{"ip":"162.158.168.197","data_as_of":"2026-10-21T15:57:33+00:00","observed":true,"total_events":46,"verdict":{"verdict":"malicious","label":"Exploit attempts observed","detail":"28 exploit-path hits","confidence":"high","network_type":"CDN","why":["28 request(s) matched a known exploit path.","Requests with a body (POST, PUT, PATCH or DELETE) were seen, which carries a payload.","5+ hits raise confidence to high.","Not in any known-scanner range.","Sent 111,537 bytes, which is sustained payload delivery."],"engagement":{"level":"payload","label":"Sustained payload","detail":"111,537 bytes sent","bytes_sent":111537,"session_seconds":7,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-08T05:37:57","last_seen":"2026-10-16T19:34:24","events_24h":0,"events_7d":45,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"AU","country_name":"Australia","region":"New South Wales","city":"Sydney","lat":-33.8672,"lon":151.1997,"asn":13335,"org":"Cloudflare, Inc."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as13335","label":"Cloudflare","category":"cdn","url":"https://www.peeringdb.com/asn/13335"},"cve_matches":[{"cve_id":"CVE-2017-9841","title":"PHPUnit - Remote Code Execution","severity":"critical","actively_exploited":true,"match_field":"url_path","matched_pattern":"/phpunit/phpunit/src/Util/PHP/eval-stdin.php","kev_date_added":"2022-02-15"}],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":46}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13d1312h2_a44d0ee8b3cc_e381dae6da6b"],"tls_client_hello":"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","tls_ja3":["67560f98d68783bd640246df3052c151"],"http_akin":["b11cun136_80040417_ce5db27d_x379753ab95539f8fdafedf99","b11cuq146_80050817_c7b09756_x379753ab95539f8fdafedf99","b11cun126_80040017_97192874_x379753ab95539f8fdafedf99","b11cun106_80040003_eb4244cf_x379753ab95539f8fdafedf99"],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{"t13d1312h2_a44d0ee8b3cc_e381dae6da6b":425,"b11cun126_80040017_97192874_x379753ab95539f8fdafedf99":13,"b11cun136_80040417_ce5db27d_x379753ab95539f8fdafedf99":2,"b11cuq146_80050817_c7b09756_x379753ab95539f8fdafedf99":2,"b11cun106_80040003_eb4244cf_x379753ab95539f8fdafedf99":20},"akin_families":{"b11cun136_80040417_ce5db27d_x379753ab95539f8fdafedf99":{"head":"b11cun126_80040017_97192874_x379753ab95539f8fdafedf99","shapes":2,"ips":13},"b11cun126_80040017_97192874_x379753ab95539f8fdafedf99":{"head":"b11cun126_80040017_97192874_x379753ab95539f8fdafedf99","shapes":2,"ips":13}},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-10-08","count":1},{"date":"2026-10-16","count":45}],"recent_events":[{"timestamp":"2026-10-16T19:34:24","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"170.64.136.13\",\"cf-ipcountry\":\"AU\",\"cf-ray\":\"a4b980300ae0e7ee-SYD\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36\",\"x-forwarded-for\":\"170.64.136.13\",\"x-forwarded-proto\":\"https\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"//plugins/responsive_filemanager/filemanager/dialog.php","summary":"","payload_hex":"474554202f2f706c7567696e732f726573706f6e736976655f66696c656d616e616765722f66696c656d616e616765722f6469616c6f672e70687020485454502f312e310d0a782d666f727761726465642d666f723a203137302e36342e3133362e31330d0a6163636570742d656e636f64696e673a20677a69702c2062720d0a757365722d6167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3133322e302e302e30205361666172692f3533372e33360d0a6163636570743a202a2f2a0d0a63662d7261793a20613462393830333030616530653765652d5359440d0a63646e2d6c6f6f703a20636c6f7564666c6172653b206c6f6f70733d310d0a43462d436f6e6e656374696e672d49503a203137302e36342e3133362e31330d0a43462d4950436f756e7472793a2041550d0a43462d56697369746f723a207b22736368656d65223a226874747073227d0d0a582d466f727761726465642d50726f746f3a2068747470730d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a486f73743a20736974652e7072696e636875622e636f6d0d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36","ja3":"67560f98d68783bd640246df3052c151","session":"6823d258-7680-4046-b5e0-85df143f97d8","seq":9,"