{"ip":"34.162.230.253","total_events":30,"verdict":{"verdict":"scanning","label":"Scanning for known vulnerabilities","detail":"1 exploit-path probe(s)","confidence":"medium","network_type":null},"first_seen":"2026-06-15T21:12:04","last_seen":"2026-06-15T21:12:05","events_24h":0,"events_7d":30,"geo":{"country_code":"US","country_name":"United States","region":"Ohio","city":"Columbus","lat":39.9625,"lon":-83.0061,"asn":396982,"org":"Google LLC"},"source_domain":"253.230.162.34.bc.googleusercontent.com","known_scanners":[],"scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"},"cve_matches":[{"cve_id":"CVE-2021-41097","title":"Aurelia-Path < 1.1.7 - Prototype Pollution","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/blog"},{"cve_id":"CVE-2022-24288","title":"Apache Airflow OS Command Injection","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/code"},{"cve_id":"CVE-2026-3396","title":"WCAPF WooCommerce Ajax Product Filter - SQL Injection","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/shop"},{"cve_id":"CVE-2021-28169","title":"Eclipse Jetty ConcatServlet - Information Disclosure","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/static"},{"cve_id":"CVE-2024-36527","title":"Puppeteer Renderer - Directory Traversal","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/html"}],"top_ports":[{"port":3000,"proto":"tcp","label":"Web-alt","count":30}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i190800_9dc949149365_97f8aa674fd9"],"tls_ja3":["19e29534fd49dd27d09234e639c4057e"],"ja4h":["ge11nn0500_9af7e0472034"]},"fingerprint_peers":{"t13i190800_9dc949149365_97f8aa674fd9":4326,"ge11nn0500_9af7e0472034":3008},"user_agents":["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36","Mozilla/5.0 (X11; Linux 3.8-6.dmz.1-liquorix-686) KHTML/4.8.4 (like Gecko) Konqueror/4.8","Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.100 Safari/537.36","Mozilla/5.0 (Linux; Android 8.1.0; MI PLAY) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36","Mozilla/5.0 (Linux; Android 5.0.2; Lenovo A6010) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Mobile Safari/537.36","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3889.0 Safari/537.36","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.75 Safari/537.36","Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.80 Safari/537.36"],"timeline":[{"date":"2026-06-15","count":30}],"recent_events":[{"timestamp":"2026-06-15T21:12:05","port":3000,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.62 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/code/.git/config","summary":"","payload_hex":"474554202f636f64652f2e6769742f636f6e66696720485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b20574f57363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f36322e302e333230322e3632205361666172692f3533372e33360d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.62 Safari/537.36","community_id":"1:rxK4gCxfUobzVvDvG6eSEpiYWFI=","ja3":"19e29534fd49dd27d09234e639c4057e","session":"c0334b6e-68c9-4ff6-b734-1f6b3c201d0b","seq":1,"duration_ms":100,"bytes_in":248,"bytes_out":79},{"timestamp":"2026-06-15T21:12:05","port":3000,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.100 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/project/.git/config","summary":"","payload_hex":"474554202f70726f6a6563742f2e6769742f636f6e66696720485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31335f3129204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f37362e302e333830392e313030205361666172692f3533372e33360d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.100 Safari/537.36","community_id":"1:AI18lQaEF92Fy9tugMf7jLE3ZL4=","ja3":"19e29534fd49dd27d09234e639c4057e","session":"f9eca49d-2f2a-46f5-8bd3-badce6dfefb9","seq":1,"duration_ms":100,"bytes_in":263,"bytes_out":79},{"timestamp":"2026-06-15T21:12:05","port":3000,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"Mozilla/5.0 (Windows NT 6.2; ARM; Trident/7.0; Touch; rv:11.0; WPDesktop; NOKIA; Lumia 635) like Gecko\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/symfony/.git/config","summary":"","payload_hex":"474554202f73796d666f6e792f2e6769742f636f6e66696720485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e5420362e323b2041524d3b2054726964656e742f372e303b20546f7563683b2072763a31312e303b2057504465736b746f703b204e4f4b49413b204c756d69612036333529206c696b65204765636b6f0d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 6.2; ARM; Trident/7.0; Touch; rv:11.0; WPDesktop; NOKIA; Lumia 635) like