{"ip":"34.180.64.219","total_events":60,"verdict":{"verdict":"scanning","label":"Scanning for known vulnerabilities","detail":"1 exploit-path probe(s)","confidence":"medium","network_type":null,"why":["1 request(s) matched a known exploit path.","Only GET/HEAD seen, no request body: scanning for the vulnerability, not delivering a payload.","Not in any known-scanner range."]},"first_seen":"2026-06-30T07:29:47","last_seen":"2026-06-30T09:53:20","events_24h":0,"events_7d":0,"geo":{"country_code":"JP","country_name":"Japan","region":"Tokyo","city":"Tokyo","lat":35.6893,"lon":139.6899,"asn":396982,"org":"Google LLC"},"source_domain":"219.64.180.34.bc.googleusercontent.com","known_scanners":[],"scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"},"cve_matches":[{"cve_id":"CVE-2021-41097","title":"Aurelia-Path < 1.1.7 - Prototype Pollution","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/blog"},{"cve_id":"CVE-2022-24288","title":"Apache Airflow OS Command Injection","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/code"},{"cve_id":"CVE-2026-3396","title":"WCAPF WooCommerce Ajax Product Filter - SQL Injection","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/shop"},{"cve_id":"CVE-2021-28169","title":"Eclipse Jetty ConcatServlet - Information Disclosure","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/static"},{"cve_id":"CVE-2024-36527","title":"Puppeteer Renderer - Directory Traversal","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/html"}],"malware":[],"top_ports":[{"port":2443,"proto":"tcp","label":"","count":30},{"port":7860,"proto":"tcp","label":"","count":30}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i190800_9dc949149365_97f8aa674fd9"],"tls_ja3":["19e29534fd49dd27d09234e639c4057e"],"ja4h":["ge11nn0500_9af7e0472034"]},"fingerprint_peers":{"t13i190800_9dc949149365_97f8aa674fd9":6973,"ge11nn0500_9af7e0472034":5683},"user_agents":["Mozilla/5.0 (X11; U; Linux arm7tdmi; rv:1.8.1.11) Gecko/20071130 Minimo/0.025","Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.181 Safari/537.36","Mozilla/5.0 (iPhone; CPU iPhone OS 12_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) GSA/80.0.262003652 Mobile/16G77 Safari/604.1","Mozilla/5.0 (Linux; Android 9; H3223) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36","Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.119 Safari/537.36","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36","MOT-V9mm/00.62 UP.Browser/6.2.3.4.c.1.123 (GUI) MMP/2.0","Mozilla/5.0 (compatible; Konqueror/3.5; Linux; en_US) KHTML/3.5.6 (like Gecko) (Kubuntu)"],"timeline":[{"date":"2026-06-30","count":60}],"recent_events":[{"timestamp":"2026-06-30T09:53:20","port":7860,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:7860\",\"user-agent\":\"Opera/9.80 (J2ME/MIDP; Opera Mini/5.0.16823/1428; U; en) Presto/2.2.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/laravel/.git/config","summary":"","payload_hex":"474554202f6c61726176656c2f2e6769742f636f6e66696720485454502f312e310d0a486f73743a20<HONEYPOT>3a373836300d0a557365722d4167656e743a204f706572612f392e383020284a324d452f4d4944503b204f70657261204d696e692f352e302e31363832332f313432383b20553b20656e292050726573746f2f322e322e300d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Opera/9.80 (J2ME/MIDP; Opera Mini/5.0.16823/1428; U; en) Presto/2.2.0","community_id":"1:Z+rXmQ7KBGcCUvqKNWQ6rimXPmU=","ja3":"19e29534fd49dd27d09234e639c4057e","session":"f3fb9456-387c-493c-9061-cba34ba88cad","seq":1,"duration_ms":101,"bytes_in":210,"bytes_out":78},{"timestamp":"2026-06-30T09:53:20","port":7860,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:7860\",\"user-agent\":\"osee2unifiedRelease/1466 osee2unifiedReleaseVersion/6.9.1 Mozilla/5.0 (iPhone; CPU iPhone OS 12_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/symfony/.git/config","summary":"","payload_hex":"474554202f73796d666f6e792f2e6769742f636f6e66696720485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"osee2unifiedRelease/1466 osee2unifiedReleaseVersion/6.9.1 Mozilla/5.0 (iPhone; CPU iPhone OS 12_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148","community_id":"1:V4y82p7zOHZ2uLZsMDWRlQ4BFRU=","ja3":"19e29534fd49dd27d09234e639c4057e","session":"e55548d3-ee84-478f-83c5-bbd484fd88bf","seq":1,"duration_ms":100,"bytes_in":308,"bytes_out":78},{"timestamp":"2026-06-30T09:53:20","port":7860,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:7860\",\"user-agent\":\"Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.2; WOW64; Trident/5.0)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/code/.git/config","summary":"","payload_hex":"474554202f636f64652f2e6769742f636f6e66696720485454502f312e310d0a486f73743a20<HONEYPOT>3a373836300d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b204d53494520392e303b2057696e646f7773204e5420362e323b20574f5736343b2054726964656e742f352e30290d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.2; WOW64; Trident/5.0)","community_id":"1:S5Z5eJ682lDhwIxiiRYEiUgB2S0=","ja3":"19e29534fd49dd27d09234e639c4057e","session":"bb5a1046-66f3-4aca-a0fc-986cb44af7ed","seq":1,"duration_ms":100,"bytes_in":208,"bytes_out":78},{"timestamp":"2026-06-30T09:53:20","port":7860,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:7860\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 