Vulnerabilities found in pen testing