_login/>) | Sensitive Data | No | No | Yes | Yes | No |
| [RabbitMQ Default Login](<https://docs.escape.tech/documentation/reference/vulnerabilities/rabbitmq_default_login/>) | Sensitive Data | No | No | Yes | Yes | No |
| [Rundeck - Default Login](<https://docs.escape.tech/documentation/reference/vulnerabilities/rundeck_default_login/>) | Sensitive Data | No | No | Yes | Yes | No |
| [Secret Token Ruby - File Disclosure](<https://docs.escape.tech/documentation/reference/vulnerabilities/secret_token_rb/>) | Sensitive Data | No | No | Yes | Yes | No |
| [Seeyon OA A6 createMysql.jsp Database - Information Disclosure](<https://docs.escape.tech/documentation/reference/vulnerabilities/seeyon_createmysql_exposure/>) | Sensitive Data | No | No | Yes | Yes | No |
| [Sensitive Data Leak in JavaScript Bundle](<https://docs.escape.tech/documentation/reference/vulnerabilities/js_data_leak/>) | Sensitive Data | No | No | No | No | Yes |
| [Social Metrics Tracker \<= 1.6.8 - Unauthorized Data Export](<https://docs.escape.tech/documentation/reference/vulnerabilities/wordpress_social_metrics_tracker/>) | Sensitive Data | No | No | Yes | Yes | No |
| [SonarQube Default Login - Detect](<https://docs.escape.tech/documentation/reference/vulnerabilities/sonarqube_default_login/>) | Sensitive Data | No | No | Yes | Yes | No |
| [TOTOLINK N150RT - Password Exposure](<https://docs.escape.tech/documentation/reference/vulnerabilities/totolink_n150rt_password_exposure/>) | Sensitive Data | No | No | Yes | Yes | No |
| [TOTP Secret Exposure](<https://docs.escape.tech/documentation/reference/vulnerabilities/totp_secret_exposure/>) | Sensitive Data | No | No | No | No | Yes |
| [Twonky Server - Exposure](<https://docs.escape.tech/documentation/reference/vulnerabilities/twonky_server_exposure/>) | Sensitive Data | No | No | Yes | Yes | No |
| [Webmin - Default Login](<https://docs.escape.tech/documentation/reference/vulnerabilities/webmin_default_login/>) | Sensitive Data | No | No | Yes | Yes | No |
| [WordPress DB Backup](<https://docs.escape.tech/documentation/reference/vulnerabilities/wordpress_db_backup/>) | Sensitive Data | No | No | Yes | Yes | No |
| [WordPress DB Backup](<https://docs.escape.tech/documentation/reference/vulnerabilities/wordpress_db_backup_listing/>) | Sensitive Data | No | No | Yes | Yes | No |
| [WordPress Debug Log - Exposure](<https://docs.escape.tech/documentation/reference/vulnerabilities/wordpress_debug_log/>) | Sensitive Data | No | No | Yes | Yes | No |
| [WordPress Plugin "AffiliateWP -- Allowed Products" Log Disclosure](<https://docs.escape.tech/documentation/reference/vulnerabilities/wordpress_affiliatewp_log/>) | Sensitive Data | No | No | Yes | Yes | No |
| [WordPress Total Upkeep Database and Files Backup Download](<https://docs.escape.tech/documentation/reference/vulnerabilities/wordpress_total_upkeep_backup_download/>) | Sensitive Data | No | No | Yes | Yes | No |
| [WordPress Wordfence 7.4.5 - Local File Inclusion](<https://docs.escape.tech/documentation/reference/vulnerabilities/wordpress_wordfence_lfi/>) | Sensitive Data | No | No | Yes | Yes | No |
| [Zabbix Default Login](<https://docs.escape.tech/documentation/reference/vulnerabilities/zabbix_default_login/>) | Sensitive Data | No | No | Yes | Yes | No |
| [phpMyAdmin - Default Login](<https://docs.escape.tech/documentation/reference/vulnerabilities/phpmyadmin_default_login/>) | Sensitive Data | No | No | Yes | Yes | No |
| [phpwiki 1.5.4 - Cross-Site Scripting/Local File Inclusion](<https://docs.escape.tech/documentation/reference/vulnerabilities/phpwiki_lfi/>) | Sensitive Data | No | No | Yes | Yes | No |

Showing 423 of 423 security tests