YaBrowser/18.11.1.715 (beta) Yowser/2.5 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/project/.git/config","summary":"","payload_hex":"474554202f70726f6a6563742f2e6769742f636f6e66696720485454502f312e310d0a486f73743a20<HONEYPOT>3a373836300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b204c696e7578207838365f363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f37302e302e333533382e31303220596142726f777365722f31382e31312e312e3731352028626574612920596f777365722f322e35205361666172692f3533372e33360d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 YaBrowser/18.11.1.715 (beta) Yowser/2.5 Safari/537.36","community_id":"1:Q6qA48CdNhrMHajGOci32oMHCHo=","ja3":"19e29534fd49dd27d09234e639c4057e","session":"0bbd1fa7-5235-4399-a6c4-29c963298aea","seq":1,"duration_ms":100,"bytes_in":286,"bytes_out":78},{"timestamp":"2026-06-30T09:53:20","port":7860,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:7860\",\"user-agent\":\"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; Maxthon 2.0)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/wordpress/.git/config","summary":"","payload_hex":"474554202f776f726470726573732f2e6769742f636f6e66696720485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; Maxthon 2.0)","community_id":"1:rJIdS/NQIu49/9k1tZAosW6D5+4=","ja3":"19e29534fd49dd27d09234e639c4057e","session":"f6c6f856-36eb-4dcc-8a9d-36edb5dca79a","seq":1,"duration_ms":100,"bytes_in":307,"bytes_out":78},{"timestamp":"2026-06-30T09:53:20","port":7860,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:7860\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.5; rv:10.0.1) Gecko/20100101 Firefox/10.0.1 SeaMonkey/2.7.1\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/shop/.git/config","summary":"","payload_hex":"474554202f73686f702f2e6769742f636f6e66696720485454502f312e310d0a486f73743a20<HONEYPOT>3a373836300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031302e353b2072763a31302e302e3129204765636b6f2f32303130303130312046697265666f782f31302e302e31205365614d6f6e6b65792f322e372e310d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.5; rv:10.0.1) Gecko/20100101 Firefox/10.0.1 SeaMonkey/2.7.1","community_id":"1:w0bNfHWzf5gPnuTAuEUuQh+WIcA=","ja3":"19e29534fd49dd27d09234e639c4057e","session":"857f9ca9-b69c-479e-9778-15114722e27b","seq":1,"duration_ms":100,"bytes_in":239,"bytes_out":78},{"timestamp":"2026-06-30T09:53:20","port":7860,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:7860\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/blog/.git/config","summary":"","payload_hex":"474554202f626c6f672f2e6769742f636f6e66696720485454502f312e310d0a486f73743a20<HONEYPOT>3a373836300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f37332e302e333638332e313033205361666172692f3533372e33360d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Safari/537.36","community_id":"1:EytLtwHy4zf/73rzBC2MtzbwKWw=","ja3":"19e29534fd49dd27d09234e639c4057e","session":"ae083252-1596-4998-a3d9-d2555833a7af","seq":1,"duration_ms":100,"bytes_in":253,"bytes_out":78},{"timestamp":"2026-06-30T09:53:20","port":7860,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:7860\",\"user-agent\":\"Mozilla/5.0 (X11; U; SunOS sun4m; en-US; rv:1.4b) Gecko/20030517 Mozilla Firebird/0.6\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/build/.git/config","summary":"","payload_hex":"474554202f6275696c642f2e6769742f636f6e66696720485454502f312e310d0a486f73743a20<HONEYPOT>3a373836300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b20553b2053756e4f532073756e346d3b20656e2d55533b2072763a312e346229204765636b6f2f3230303330353137204d6f7a696c6c612046697265626972642f302e360d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (X11; U; SunOS sun4m; en-US; rv:1.4b) Gecko/20030517 Mozilla