Vercel
tcp/443
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff436b1d1a41bad2c5b980c293d71b75a7740dfef607
Public Swagger UI/API detected at path: /swagger.json - sample paths: ANY /api/v4/marketplace/app ANY post DELETE /api/v4/dealer/[id]/documents/Delete GET /api/swagger/doc POST /api/v4/bunny/Upload
Open service 66.33.60.35:443 · stage.api.qoreai.com
2026-01-09 08:36
HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 1560736 Cache-Control: public, max-age=0, must-revalidate Content-Disposition: inline Content-Length: 37576 Content-Type: text/html; charset=utf-8 Date: Fri, 09 Jan 2026 08:36:42 GMT Etag: "3feb9ed618e64746950e93f891dad64b" Last-Modified: Mon, 22 Dec 2025 07:04:25 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: / X-Vercel-Cache: HIT X-Vercel-Id: fra1::6wbcn-1767947802031-88b5856cd55d Connection: close <!DOCTYPE html><html lang="en"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width"/><link rel="preload" as="image" imageSrcSet="/_next/image?url=%2FQoreAI-Logo.webp&w=128&q=75 1x, /_next/image?url=%2FQoreAI-Logo.webp&w=256&q=75 2x" fetchpriority="high"/><meta name="next-head-count" content="3"/><link rel="preload" href="/_next/static/media/e4af272ccee01ff0-s.p.woff2" as="font" type="font/woff2" crossorigin="anonymous" data-next-font="size-adjust"/><link rel="preload" href="/_next/static/css/2bfca27ac41d915f.css" as="style"/><link rel="stylesheet" href="/_next/static/css/2bfca27ac41d915f.css" data-n-g=""/><link rel="preload" href="/_next/static/css/a0f49a9b26f78ec7.css" as="style"/><link rel="stylesheet" href="/_next/static/css/a0f49a9b26f78ec7.css" data-n-p=""/><noscript data-n-css=""></noscript><script defer="" nomodule="" src="/_next/static/chunks/polyfills-42372ed130431b0a.js"></script><script src="/_next/static/chunks/webpack-038c0e5fc692a3a2.js" defer=""></script><script src="/_next/static/chunks/framework-63d16ff2f5e08230.js" defer=""></script><script src="/_next/static/chunks/main-2dfc49bde70faad2.js" defer=""></script><script src="/_next/static/chunks/pages/_app-caa46865c99e0a9c.js" defer=""></script><script src="/_next/static/chunks/332-115b0c492711475c.js" defer=""></script><script src="/_next/static/chunks/61-6e6fc9699332da0b.js" defer=""></script><script src="/_next/static/chunks/pages/index-fbd585547290fa0c.js" defer=""></script><script src="/_next/static/dNRZT2ssqN5H1exrBOqX3/_buildManifest.js" defer=""></script><script src="/_next/static/dNRZT2ssqN5H1exrBOqX3/_ssgManifest.js" defer=""></script></head><body><div id="__next"><main class="__className_f367f3 flex min-h-screen flex-col items-center justify-between p-24"><header class="Header_header__Wffex"><div class="Header_logo__pNtf_"><img alt="QoreAI" fetchpriority="high" width="100" height="36" decoding="async" data-nimg="1" style="color:transparent" srcSet="/_next/image?url=%2FQoreAI-Logo.webp&w=128&q=75 1x, /_next/image?url=%2FQoreAI-Logo.webp&w=256&q=75 2x" src="/_next/image?url=%2FQoreAI-Logo.webp&w=256&q=75"/></div><nav><a data-active="true" href="/">Home</a><a data-active="false" href="https://www.qoreai.com/company/">About</a><a data-active="false" href="/docs">Docs</a><a data-active="false" href="/swagger">Swagger</a><a data-active="false" href="/contact">Contact</a><a data-active="false" href="/login">Login</a></nav></header><div class="z-10 w-full max-w-5xl items-center justify-between font-mono text-sm lg:flex"><p class="fixed left-0 top-0 flex w-full justify-center border-b border-gray-300 bg-gradient-to-b from-zinc-200 pb-6 pt-8 backdrop-blur-2xl dark:border-neutral-800 dark:bg-zinc-800/30 dark:from-inherit lg:static lg:w-auto lg:rounded-xl lg:border lg:bg-gray-200 lg:p-4 lg:dark:bg-zinc-800/30 text-2xl"><code class="font-mono font-bold">Available API's</code></p><div class="fixed bottom-0 left-0 flex h-48 w-full items-end justify-center bg-gradient-to-t from-white via-white dark:from-black dark:via-black lg:static lg:h-auto lg:w-auto lg:bg-none"><a class="pointer-events-none flex place-items-center gap-2 p-8 lg:pointer-events-auto lg:p-0" href="https://www.qoreai.com" target="_blank" rel="noopener noreferrer">By<!