Rule catalog

Firestore collection publicly readable

Firebase Realtime Database publicly readable

Realtime Database allows public read access

Realtime Database rules in test mode (allow all)

Realtime Database allows public write access

Firebase Cloud Storage bucket publicly listable

Potential IDOR via sequential IDs

Client-side only auth guard detected — bypassable via dev tools

Role/permission check in client JavaScript — privilege escalation risk

postMessage listener without origin validation

Missing Referrer-Policy header

InfluxDB admin port exposed

ZooKeeper port exposed

Open redirect

Open redirect (JavaScript)

WordPress REST API fully accessible

DMARC policy set to 'none' — not enforcing

Secret baked into image via ENV/ARG

HSTS missing includeSubDomains directive

No DMARC record — email spoofing not blocked

No SPF record — email spoofing possible

Auth token stored in localStorage — XSS leads to account takeover

PII stored in browser storage

Missing Strict-Transport-Security (HSTS) header

High-entropy token detected

Potential secret detected in client code

Site not using HTTPS

Stripe live secret key exposed in client code

Server supports TLS 1.0 — deprecated and insecure

Server supports TLS 1.1 — deprecated

TLS certificate has expired

TLS certificate validation failed

CSP allows 'unsafe-eval'

CSP allows 'unsafe-inline' in script-src

document.write() used — DOM manipulation risk

SQL injection (error-based)

Reflected XSS

Dockerfile has no HEALTHCHECK

Data exfiltration chain: exposed user data + no rate limiting

No rate limiting on sensitive endpoint

CORS reflects arbitrary origin with credentials

CORS reflects arbitrary origin

CORS wildcard with credentials

CSP script-src allows overly broad sources

CSP missing object-src restriction

CSP is report-only, not enforced

apt-get install without --no-install-recommends

Dockerfile has no USER directive

Container runs as root

Dockerfile invokes sudo

.env file publicly accessible

Error page leaks implementation details

JavaScript source map exposed

Source map reference found in JavaScript

Missing Cross-Origin-Opener-Policy header

Missing Cross-Origin-Resource-Policy header

No Content-Security-Policy header

Missing Permissions-Policy header

Missing X-Content-Type-Options: nosniff

Missing X-Frame-Options header

Elasticsearch HTTP API exposed to the public internet

Kafka broker port exposed

Memcached port exposed to the public internet

MySQL port exposed to the public internet

PostgreSQL port exposed to the public internet

RabbitMQ AMQP broker exposed

RabbitMQ management UI exposed

Server software version disclosed

Proxy software disclosed in Via header

Dockerfile uses :latest tag

Dockerfile base image has no explicit tag

Vulnerable dependency

CouchDB admin port exposed

MongoDB port exposed to the public internet

Neo4j Browser port exposed

Redis port exposed to the public internet

Email confirmation disabled

Phone confirmation disabled

WordPress brute-force attack chain: admin username + exposed login

WordPress login page publicly accessible

WordPress user enumeration via REST API

Dockerfile uses ADD for remote URL

Dockerfile pipes remote script into shell

Public signup is disabled

No cookie policy page found

Analytics tracker loaded without cookie consent