{"ip":"34.16.77.98","total_events":813,"verdict":{"verdict":"scanning","label":"Scanning for known vulnerabilities","detail":"19 exploit-path probe(s)","confidence":"medium","network_type":null,"why":["19 request(s) matched a known exploit path.","Only GET/HEAD seen, no request body: scanning for the vulnerability, not delivering a payload.","Not in any known-scanner range."]},"first_seen":"2026-06-25T12:25:54","last_seen":"2026-06-25T15:18:21","events_24h":0,"events_7d":0,"geo":{"country_code":"US","country_name":"United States","region":"Iowa","city":"Council Bluffs","lat":41.2591,"lon":-95.8517,"asn":396982,"org":"Google LLC"},"source_domain":"98.77.16.34.bc.googleusercontent.com","known_scanners":[],"scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"},"cve_matches":[{"cve_id":"CVE-2022-29775","title":"iSpy 7.2.2.0 - Authentication Bypass","severity":"critical","actively_exploited":false,"match_field":"url_path","matched_pattern":"/logfile"},{"cve_id":"CVE-2020-9425","title":"rConfig <3.9.4 - Sensitive Information Disclosure","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/settings.php"},{"cve_id":"CVE-2024-4836","title":"Edito CMS - Sensitive Data Leak","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/config.php"},{"cve_id":"CVE-2024-50340","title":"Symfony Profiler - Remote Access via Injected Arguments","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/_profiler/phpinfo"},{"cve_id":"CVE-2026-55592","title":"Dashy <= 4.3.6 - Reflected XSS via Workspace","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/workspace"}],"malware":[],"top_ports":[{"port":2087,"proto":"tcp","label":"","count":427},{"port":443,"proto":"tcp","label":"HTTPS","count":386}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i190800_9dc949149365_97f8aa674fd9"],"tls_ja3":["19e29534fd49dd27d09234e639c4057e"],"ja4h":["ge11nn0500_9af7e0472034"]},"fingerprint_peers":{"t13i190800_9dc949149365_97f8aa674fd9":6946,"ge11nn0500_9af7e0472034":5661},"user_agents":["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.142 Safari/537.36","Mozilla/5.0 (X11; Linux i686; rv:6.0a2) Gecko/20110615 Firefox/6.0a2 Iceweasel/6.0a2","Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36","Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Firefox/38.0 Iceweasel/38.2.1","Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94 Safari/537.36","Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 UBrowser/6.2.4098.3 Safari/537.36","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240&Win32","Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"],"timeline":[{"date":"2026-06-25","count":813}],"recent_events":[{"timestamp":"2026-06-25T15:18:21","port":2087,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:2087\",\"user-agent\":\"Mozilla/5.0 (Linux; Android 7.0; SM-J710FN) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/sendgrid.php","summary":"","payload_hex":"474554202f73656e64677269642e70687020485454502f312e310d0a486f73743a20<HONEYPOT>3a323038370d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284c696e75783b20416e64726f696420372e303b20534d2d4a373130464e29204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f37362e302e333830392e313131204d6f62696c65205361666172692f3533372e33360d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Linux; Android 7.0; SM-J710FN) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36","community_id":"1:G0inhOVgDzHSPMzo0kdG+hQlQn4=","ja3":"19e29534fd49dd27d09234e639c4057e","session":"51f7abed-9173-47a7-8c23-971e847ca6b1","seq":1,"duration_ms":199,"bytes_in":258,"bytes_out":76},{"timestamp":"2026-06-25T15:18:21","port":2087,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:2087\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.21 (KHTML, like Gecko) konqueror/4.14.10 