Domain hosgor.cloud
Software information
cloudflare
tcp/80
-
Swagger API description is publicly available
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
First seen 2025-12-03 20:54
Last seen 2025-12-25 02:19
Open for 21 days-
Severity: info
Fingerprint: 5733ddf49ff49cd1f5e22fb4dad927ce3d59acb08b66f189cb182b68d6e92bdcPublic Swagger UI/API detected at path: /api/swagger.json - sample paths: DELETE /conversations/{c_id} DELETE /saved-messages/{message_id} GET /conversations GET /login/status GET /messages GET /messages/{message_id}/more-like-this GET /messages/{message_id}/suggested-questions GET /meta GET /parameters GET /passport GET /remote-files/{url} GET /saved-messages GET /site GET /system-features GET /webapp/access-mode GET /webapp/permission PATCH /conversations/{c_id}/pin PATCH /conversations/{c_id}/unpin POST /audio-to-text POST /chat-messages POST /chat-messages/{task_id}/stop POST /completion-messages POST /completion-messages/{task_id}/stop POST /conversations/{c_id}/name POST /email-code-login POST /email-code-login/validity POST /files/upload POST /forgot-password POST /forgot-password/resets POST /forgot-password/validity POST /login POST /logout POST /messages/{message_id}/feedbacks POST /remote-files/upload POST /text-to-audio POST /workflows/run POST /workflows/tasks/{task_id}/stopFound on 2025-12-25 02:19
-
-
Open service 172.67.172.27:80 ยท hosgor.cloud
2026-01-23 05:15
HTTP/1.1 530 <none> Date: Fri, 23 Jan 2026 05:15:03 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 16 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Referrer-Policy: same-origin X-Frame-Options: SAMEORIGIN Server: cloudflare CF-RAY: 9c24cfa179f54f1b-SJC alt-svc: h3=":443"; ma=86400 error code: 1016
Found 2026-01-23 by HttpPluginCreate report