Active Security Findings
| Finding Title | Asset | Severity | Status | First Seen |
|---|---|---|---|---|
| HTTP Strict Transport Security (HSTS) Not Enforced | Student Services Gateway | MEDIUM | New | 23 Aug 2026 |
| Clickjacking Vulnerability (Missing X-Frame-Options) | Student Services Gateway | MEDIUM | New | 23 Aug 2026 |
| HTTP Strict Transport Security (HSTS) Not Enforced | bank | MEDIUM | New | 22 Aug 2026 |
| Clickjacking Vulnerability (Missing X-Frame-Options) | bank | MEDIUM | New | 22 Aug 2026 |
| Server Information Disclosure (gunicorn/19.9.0) | Student Services Gateway | INFO | New | 23 Aug 2026 |
| Server Information Disclosure (cloudflare) | bank | INFO | New | 22 Aug 2026 |
| Missing or Unsafe Content-Security-Policy (CSP) | Student Services Gateway | HIGH | New | 23 Aug 2026 |
| Missing or Unsafe Content-Security-Policy (CSP) | bank | HIGH | New | 22 Aug 2026 |
| VulnBank: Insecure Direct Object Reference (IDOR) & Transaction Bypass | bank | CRITICAL | New | 22 Aug 2026 |
| CVE-2026-32475: Critical Unauthenticated File Upload & RCE in Elementor Pro 4.2.1 | shop | CRITICAL | New | 22 Aug 2026 |