{"ip":"34.57.124.160","total_events":30,"verdict":{"verdict":"scanning","label":"Scanning for known vulnerabilities","detail":"1 exploit-path probe(s)","confidence":"medium","network_type":null,"why":["1 request(s) matched a known exploit path.","Only GET/HEAD seen, no request body: scanning for the vulnerability, not delivering a payload.","Not in any known-scanner range."]},"first_seen":"2026-06-30T10:02:08","last_seen":"2026-06-30T10:02:09","events_24h":0,"events_7d":0,"geo":{"country_code":"US","country_name":"United States","region":"Iowa","city":"Council Bluffs","lat":41.2591,"lon":-95.8517,"asn":396982,"org":"Google LLC"},"source_domain":"160.124.57.34.bc.googleusercontent.com","known_scanners":[],"scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"},"cve_matches":[{"cve_id":"CVE-2021-41097","title":"Aurelia-Path < 1.1.7 - Prototype Pollution","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/blog"},{"cve_id":"CVE-2022-24288","title":"Apache Airflow OS Command Injection","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/code"},{"cve_id":"CVE-2026-3396","title":"WCAPF WooCommerce Ajax Product Filter - SQL Injection","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/shop"},{"cve_id":"CVE-2021-28169","title":"Eclipse Jetty ConcatServlet - Information Disclosure","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/static"},{"cve_id":"CVE-2024-36527","title":"Puppeteer Renderer - Directory Traversal","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/html"}],"malware":[],"top_ports":[{"port":8447,"proto":"tcp","label":"","count":30}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i190800_9dc949149365_97f8aa674fd9"],"tls_ja3":["19e29534fd49dd27d09234e639c4057e"],"ja4h":["ge11nn0500_9af7e0472034"]},"fingerprint_peers":{"t13i190800_9dc949149365_97f8aa674fd9":6975,"ge11nn0500_9af7e0472034":5685},"user_agents":["Mozilla/5.0 (Linux; Android 8.0.0; MI 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.101 Mobile Safari/537.36","Mozilla/5.0 (iPad; CPU OS 13_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) GSA/79.0.259819395 Mobile/17A5556d Safari/604.1","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.172 Safari/537.36 Vivaldi/2.5.1525.48","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3835.0 Safari/537.36","Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:25.0) Gecko/20100101 Firefox/29.0","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3882.0 Safari/537.36","Mozilla/5.0 (Linux; U; Android 1.6; en-us; HTC_TATTOO_A3288 Build/DRC79) AppleWebKit/528.5  (KHTML, like Gecko) Version/3.1.2 Mobile Safari/525.20.1","Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.100 Safari/537.36 OPR/63.0.3368.35"],"timeline":[{"date":"2026-06-30","count":30}],"recent_events":[{"timestamp":"2026-06-30T10:02:09","port":8447,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8447\",\"user-agent\":\"Mozilla/5.0 (Linux; Android 9; RMX1801) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/code/.git/config","summary":"","payload_hex":"474554202f636f64652f2e6769742f636f6e66696720485454502f312e310d0a486f73743a20<HONEYPOT>3a383434370d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284c696e75783b20416e64726f696420393b20524d583138303129204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f37362e302e333830392e313131204d6f62696c65205361666172692f3533372e33360d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Linux; Android 9; RMX1801) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36","community_id":"1:VQN3uwVlAwBlpbDkdeDq6t0auDA=","ja3":"19e29534fd49dd27d09234e639c4057e","session":"85a88b53-8143-448b-a7c8-6fc5c0d4dfab","seq":1,"duration_ms":100,"bytes_in":260,"bytes_out":78},{"timestamp":"2026-06-30T10:02:09","port":8447,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8447\",\"user-agent\":\"Mozilla/5.0 (Linux; Android 