Firebird/0.6","community_id":"1:wQ1QRLw8wFazku2cl/uXCz06xiI=","ja3":"19e29534fd49dd27d09234e639c4057e","session":"73452434-4d51-42c3-b926-1a9bbddb0312","seq":1,"duration_ms":103,"bytes_in":224,"bytes_out":78},{"timestamp":"2026-06-30T09:53:20","port":7860,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:7860\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/dashboard/.git/config","summary":"","payload_hex":"474554202f64617368626f6172642f2e6769742f636f6e66696720485454502f312e310d0a486f73743a20<HONEYPOT>3a373836300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f36352e302e333332352e313831205361666172692f3533372e33360d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36","community_id":"1:woFkSlI4w/jUGb11N6t/dkdA9tI=","ja3":"19e29534fd49dd27d09234e639c4057e","session":"18820ef4-36b6-4c03-8ab7-03714fc51e62","seq":1,"duration_ms":104,"bytes_in":258,"bytes_out":78},{"timestamp":"2026-06-30T09:53:20","port":7860,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:7860\",\"user-agent\":\"Mozilla/5.0 (Linux; Android 7.0; Vivo 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/site/.git/config","summary":"","payload_hex":"474554202f736974652f2e6769742f636f6e66696720485454502f312e310d0a486f73743a20<HONEYPOT>3a373836300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284c696e75783b20416e64726f696420372e303b205669766f203829204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f37362e302e333830392e313131204d6f62696c65205361666172692f3533372e33360d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Linux; Android 7.0; Vivo 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36","community_id":"1:oWd3o13yqTTyw8J+p8PMwmJu/KY=","ja3":"19e29534fd49dd27d09234e639c4057e","session":"e454e140-21b5-4fe7-8883-319711a459b9","seq":1,"duration_ms":103,"bytes_in":259,"bytes_out":78}],"http_methods":[{"method":"GET","count":60}],"distinct_ports_total":2,"top_paths":[{"path":"/app/.git/config","count":2,"ports":2},{"path":"/project/.git/config","count":2,"ports":2},{"path":"/src/.git/config","count":2,"ports":2},{"path":"/v2/.git/config","count":2,"ports":2},{"path":"/v1/.git/config","count":2,"ports":2},{"path":"/web/.git/config","count":2,"ports":2},{"path":"/.git/config","count":2,"ports":2},{"path":"/www/.git/config","count":2,"ports":2},{"path":"/v3/.git/config","count":2,"ports":2},{"path":"/dist/.git/config","count":2,"ports":2},{"path":"/assets/.git/config","count":2,"ports":2},{"path":"/frontend/.git/config","count":2,"ports":2},{"path":"/code/.git/config","count":2,"ports":2},{"path":"/shop/.git/config","count":2,"ports":2},{"path":"/backend/.git/config","count":2,"ports":2}],"distinct_paths_total":30,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Charset","Accept-Encoding","Connection","Host","User-Agent"],"representative":[{"name":"Accept-Charset","value":"utf-8","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"<HONEYPOT>:7860","notable":false},{"name":"User-Agent","value":"Opera/9.80 (J2ME/MIDP; Opera Mini/5.0.16823/1428; U; en) Presto/2.2.0","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[{"tag_id":"CVE-2021-41097","tag_type":"cve","title":"Aurelia-Path < 1.1.7 - Prototype Pollution","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/blog","reference_urls":["https://github.com/aurelia/path/issues/44","https://security.snyk.io/vuln/SNYK-JS-AURELIAPATH-1579475","https://nvd.nist.gov/vuln/detail/CVE-2021-41097"]},{"tag_id":"CVE-2022-24288","tag_type":"cve","title":"Apache Airflow OS Command Injection","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/code","reference_urls":["https://github.com/advisories/GHSA-3v7g-4pg3-7r6j","https://nvd.nist.gov/vuln/detail/CVE-2022-24288","https://lists.apache.org/thread/dbw5ozcmr0h0lhs0yjph7xdc64oht23t","https://github.com/ARPSyndicate/kenzer-templates","https://github.com/Hax0rG1rl/my_cve_and_bounty_poc"]},{"tag_id":"CVE-2026-3396","tag_type":"cve","title":"WCAPF WooCommerce Ajax Product Filter - SQL Injection","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/shop","reference_urls":["https://patchstack.com/database/vulnerability/wordpress-wcapf-woocommerce-ajax-product-filter-plugin-4-2-3-unauthenticated-time-based-sql-injection-vulnerability","https://nvd.nist.gov/vuln/detail/CVE-2026-3396"]},{"tag_id":"CVE-2021-28169","tag_type":"cve","title":"Eclipse Jetty ConcatServlet - Information Disclosure","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/static","reference_urls":["https://twitter.com/sec715/status/1406787963569065988","https://github.com/eclipse/jetty.project/security/advisories/GHSA-gwcr-j4wh-j3cq","https://lists.apache.org/thread.html/r2721aba31a8562639c4b937150897e24f78f747cdbda8641c0f659fe@%3Cusers.kafka.apache.org%3E","https://nvd.nist.gov/vuln/detail/CVE-2021-28169","https://lists.apache.org/thread.html/r04a4b4553a23aff26f42635a6ae388c3b162aab30a88d12e59d05168@%3Cjira.kafka.apache.org%3E"]},{"tag_id":"CVE-2024-36527","tag_type":"cve","title":"Puppeteer Renderer - Directory Traversal","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/html","reference_urls":["https://github.com/zenato/puppeteer-renderer/issues/97","https://gist.github.com/7a6163/25fef08f75eed219c8ca21e332d6e911"]}],"data_as_of":"2026-07-08T15:37:24.249331+00:00"}