Safari/537.21\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/app/sendgrid.py","summary":"","payload_hex":"474554202f6170702f73656e64677269642e707920485454502f312e310d0a486f73743a20<HONEYPOT>3a323038370d0a557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b204c696e7578207838365f363429204170706c655765624b69742f3533372e323120284b48544d4c2c206c696b65204765636b6f29206b6f6e717565726f722f342e31342e3130205361666172692f3533372e32310d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.21 (KHTML, like Gecko) konqueror/4.14.10 Safari/537.21","community_id":"1:h+ABb7hnz/Fg0KTCGGXKZRi4+ug=","ja3":"19e29534fd49dd27d09234e639c4057e","session":"58e7136a-49d9-4131-9e5e-7de7be95a92d","seq":1,"duration_ms":100,"bytes_in":239,"bytes_out":76},{"timestamp":"2026-06-25T15:18:21","port":2087,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:2087\",\"user-agent\":\"Mozilla/5.0 (Android; Linux armv7l; rv:10.0.1) Gecko/20100101 Firefox/10.0.1 Fennec/10.0.1\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/config/sendgrid.yml","summary":"","payload_hex":"474554202f636f6e6669672f73656e64677269642e796d6c20485454502f312e310d0a486f73743a20<HONEYPOT>3a323038370d0a557365722d4167656e743a204d6f7a696c6c612f352e302028416e64726f69643b204c696e75782061726d76376c3b2072763a31302e302e3129204765636b6f2f32303130303130312046697265666f782f31302e302e312046656e6e65632f31302e302e310d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Android; Linux armv7l; rv:10.0.1) Gecko/20100101 Firefox/10.0.1 Fennec/10.0.1","community_id":"1:a8dpTu/u0lr1A8mBQF1SNvPkJbY=","ja3":"19e29534fd49dd27d09234e639c4057e","session":"c20c92b6-2957-4f58-bbde-c68ecbc36170","seq":1,"duration_ms":102,"bytes_in":231,"bytes_out":76},{"timestamp":"2026-06-25T15:18:21","port":2087,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:2087\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3872.0 Safari/537.36 Edg/78.0.244.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/mailer/sendgrid.php","summary":"","payload_hex":"474554202f6d61696c65722f73656e64677269642e70687020485454502f312e310d0a486f73743a20<HONEYPOT>3a323038370d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31345f3629204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f37382e302e333837322e30205361666172692f3533372e3336204564672f37382e302e3234342e300d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3872.0 Safari/537.36 Edg/78.0.244.0","community_id":"1:mupAPf8KKZfAKqq5CCiHwQj45Ak=","ja3":"19e29534fd49dd27d09234e639c4057e","session":"af97ed8b-0e5f-4984-b8e0-9ea230ee70ac","seq":1,"duration_ms":103,"bytes_in":275,"bytes_out":76},{"timestamp":"2026-06-25T15:18:21","port":2087,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:2087\",\"user-agent\":\"Mozilla/5.0 (SymbianOS/9.4; U; Series60/5.0 SonyEricssonP100/01; Profile/MIDP-2.1 Configuration/CLDC-1.1) AppleWebKit/525 (KHTML, like Gecko) Version/3.0 Safari/525\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/config/sendgrid.json","summary":"","payload_hex":"474554202f636f6e6669672f73656e64677269642e6a736f6e20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (SymbianOS/9.4; U; Series60/5.0 SonyEricssonP100/01; Profile/MIDP-2.1 Configuration/CLDC-1.1) AppleWebKit/525 (KHTML, like Gecko) Version/3.0 Safari/525","community_id":"1:B2DJnQw9UmTE12zKfXvGdn5O9D0=","ja3":"19e29534fd49dd27d09234e639c4057e","session":"6e43c0ec-bcd7-4f12-936e-a6f0345c920f","seq":1,"duration_ms":103,"bytes_in":306,"bytes_out":76},{"timestamp":"2026-06-25T15:18:21","port":2087,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:2087\",\"user-agent\":\"Mozilla/5.0 (Linux; Android 