9; H3223) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/project/.git/config","summary":"","payload_hex":"474554202f70726f6a6563742f2e6769742f636f6e66696720485454502f312e310d0a486f73743a20<HONEYPOT>3a383434370d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284c696e75783b20416e64726f696420393b20483332323329204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f37362e302e333830392e313131204d6f62696c65205361666172692f3533372e33360d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Linux; Android 9; H3223) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36","community_id":"1:1ZK5nP4S6xCXaS4cz8gYBvgwyEw=","ja3":"19e29534fd49dd27d09234e639c4057e","session":"3543416a-6705-4183-b854-8dbf670a84cf","seq":1,"duration_ms":100,"bytes_in":261,"bytes_out":78},{"timestamp":"2026-06-30T10:02:09","port":8447,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8447\",\"user-agent\":\"Mozilla/5.0 (X11; OpenBSD amd64; rv:30.0) Gecko/20100101 Firefox/30.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/symfony/.git/config","summary":"","payload_hex":"474554202f73796d666f6e792f2e6769742f636f6e66696720485454502f312e310d0a486f73743a20<HONEYPOT>3a383434370d0a557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b204f70656e42534420616d6436343b2072763a33302e3029204765636b6f2f32303130303130312046697265666f782f33302e300d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (X11; OpenBSD amd64; rv:30.0) Gecko/20100101 Firefox/30.0","community_id":"1:f0BeYx5EyjWcoSEaFbuHpX6yNqU=","ja3":"19e29534fd49dd27d09234e639c4057e","session":"78e63712-05ed-4d16-9807-18149b1b4073","seq":1,"duration_ms":100,"bytes_in":212,"bytes_out":78},{"timestamp":"2026-06-30T10:02:09","port":8447,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8447\",\"user-agent\":\"Mozilla/5.0 (Linux; Android 7.1.1; SM-J510F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.143 Mobile Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/laravel/.git/config","summary":"","payload_hex":"474554202f6c61726176656c2f2e6769742f636f6e66696720485454502f312e310d0a486f73743a20<HONEYPOT>3a383434370d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284c696e75783b20416e64726f696420372e312e313b20534d2d4a3531304629204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f37352e302e333737302e313433204d6f62696c65205361666172692f3533372e33360d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Linux; Android 7.1.1; SM-J510F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.143 Mobile Safari/537.36","community_id":"1:RyvKsbCzm7Jcjy9sjrp4QSZ840Q=","ja3":"19e29534fd49dd27d09234e639c4057e","session":"54c9b1ce-5578-42db-bd4d-18dec4c60a46","seq":1,"duration_ms":100,"bytes_in":268,"bytes_out":78},{"timestamp":"2026-06-30T10:02:09","port":8447,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8447\",\"user-agent\":\"Mozilla/5.0 (Linux; Android 9; VTR-L09) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/wordpress/.git/config","summary":"","payload_hex":"474554202f776f726470726573732f2e6769742f636f6e66696720485454502f312e310d0a486f73743a20<HONEYPOT>3a383434370d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284c696e75783b20416e64726f696420393b205654522d4c303929204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f37362e302e333830392e313131204d6f62696c65205361666172692f3533372e33360d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Linux; Android 9; VTR-L09) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36","community_id":"1:YuKwh3rfADUK0H7TyAVkLeSzRJk=","ja3":"19e29534fd49dd27d09234e639c4057e","session":"c1c78959-f682-41a2-a43a-f3f163d3f094","seq":1,"duration_ms":100,"bytes_in":265,"bytes_out":78},{"timestamp":"2026-06-30T10:02:09","port":8447,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8447\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/603.3.8 (KHTML, like Gecko) Version/10.1.2 