webb app exploits