7.0; SM-G955U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Mobile Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/sendgrid.yml","summary":"","payload_hex":"474554202f73656e64677269642e796d6c20485454502f312e310d0a486f73743a20<HONEYPOT>3a323038370d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284c696e75783b20416e64726f696420372e303b20534d2d473935355529204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f37342e302e333732392e313537204d6f62696c65205361666172692f3533372e33360d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Linux; Android 7.0; SM-G955U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Mobile Safari/537.36","community_id":"1:0f/pak4GCtTfnudvNzXBYWsNKX4=","ja3":"19e29534fd49dd27d09234e639c4057e","session":"8e1de141-d1bf-46ae-b6ef-ea4bccb913cd","seq":1,"duration_ms":102,"bytes_in":257,"bytes_out":76},{"timestamp":"2026-06-25T15:18:21","port":2087,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:2087\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0 Safari/605.1.15\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/sendgrid-config.json","summary":"","payload_hex":"474554202f73656e64677269642d636f6e6669672e6a736f6e20485454502f312e310d0a486f73743a20<HONEYPOT>3a323038370d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f313529204170706c655765624b69742f3630352e312e313520284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f31332e30205361666172692f3630352e312e31350d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0 Safari/605.1.15","community_id":"1:oCHObX17jh7Quu/xvroOJAla/uM=","ja3":"19e29534fd49dd27d09234e639c4057e","session":"7d32ba10-255f-4401-b5e1-fb5be779609d","seq":1,"duration_ms":102,"bytes_in":257,"bytes_out":76},{"timestamp":"2026-06-25T15:18:21","port":2087,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:2087\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/sendgrid.config.json","summary":"","payload_hex":"474554202f73656e64677269642e636f6e6669672e6a736f6e20485454502f312e310d0a486f73743a20<HONEYPOT>3a323038370d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f395f3529204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f36352e302e333332352e313831205361666172692f3533372e33360d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36","community_id":"1:4c5hH+rsOh8xYGHi2w1btgGH5nk=","ja3":"19e29534fd49dd27d09234e639c4057e","session":"48c23587-a006-4485-94aa-ffe6554c947b","seq":1,"duration_ms":102,"bytes_in":262,"bytes_out":76},{"timestamp":"2026-06-25T15:18:21","port":2087,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:2087\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/sendgrid.py","summary":"","payload_hex":"474554202f73656e64677269642e707920485454502f312e310d0a486f73743a20<HONEYPOT>3a323038370d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b20574f57363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f36362e302e333335392e313339205361666172692f3533372e33360d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36","community_id":"1:/NFhHLkJs1WKKQ0qoZEL2gAlAMI=","ja3":"19e29534fd49dd27d09234e639c4057e","session":"0e5d948b-44fd-48f5-ba31-9fdfb5a174d4","seq":1,"duration_ms":102,"bytes_in":243,"bytes_out":76},{"timestamp":"2026-06-25T15:18:21","port":2087,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:2087\",\"user-agent\":\"Mozilla/5.0 (Linux; Android 8.1.0; Redmi Y2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.89 Mobile Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/config/sendgrid.php","summary":"","payload_hex":"474554202f636f6e6669672f73656e64677269642e70687020485454502f312e310d0a486f73743a20<HONEYPOT>3a323038370d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284c696e75783b20416e64726f696420382e312e303b205265646d6920593229204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f37362e302e333830392e3839204d6f62696c65205361666172692f3533372e33360d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Linux; Android 8.1.0; Redmi Y2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.89 Mobile