Domain newobc.linde.com
Germany
-
Swagger API description is publicly available
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
First seen 2025-11-24 21:10
Last seen 2026-02-04 22:00
Open for 72 days-
Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532cPublic Swagger UI/API detected at path: /swagger/index.html
Found on 2026-02-04 22:00 -
Severity: info
Fingerprint: 5733ddf49ff49cd1f3d88d6069b19608d7c7d9b94a6cc48b16d20e3d7ec3a8b9Public Swagger UI/API detected at path: /swagger/v1/swagger.json - sample paths: GET /Archivos GET /Archivos/OnDemand GET /Archivos/{id} GET /Emails GET /Emails/OnDemand GET /Emails/{id} GET /EmailsLog GET /EmailsLog/OnDemand GET /EmailsLog/Resend/{id} GET /EmailsLog/{id} GET /Menus GET /Menus/OnDemand GET /Menus/{id} GET /Modulos GET /Modulos/OnDemand GET /Modulos/{id} GET /Perfiles GET /Perfiles/GetByIDRol/{Id} GET /Perfiles/OnDemand GET /Perfiles/{id} GET /Permisos/activar/{idMenu}/{idPerfil} GET /Permisos/{idPerfil} GET /Seguridad/ReenviarCodigo/{email} GET /Seguridad/RememberPassword/{email} GET /Seguridad/SecurityCode/{email}/{code} GET /Seguridad/ValidSignature GET /Usuarios/OnDemand GET /Usuarios/{id} POST /Permisos/{chkTodos} POST /Seguridad/ChangeSignature POST /Seguridad/CreatePassword POST /Seguridad/RecoverPassword POST /Seguridad/Register POST /Seguridad/RenovarToken POST /Seguridad/SecurityCode POST /Seguridad/login POST /UsuariosFound on 2026-02-03 05:49 -
Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549c43a749332306f26a19271bc73d7eb3c9ada0fecPublic Swagger UI/API detected at path: /swagger/index.html - sample paths: GET /Archivos GET /Archivos/OnDemand GET /Archivos/{id} GET /Emails GET /Emails/OnDemand GET /Emails/{id} GET /EmailsLog GET /EmailsLog/OnDemand GET /EmailsLog/Resend/{id} GET /EmailsLog/{id} GET /Menus GET /Menus/OnDemand GET /Menus/{id} GET /Modulos GET /Modulos/OnDemand GET /Modulos/{id} GET /Perfiles GET /Perfiles/GetByIDRol/{Id} GET /Perfiles/OnDemand GET /Perfiles/{id} GET /Permisos/activar/{idMenu}/{idPerfil} GET /Permisos/{idPerfil} GET /Seguridad/ReenviarCodigo/{email} GET /Seguridad/RememberPassword/{email} GET /Seguridad/SecurityCode/{email}/{code} GET /Seguridad/ValidSignature GET /Usuarios/OnDemand GET /Usuarios/{id} POST /Permisos/{chkTodos} POST /Seguridad/ChangeSignature POST /Seguridad/CreatePassword POST /Seguridad/RecoverPassword POST /Seguridad/Register POST /Seguridad/RenovarToken POST /Seguridad/SecurityCode POST /Seguridad/login POST /UsuariosFound on 2026-01-16 09:44
-
-
Open service 23.50.131.149:443 · newobc.linde.com
2026-02-04 22:00
HTTP/1.1 404 Not Found Content-Length: 0 Expires: Wed, 04 Feb 2026 22:00:22 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 04 Feb 2026 22:00:22 GMT Connection: close Content-Security-Policy-Report-Only: default-src https: 'unsafe-eval' 'unsafe-inline'; object-src 'none' Referrer-Policy: strict-origin X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains
Found 2026-02-04 by HttpPluginCreate report
-
Open service 2.18.64.16:443 · newobc.linde.com
2026-01-09 13:39
HTTP/1.1 404 Not Found Content-Length: 0 Expires: Fri, 09 Jan 2026 13:39:15 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 09 Jan 2026 13:39:15 GMT Connection: close Content-Security-Policy-Report-Only: default-src https: 'unsafe-eval' 'unsafe-inline'; object-src 'none' Referrer-Policy: strict-origin X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains
Found 2026-01-09 by HttpPluginCreate report
-
Open service 2.18.64.16:443 · newobc.linde.com
2026-01-02 00:28
HTTP/1.1 404 Not Found Content-Length: 0 Expires: Fri, 02 Jan 2026 00:28:11 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 02 Jan 2026 00:28:11 GMT Connection: close Content-Security-Policy-Report-Only: default-src https: 'unsafe-eval' 'unsafe-inline'; object-src 'none' Referrer-Policy: strict-origin X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains
Found 2026-01-02 by HttpPluginCreate report
-
Open service 2.18.64.16:443 · newobc.linde.com
2025-12-22 15:07
HTTP/1.1 404 Not Found Content-Length: 0 Expires: Mon, 22 Dec 2025 15:07:33 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 22 Dec 2025 15:07:33 GMT Connection: close Content-Security-Policy-Report-Only: default-src https: 'unsafe-eval' 'unsafe-inline'; object-src 'none' Referrer-Policy: strict-origin X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains
Found 2025-12-22 by HttpPluginCreate report