Vulnerabilities found when pen testing