Safari/603.3.8\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/wp-content/.git/config","summary":"","payload_hex":"474554202f77702d636f6e74656e742f2e6769742f636f6e66696720485454502f312e310d0a486f73743a20<HONEYPOT>3a383434370d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31305f3529204170706c655765624b69742f3630332e332e3820284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f31302e312e32205361666172692f3630332e332e380d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/603.3.8 (KHTML, like Gecko) Version/10.1.2 Safari/603.3.8","community_id":"1:pAeAuVmKTq0zYtcOXhbfarkB1AI=","ja3":"19e29534fd49dd27d09234e639c4057e","session":"15eb5e46-3bc4-43b5-8acb-b5794ec68cde","seq":1,"duration_ms":100,"bytes_in":263,"bytes_out":78},{"timestamp":"2026-06-30T10:02:09","port":8447,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8447\",\"user-agent\":\"Mozilla/5.0 (Linux; Android 9; H3223) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/shop/.git/config","summary":"","payload_hex":"474554202f73686f702f2e6769742f636f6e66696720485454502f312e310d0a486f73743a20<HONEYPOT>3a383434370d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284c696e75783b20416e64726f696420393b20483332323329204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f37362e302e333830392e313131204d6f62696c65205361666172692f3533372e33360d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Linux; Android 9; H3223) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36","community_id":"1:VnliOg+x9AbivhlfvHXNczFHPns=","ja3":"19e29534fd49dd27d09234e639c4057e","session":"1d1ad86e-4e8d-4a79-b250-ceac82f024a3","seq":1,"duration_ms":100,"bytes_in":258,"bytes_out":78},{"timestamp":"2026-06-30T10:02:09","port":8447,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8447\",\"user-agent\":\"Mozilla/1.22 (compatible; MSIE 5.01; PalmOS 3.0) EudoraWeb 2.1\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/blog/.git/config","summary":"","payload_hex":"474554202f626c6f672f2e6769742f636f6e66696720485454502f312e310d0a486f73743a20<HONEYPOT>3a383434370d0a557365722d4167656e743a204d6f7a696c6c612f312e32322028636f6d70617469626c653b204d53494520352e30313b2050616c6d4f5320332e3029204575646f726157656220322e310d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/1.22 (compatible; MSIE 5.01; PalmOS 3.0) EudoraWeb 2.1","community_id":"1:SGq2oRPa/59DesRTrD9CxLSAHMM=","ja3":"19e29534fd49dd27d09234e639c4057e","session":"a3de7bc4-5e22-493e-a821-2542150447c9","seq":1,"duration_ms":100,"bytes_in":202,"bytes_out":78},{"timestamp":"2026-06-30T10:02:09","port":8447,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8447\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.170 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/site/.git/config","summary":"","payload_hex":"474554202f736974652f2e6769742f636f6e66696720485454502f312e310d0a486f73743a20<HONEYPOT>3a383434370d0a557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b204c696e7578207838365f363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f36362e302e333335392e313730205361666172692f3533372e33360d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.170 Safari/537.36","community_id":"1:r1xyF/H2pZvyzGPR6GNIOoKakbI=","ja3":"19e29534fd49dd27d09234e639c4057e","session":"30c6c3cc-23aa-489d-89d4-6700da251a7d","seq":1,"duration_ms":100,"bytes_in":245,"bytes_out":78},{"timestamp":"2026-06-30T10:02:09","port":8447,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8447\",\"user-agent\":\"SAMSUNG-SGH-A867/A867UCHJ3 SHP/VPP/R5 NetFront/35 SMM-MMS/1.2.0 profile/MIDP-2.0 configuration/CLDC-1.1 UP.Link/6.3.0.0.