Gecko","community_id":"1:3oYBXdQNiRf3lxnYAYnIqvpIj18=","ja3":"19e29534fd49dd27d09234e639c4057e","session":"ae2bca80-749f-4ab9-b7f9-932dd3130984","seq":1,"duration_ms":100,"bytes_in":244,"bytes_out":79},{"timestamp":"2026-06-15T21:12:05","port":3000,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"Opera/9.5 (Microsoft Windows; PPC; Opera Mobi; U) SonyEricssonX1i/R2AA Profile/MIDP-2.0 Configuration/CLDC-1.1\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/laravel/.git/config","summary":"","payload_hex":"474554202f6c61726176656c2f2e6769742f636f6e66696720485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a204f706572612f392e3520284d6963726f736f66742057696e646f77733b205050433b204f70657261204d6f62693b20552920536f6e794572696373736f6e5831692f523241412050726f66696c652f4d4944502d322e3020436f6e66696775726174696f6e2f434c44432d312e310d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Opera/9.5 (Microsoft Windows; PPC; Opera Mobi; U) SonyEricssonX1i/R2AA Profile/MIDP-2.0 Configuration/CLDC-1.1","community_id":"1:hA1/N4CuGTAUCN2hVQZkQXM2S0A=","ja3":"19e29534fd49dd27d09234e639c4057e","session":"17e8b336-b94c-4560-abd8-03fc762464a5","seq":1,"duration_ms":101,"bytes_in":252,"bytes_out":79},{"timestamp":"2026-06-15T21:12:05","port":3000,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.86 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/wp-content/.git/config","summary":"","payload_hex":"474554202f77702d636f6e74656e742f2e6769742f636f6e66696720485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b204c696e7578207838365f363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f37332e302e333638332e3836205361666172692f3533372e33360d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.86 Safari/537.36","community_id":"1:7yQfDqM9227ZfI21/DQR1HtK3fs=","ja3":"19e29534fd49dd27d09234e639c4057e","session":"13c4ed69-85c5-4d25-b483-731df72f9fae","seq":1,"duration_ms":101,"bytes_in":249,"bytes_out":79},{"timestamp":"2026-06-15T21:12:05","port":3000,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.79 Safari/537.36 Maxthon/5.2.6.1000\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/wordpress/.git/config","summary":"","payload_hex":"474554202f776f726470726573732f2e6769742f636f6e66696720485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b20574f57363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f36312e302e333136332e3739205361666172692f3533372e3336204d617874686f6e2f352e322e362e313030300d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.79 Safari/537.36 Maxthon/5.2.6.1000","community_id":"1:IW6RHm2GYdJStJlHN/pwrShs1fE=","ja3":"19e29534fd49dd27d09234e639c4057e","session":"98e61968-19e8-473c-8431-8a5958710269","seq":1,"duration_ms":100,"bytes_in":272,"bytes_out":79},{"timestamp":"2026-06-15T21:12:05","port":3000,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"Mozilla/4.0 (compatible; MSIE 5.15; Mac_PowerPC)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/admin/.git/config","summary":"","payload_hex":"474554202f61646d696e2f2e6769742f636f6e66696720485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a204d6f7a696c6c612f342e302028636f6d70617469626c653b204d53494520352e31353b204d61635f506f7765725043290d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/4.0 (compatible; MSIE 5.15; Mac_PowerPC)","community_id":"1:9opLsO42vHj4QQT7kBqhxZLnuPw=","ja3":"19e29534fd49dd27d09234e639c4057e","session":"049183a5-1a77-491d-98eb-0716b1840548","seq":1,"duration_ms":100,"bytes_in":188,"bytes_out":79},{"timestamp":"2026-06-15T21:12:05","port":3000,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"Mozilla/5.0 (Windows NT 6.1) AppleWebKit/535.2 (KHTML, like Gecko) Chrome/18.6.872.0 Safari/535.2 UNTRUSTED/1.0 3gpp-gba UNTRUSTED/1.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/dist/.git/config","summary":"","payload_hex":"474554202f646973742f2e6769742f636f6e66696720485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e5420362e3129204170706c655765624b69742f3533352e3220284b48544d4c2c206c696b65204765636b6f29204368726f6d652f31382e362e3837322e30205361666172692f3533352e3220554e545255535445442f312e3020336770702d67626120554e545255535445442f312e300d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 6.1) AppleWebKit/535.2 (KHTML, like Gecko) Chrome/18.6.872.0 Safari/535.2 UNTRUSTED/1.0 3gpp-gba UNTRUSTED/1.0","community_id":"1:6G+AK3zDpD4A6UZMJ9Z8XGoqxDk=","ja3":"19e29534fd49dd27d09234e639c4057e","session":"f409c4c8-04c7-4f23-afc6-e54644ee6d67","seq":1,"duration_ms":101,"bytes_in":273,"bytes_out":79},{"timestamp":"2026-06-15T21:12:05","port":3000,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"Avant Browser/1.2.789rel1 (http://www.avantbrowser.com)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/shop/.git/config","summary":"","payload_hex":"474554202f73686f702f2e6769742f636f6e66696720485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a204176616e742042726f777365722f312e322e37383972656c312028687474703a2f2f7777772e6176616e7462726f777365722e636f6d290d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Avant Browser/1.2.789rel1 (http://www.avantbrowser.com)","community_id":"1:WjV0ymwL7gjGMnc0R/f9Ds89rYc=","ja3":"19e29534fd49dd27d09234e639c4057e","session":"2e31e333-2ad3-47cc-a4bf-6d056fa9e494","seq":1,"duration_ms":100,"bytes_in":194,"bytes_out":79},{"timestamp":"2026-06-15T21:12:05","port":3000,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.87 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/blog/.git/config","summary":"","payload_hex":"474554202f626c6f672f2e6769742f636f6e66696720485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31345f3429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f37362e302e333830392e3837205361666172692f3533372e33360d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.87 Safari/537.36","community_id":"1:23COeYSWbNgZ9a0WLMeeTlLXQ+0=","ja3":"19e29534fd49dd27d09234e639c4057e","session":"a0ff5ed4-d91f-4b97-8fe3-209bbd74dc20","seq":1,"duration_ms":100,"bytes_in":259,"bytes_out":79}],"http_methods":[{"method":"GET","count":30}],"distinct_ports_total":1,"top_paths":[{"path":"/app/.git/config","count":1,"ports":1},{"path":"/project/.git/config","count":1,"ports":1},{"path":"/src/.git/config","count":1,"ports":1},{"path":"/v2/.git/config","count":1,"ports":1},{"path":"/v1/.git/config","count":1,"ports":1},{"path":"/web/.git/config","count":1,"ports":1},{"path":"/.git/config","count":1,"ports":1},{"path":"/www/.git/config","count":1,"ports":1},{"path":"/v3/.git/config","count":1,"ports":1},{"path":"/dist/.git/config","count":1,"ports":1},{"path":"/assets/.git/config","count":1,"ports":1},{"path":"/frontend/.git/config","count":1,"ports":1},{"path":"/code/.git/config","count":1,"ports":1},{"path":"/shop/.git/config","count":1,"ports":1},{"path":"/backend/.git/config","count":1,"ports":1}],"distinct_paths_total":30,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Charset","Accept-Encoding","Connection","Host","User-Agent"],"representative":[{"name":"Accept-Charset","value":"utf-8","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"<HONEYPOT>:3000","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.62 Safari/537.36","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[{"tag_id":"CVE-2021-41097","tag_type":"cve","title":"Aurelia-Path < 1.1.7 - Prototype Pollution","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/blog","reference_urls":["https://github.com/aurelia/path/issues/44","https://security.snyk.io/vuln/SNYK-JS-AURELIAPATH-1579475","https://nvd.nist.gov/vuln/detail/CVE-2021-41097"]},{"tag_id":"CVE-2022-24288","tag_type":"cve","title":"Apache Airflow OS Command Injection","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/code","reference_urls":["https://github.com/advisories/GHSA-3v7g-4pg3-7r6j","https://nvd.nist.gov/vuln/detail/CVE-2022-24288","https://lists.apache.org/thread/dbw5ozcmr0h0lhs0yjph7xdc64oht23t","https://github.com/ARPSyndicate/kenzer-templates","https://github.com/Hax0rG1rl/my_cve_and_bounty_poc"]},{"tag_id":"CVE-2026-3396","tag_type":"cve","title":"WCAPF WooCommerce Ajax Product Filter - SQL Injection","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/shop","reference_urls":["https://patchstack.com/database/vulnerability/wordpress-wcapf-woocommerce-ajax-product-filter-plugin-4-2-3-unauthenticated-time-based-sql-injection-vulnerability","https://nvd.nist.gov/vuln/detail/CVE-2026-3396"]},{"tag_id":"CVE-2021-28169","tag_type":"cve","title":"Eclipse Jetty ConcatServlet - Information Disclosure","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/static","reference_urls":["https://twitter.com/sec715/status/1406787963569065988","https://github.com/eclipse/jetty.project/security/advisories/GHSA-gwcr-j4wh-j3cq","https://lists.apache.org/thread.html/r2721aba31a8562639c4b937150897e24f78f747cdbda8641c0f659fe@%3Cusers.kafka.apache.org%3E","https://nvd.nist.gov/vuln/detail/CVE-2021-28169","https://lists.apache.org/thread.html/r04a4b4553a23aff26f42635a6ae388c3b162aab30a88d12e59d05168@%3Cjira.kafka.apache.org%3E"]},{"tag_id":"CVE-2024-36527","tag_type":"cve","title":"Puppeteer Renderer - Directory Traversal","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/html","reference_urls":["https://github.com/zenato/puppeteer-renderer/issues/97","https://gist.github.com/7a6163/25fef08f75eed219c8ca21e332d6e911"]}],"data_as_of":"2026-06-21T09:06:20.819965+00:00"}