All pull requests

Pull requests

• Don't confirm Apache path traversal from an HTML passwd example

  #49·cursor[bot] opened Oct 17, 2026Bot·

  ·

• Don't confirm .env CRITICAL from an HTML login page

  #48·cursor[bot] opened Oct 10, 2026Bot·

  ·

• Don't confirm CouchDB CRITICAL from a generic JSON array

  #47·cursor[bot] opened Oct 9, 2026Bot·

  ·

• Don't confirm etcd CRITICAL from an HTML mention

  #46·cursor[bot] opened Oct 8, 2026Bot·

  ·

• Don't confirm Apache CVEs from generic 500/401 pages

  #45·cursor[bot] opened Oct 7, 2026Bot·

  ·

• Don't confirm Elasticsearch CRITICAL from an HTML mention

  #44·cursor[bot] opened Oct 6, 2026Bot·

  ·

• Don't confirm CVE-2024-38476/38477 from an Apache 403 page

  #43·cursor[bot] opened Oct 4, 2026Bot·

  ·

• Don't confirm CVE-2021-39275 from a WordPress fonts stylesheet

  #42·cursor[bot] opened Oct 3, 2026Bot·

  ·

• Don't confirm CVE-2019-0211 from an Apache 403 page

  #41·cursor[bot] opened Oct 2, 2026Bot·

  ·

• Don't confirm JBoss CRITICAL from a WAF 401/403

  #40·cursor[bot] opened Oct 1, 2026Bot·

  ·

• Don't confirm Shellshock CRITICAL from header reflection

  #39·cursor[bot] opened Sep 21, 2026Bot·

  ·

• Don't confirm MongoDB CRITICAL from the isMaster handshake

  #38·cursor[bot] opened Sep 14, 2026Bot·

  ·

• Don't let a failed CVE probe confirm the banner match

  #37·cursor[bot] opened Sep 13, 2026Bot·

  ·

• Don't confirm Kubernetes or Consul exposure from generic JSON

  #36·cursor[bot] opened Sep 12, 2026Bot·

  ·

• Don't keep probing after Adaptive Reasoning swallows cancel

  #35·cursor[bot] opened Sep 10, 2026Bot·

  ·

• Don't confirm Tomcat manager CRITICAL from a generic HTTP 200

  #34·cursor[bot] opened Sep 9, 2026Bot·

  ·

• Don't confirm Spring actuator CRITICAL from a generic HTTP 200

  #33·cursor[bot] opened Sep 8, 2026Bot·

  ·

• Don't no-op DELETE for cache-evicted Postgres scans

  #32·cursor[bot] opened Sep 7, 2026Bot·

  ·

• Don't skip CVE Phase 2 re-verification on a TypeError

  #31·cursor[bot] opened Sep 4, 2026Bot·

  ·

• Don't fail agent-owned scans on controller restart

  #30·cursor[bot] opened Sep 3, 2026Bot·

  ·

• Don't report DROWN from TLS 1.0 and TLS 1.1 alone

  #29·cursor[bot] opened Sep 2, 2026Bot·

  ·

• Don't strand assigned scans after a controller restart

  #28·cursor[bot] opened Sep 1, 2026Bot·

  ·

• Don't mark a cancelled scan as completed

  #27·cursor[bot] opened Aug 31, 2026Bot·

  ·

• Don't follow OSINT HTTP redirects off the scan target

  #26·cursor[bot] opened Aug 30, 2026Bot·

  ·

• Don't follow HTTP redirects in vuln_prober fetches

  #25·cursor[bot] opened Aug 29, 2026Bot·

  ·