duration_ms":5541,"bytes_in":4232,"bytes_out":720},{"timestamp":"2026-10-16T19:34:23","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"170.64.136.13\",\"cf-ipcountry\":\"AU\",\"cf-ray\":\"a4b9802fafa8e7ed-SYD\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36\",\"x-forwarded-for\":\"170.64.136.13\",\"x-forwarded-proto\":\"https\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"//cms/vendor/responsive_filemanager/filemanager/dialog.php","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36","ja3":"67560f98d68783bd640246df3052c151","session":"3bf53332-fade-40c8-b644-ed3bcc59f978","seq":9,"duration_ms":5485,"bytes_in":4357,"bytes_out":720},{"timestamp":"2026-10-16T19:34:23","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"170.64.136.13\",\"cf-ipcountry\":\"AU\",\"cf-ray\":\"a4b9802c99b0e7ed-SYD\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36\",\"x-forwarded-for\":\"170.64.136.13\",\"x-forwarded-proto\":\"https\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"//admin/events/lib/external/responsive_filemanager/filemanager/dialog.php","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36","ja3":"67560f98d68783bd640246df3052c151","session":"298623f9-e86b-4f18-bc00-4b21ac5efd8b","seq":9,"duration_ms":5002,"bytes_in":4276,"bytes_out":720},{"timestamp":"2026-10-16T19:34:23","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"170.64.136.13\",\"cf-ipcountry\":\"AU\",\"cf-ray\":\"a4b9802c6ac7e7ee-SYD\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36\",\"x-forwarded-for\":\"170.64.136.13\",\"x-forwarded-proto\":\"https\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"//lib/filemanager/dialog.php","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36","ja3":"67560f98d68783bd640246df3052c151","session":"30e132db-7905-496d-bd32-b1143d8c57f9","seq":12,"duration_ms":6980,"bytes_in":5650,"bytes_out":960},{"timestamp":"2026-10-16T19:34:23","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"170.64.136.13\",\"cf-ipcountry\":\"AU\",\"cf-ray\":\"a4b9802c3ace5c0a-SYD\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36\",\"x-forwarded-for\":\"170.64.136.13\",\"x-forwarded-proto\":\"https\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"//resources/js/tinymce/plugins/filemanager/dialog.php","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36","ja3":"67560f98d68783bd640246df3052c151","session":"cabcb427-1ffe-4887-86ed-ac49a64b672e","seq":6,"duration_ms":3284,"bytes_in":2808,"bytes_out":480},{"timestamp":"2026-10-16T19:34:23","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"170.64.136.13\",\"cf-ipcountry\":\"AU\",\"cf-ray\":\"a4b9802c2b24e7dd-SYD\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36\",\"x-forwarded-for\":\"170.64.136.13\",\"x-forwarded-proto\":\"https\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"//resources/plugins/tiny_mce/plugins/filemanager/dialog.php","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36","ja3":"67560f98d68783bd640246df3052c151","session":"6823d258-7680-4046-b5e0-85df143f97d8","seq":8,"duration_ms":4908,"bytes_in":3744,"bytes_out":640},{"timestamp":"2026-10-16T19:34:22","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"170.64.136.13\",\"cf-ipcountry\":\"AU\",\"cf-ray\":\"a4b980297e5fe7dd-SYD\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36\",\"x-forwarded-for\":\"170.64.136.13\",\"x-forwarded-proto\":\"https\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"//cms/tinymce/filemanager/filemanager/dialog.php","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36","ja3":"67560f98d68783bd640246df3052c151","session":"3bf53332-fade-40c8-b644-ed3bcc59f978","seq":8,"duration_ms":4493,"bytes_in":3866,"bytes_out":640},{"timestamp":"2026-10-16T19:34:22","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"170.64.136.13\",\"cf-ipcountry\":\"AU\",\"cf-ray\":\"a4b9802978915c0a-SYD\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36\",\"x-forwarded-for\":\"170.64.136.13\",\"x-forwarded-proto\":\"https\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"//js/fileManager