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/dashboard/.git/config","summary":"","payload_hex":"474554202f64617368626f6172642f2e6769742f636f6e66696720485454502f312e310d0a486f73743a20<HONEYPOT>3a383434370d0a557365722d4167656e743a2053414d53554e472d5347482d413836372f413836375543484a33205348502f5650502f5235204e657446726f6e742f333520534d4d2d4d4d532f312e322e302070726f66696c652f4d4944502d322e3020636f6e66696775726174696f6e2f434c44432d312e312055502e4c696e6b2f362e332e302e302e300d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"SAMSUNG-SGH-A867/A867UCHJ3 SHP/VPP/R5 NetFront/35 SMM-MMS/1.2.0 profile/MIDP-2.0 configuration/CLDC-1.1 UP.Link/6.3.0.0.0","community_id":"1:9tlfEY58rghw+WGDMGZL2vmV/+c=","ja3":"19e29534fd49dd27d09234e639c4057e","session":"ee86c5fe-a470-42a9-8045-4e9032ce8e4b","seq":1,"duration_ms":101,"bytes_in":266,"bytes_out":78}],"http_methods":[{"method":"GET","count":30}],"distinct_ports_total":1,"top_paths":[{"path":"/app/.git/config","count":1,"ports":1},{"path":"/project/.git/config","count":1,"ports":1},{"path":"/src/.git/config","count":1,"ports":1},{"path":"/v2/.git/config","count":1,"ports":1},{"path":"/v1/.git/config","count":1,"ports":1},{"path":"/web/.git/config","count":1,"ports":1},{"path":"/.git/config","count":1,"ports":1},{"path":"/www/.git/config","count":1,"ports":1},{"path":"/v3/.git/config","count":1,"ports":1},{"path":"/dist/.git/config","count":1,"ports":1},{"path":"/assets/.git/config","count":1,"ports":1},{"path":"/frontend/.git/config","count":1,"ports":1},{"path":"/code/.git/config","count":1,"ports":1},{"path":"/shop/.git/config","count":1,"ports":1},{"path":"/backend/.git/config","count":1,"ports":1}],"distinct_paths_total":30,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Charset","Accept-Encoding","Connection","Host","User-Agent"],"representative":[{"name":"Accept-Charset","value":"utf-8","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"<HONEYPOT>:8447","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Linux; Android 9; RMX1801) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[{"tag_id":"CVE-2021-41097","tag_type":"cve","title":"Aurelia-Path < 1.1.7 - Prototype Pollution","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/blog","reference_urls":["https://github.com/aurelia/path/issues/44","https://security.snyk.io/vuln/SNYK-JS-AURELIAPATH-1579475","https://nvd.nist.gov/vuln/detail/CVE-2021-41097"]},{"tag_id":"CVE-2022-24288","tag_type":"cve","title":"Apache Airflow OS Command Injection","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/code","reference_urls":["https://github.com/advisories/GHSA-3v7g-4pg3-7r6j","https://nvd.nist.gov/vuln/detail/CVE-2022-24288","https://lists.apache.org/thread/dbw5ozcmr0h0lhs0yjph7xdc64oht23t","https://github.com/ARPSyndicate/kenzer-templates","https://github.com/Hax0rG1rl/my_cve_and_bounty_poc"]},{"tag_id":"CVE-2026-3396","tag_type":"cve","title":"WCAPF WooCommerce Ajax Product Filter - SQL Injection","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/shop","reference_urls":["https://patchstack.com/database/vulnerability/wordpress-wcapf-woocommerce-ajax-product-filter-plugin-4-2-3-unauthenticated-time-based-sql-injection-vulnerability","https://nvd.nist.gov/vuln/detail/CVE-2026-3396"]},{"tag_id":"CVE-2021-28169","tag_type":"cve","title":"Eclipse Jetty ConcatServlet - Information Disclosure","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/static","reference_urls":["https://twitter.com/sec715/status/1406787963569065988","https://github.com/eclipse/jetty.project/security/advisories/GHSA-gwcr-j4wh-j3cq","https://lists.apache.org/thread.html/r2721aba31a8562639c4b937150897e24f78f747cdbda8641c0f659fe@%3Cusers.kafka.apache.org%3E","https://nvd.nist.gov/vuln/detail/CVE-2021-28169","https://lists.apache.org/thread.html/r04a4b4553a23aff26f42635a6ae388c3b162aab30a88d12e59d05168@%3Cjira.kafka.apache.org%3E"]},{"tag_id":"CVE-2024-36527","tag_type":"cve","title":"Puppeteer Renderer - Directory Traversal","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/html","reference_urls":["https://github.com/zenato/puppeteer-renderer/issues/97","https://gist.github.com/7a6163/25fef08f75eed219c8ca21e332d6e911"]}],"data_as_of":"2026-07-08T14:29:15.554026+00:00"}