Safari/537.36","community_id":"1:A4Q9hOebRB0iETclaLpFt1ibA7U=","ja3":"19e29534fd49dd27d09234e639c4057e","session":"7e6b1641-365b-453f-96c1-2588fb2bfef4","seq":1,"duration_ms":100,"bytes_in":265,"bytes_out":76}],"http_methods":[{"method":"GET","count":813}],"distinct_ports_total":2,"top_paths":[{"path":"/api/credentials.json","count":4,"ports":2},{"path":"/private/credentials.json","count":4,"ports":2},{"path":"/server/settings.json","count":2,"ports":2},{"path":"/backend/aws.json","count":2,"ports":2},{"path":"/api/docker-compose.yml","count":2,"ports":2},{"path":"/docker/docker-compose.yml","count":2,"ports":2},{"path":"/backend/config.php","count":2,"ports":2},{"path":"/.idea/dataSources.xml","count":2,"ports":2},{"path":"/src/credentials.json","count":2,"ports":2},{"path":"/api/actuator/heapdump","count":2,"ports":2},{"path":"/server/appsettings.json","count":2,"ports":2},{"path":"/backups/dump.sql","count":2,"ports":2},{"path":"/app/database.yml","count":2,"ports":2},{"path":"/docker-compose.prod.yml","count":2,"ports":2},{"path":"/v1/actuator/heapdump","count":2,"ports":2}],"distinct_paths_total":200,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Charset","Accept-Encoding","Connection","Host","User-Agent"],"representative":[{"name":"Accept-Charset","value":"utf-8","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"<HONEYPOT>:2087","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Linux; Android 7.0; SM-J710FN) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[{"tag_id":"CVE-2022-29775","tag_type":"cve","title":"iSpy 7.2.2.0 - Authentication Bypass","severity":"critical","actively_exploited":false,"match_field":"url_path","matched_pattern":"/logfile","reference_urls":["https://gist.github.com/securylight/79f673aa3a453c80c0e78f356a8f650b","https://github.com/securylight/CVES_write_ups/blob/main/iSpy_connect.pdf","https://cve.mitre.org/cgi-bin/cvename.cgi?name=2022-29775","https://nvd.nist.gov/vuln/detail/CVE-2022-29775","https://github.com/securylight/CVES_write_ups"]},{"tag_id":"CVE-2020-9425","tag_type":"cve","title":"rConfig <3.9.4 - Sensitive Information Disclosure","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/settings.php","reference_urls":["https://blog.hivint.com/rconfig-3-9-3-unauthenticated-sensitive-information-disclosure-ead4ed88f153","https://github.com/rconfig/rconfig/commit/20f4e3d87e84663d922b937842fddd9af1b68dd9","https://nvd.nist.gov/vuln/detail/CVE-2020-9425","https://github.com/ARPSyndicate/cvemon","https://github.com/ARPSyndicate/kenzer-templates"]},{"tag_id":"CVE-2024-4836","tag_type":"cve","title":"Edito CMS - Sensitive Data Leak","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/config.php","reference_urls":["https://cert.pl/en/posts/2024/07/CVE-2024-4836/","https://github.com/sleep46/CVE-2024-4836_Check","https://nvd.nist.gov/vuln/detail/CVE-2024-4836"]},{"tag_id":"CVE-2024-50340","tag_type":"cve","title":"Symfony Profiler - Remote Access via Injected Arguments","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/_profiler/phpinfo","reference_urls":["https://github.com/symfony/symfony/commit/a77b308c3f179ed7c8a8bc295f82b2d6ee3493fa","https://github.com/symfony/symfony/security/advisories/GHSA-x8vp-gf4q-mw5j","https://blog.nollium.com/cve-2024-50340-remote-access-to-symfony-profiler-via-injected-arguments-d2f14b4f6ad7","https://github.com/nollium/CVE-2024-50340-eos-exploit","https://nvd.nist.gov/vuln/detail/CVE-2024-50340"]},{"tag_id":"CVE-2026-55592","tag_type":"cve","title":"Dashy <= 4.3.6 - Reflected XSS via Workspace","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/workspace","reference_urls":["https://github.com/Lissy93/dashy/security/advisories/GHSA-58mp-4qr3-vmrc","https://nvd.nist.gov/vuln/detail/CVE-2026-55592"]}],"data_as_of":"2026-07-09T11:21:37.928622+00:00"}