/filemanager/dialog.php","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36","ja3":"67560f98d68783bd640246df3052c151","session":"298623f9-e86b-4f18-bc00-4b21ac5efd8b","seq":8,"duration_ms":4501,"bytes_in":3770,"bytes_out":640},{"timestamp":"2026-10-16T19:34:22","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"170.64.136.13\",\"cf-ipcountry\":\"AU\",\"cf-ray\":\"a4b980295c55e7ee-SYD\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36\",\"x-forwarded-for\":\"170.64.136.13\",\"x-forwarded-proto\":\"https\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"//media/filemanager/dialog.php","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36","ja3":"67560f98d68783bd640246df3052c151","session":"30e132db-7905-496d-bd32-b1143d8c57f9","seq":11,"duration_ms":6484,"bytes_in":5189,"bytes_out":880},{"timestamp":"2026-10-16T19:34:22","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"170.64.136.13\",\"cf-ipcountry\":\"AU\",\"cf-ray\":\"a4b980290b29e7ed-SYD\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36\",\"x-forwarded-for\":\"170.64.136.13\",\"x-forwarded-proto\":\"https\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"//public/filemanager/dialog.php","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36","ja3":"67560f98d68783bd640246df3052c151","session":"cabcb427-1ffe-4887-86ed-ac49a64b672e","seq":5,"duration_ms":2792,"bytes_in":2322,"bytes_out":400}],"http_methods":[{"method":"GET","count":44},{"method":"POST","count":2}],"distinct_ports_total":1,"top_paths":[{"path":"//kcfinder/upload.php","count":2,"ports":1},{"path":"/","count":1,"ports":1},{"path":"//admin/galerie/server/php/","count":1,"ports":1},{"path":"//plugins/server/php/","count":1,"ports":1},{"path":"//js/server/php/","count":1,"ports":1},{"path":"//fileupload/server/php/","count":1,"ports":1},{"path":"//filemanager/dialog.php","count":1,"ports":1},{"path":"//assets/server/php/","count":1,"ports":1},{"path":"//admin/js/kcfinder/upload.php","count":1,"ports":1},{"path":"//assets/filemanager/dialog.php","count":1,"ports":1},{"path":"//ckeditor/plugins/kcfinder/upload.php","count":1,"ports":1},{"path":"//libraries/jsupload/server/php/","count":1,"ports":1},{"path":"/.git/config","count":1,"ports":1},{"path":"//admin/ckeditor/plugins/kcfinder/upload.php","count":1,"ports":1},{"path":"//assets/js/frontend/jquery-file-upload/server/php/","count":1,"ports":1}],"distinct_paths_total":45,"top_snis":[{"value":"site.princhub.com","count":46}],"top_hosts":[{"value":"site.princhub.com","count":46}],"top_alpns":[{"value":"h2, http/1.1","count":46}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Cdn-Loop","Cf-Connecting-Ip","Cf-Ipcountry","Cf-Ray","Cf-Visitor","Connection","Host","User-Agent","X-Forwarded-For","X-Forwarded-Proto"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip, br","notable":false},{"name":"Cdn-Loop","value":"cloudflare; loops=1","notable":false},{"name":"Cf-Connecting-Ip","value":"170.64.136.13","notable":false},{"name":"Cf-Ipcountry","value":"AU","notable":false},{"name":"Cf-Ray","value":"a4b980300ae0e7ee-SYD","notable":false},{"name":"Cf-Visitor","value":"{\"scheme\":\"https\"}","notable":false},{"name":"Connection","value":"Keep-Alive","notable":false},{"name":"Host","value":"site.princhub.com","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36","notable":false},{"name":"X-Forwarded-For","value":"170.64.136.13","notable":true},{"name":"X-Forwarded-Proto","value":"https","notable":true}],"distinct_sets":1,"events_with_headers":10},"tags":[{"tag_id":"CVE-2017-9841","tag_type":"cve","title":"PHPUnit - Remote Code Execution","severity":"critical","actively_exploited":true,"match_field":"url_path","matched_pattern":"/phpunit/phpunit/src/Util/PHP/eval-stdin.php","reference_urls":["https://github.com/cyberharsh/Php-unit-CVE-2017-9841","https://github.com/RandomRobbieBF/phpunit-brute","https://thephp.cc/articles/phpunit-a-security-risk","https://twitter.com/sec715/status/1411517028012158976","https://nvd.nist.gov/vuln/detail/CVE-2017-9841"],"kev_date_added":"2022-02-15"}]}