-- --> <img alt="QoreAI" fetchpriority="high" width="100" height="36" decoding="async" data-nimg="1" style="color:transparent" srcSet="/_next/image?url=%2FQoreAI-Logo.webp&w=128&q=75 1x, /_next/image?url=%2FQoreAI-Logo.webp&w=256&q=75 2x" src="/_next/image?url=%2FQoreAI-Logo.webp&w=256&q=75"/></a></div></div><div class="relative flex place-items-center before:absolute before:h-[300px] before:w-[480px] before:-translate-x-1/2 before:rounded-full before:bg-gradient-radial before:from-white before:to-transparent before:blur-2xl before:content-[''] after:absolute after:-z-20 after:h-[180px] after:w-[240px] after:translate-x-1/3 after:bg-gradient-conic after:from-sky-200 after:via-blue-200 after:blur-2xl after:content-['']
Open service 66.33.60.35:443 · stage.api.qoreai.com
2026-01-02 10:10
HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 1104282 Cache-Control: public, max-age=0, must-revalidate Content-Disposition: inline Content-Length: 37576 Content-Type: text/html; charset=utf-8 Date: Fri, 02 Jan 2026 10:10:40 GMT Etag: "3feb9ed618e64746950e93f891dad64b" Last-Modified: Sat, 20 Dec 2025 15:25:58 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: / X-Vercel-Cache: HIT X-Vercel-Id: iad1::64rr7-1767348640608-7dcd6c8907ad Connection: close <!DOCTYPE html><html lang="en"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width"/><link rel="preload" as="image" imageSrcSet="/_next/image?url=%2FQoreAI-Logo.webp&w=128&q=75 1x, /_next/image?url=%2FQoreAI-Logo.webp&w=256&q=75 2x" fetchpriority="high"/><meta name="next-head-count" content="3"/><link rel="preload" href="/_next/static/media/e4af272ccee01ff0-s.p.woff2" as="font" type="font/woff2" crossorigin="anonymous" data-next-font="size-adjust"/><link rel="preload" href="/_next/static/css/2bfca27ac41d915f.css" as="style"/><link rel="stylesheet" href="/_next/static/css/2bfca27ac41d915f.css" data-n-g=""/><link rel="preload" href="/_next/static/css/a0f49a9b26f78ec7.css" as="style"/><link rel="stylesheet" href="/_next/static/css/a0f49a9b26f78ec7.css" data-n-p=""/><noscript data-n-css=""></noscript><script defer="" nomodule="" src="/_next/static/chunks/polyfills-42372ed130431b0a.js"></script><script src="/_next/static/chunks/webpack-038c0e5fc692a3a2.js" defer=""></script><script src="/_next/static/chunks/framework-63d16ff2f5e08230.js" defer=""></script><script src="/_next/static/chunks/main-2dfc49bde70faad2.js" defer=""></script><script src="/_next/static/chunks/pages/_app-caa46865c99e0a9c.js" defer=""></script><script src="/_next/static/chunks/332-115b0c492711475c.js" defer=""></script><script src="/_next/static/chunks/61-6e6fc9699332da0b.js" defer=""></script><script src="/_next/static/chunks/pages/index-fbd585547290fa0c.js" defer=""></script><script src="/_next/static/dNRZT2ssqN5H1exrBOqX3/_buildManifest.js" defer=""></script><script src="/_next/static/dNRZT2ssqN5H1exrBOqX3/_ssgManifest.js" defer=""></script></head><body><div id="__next"><main class="__className_f367f3 flex min-h-screen flex-col items-center justify-between p-24"><header class="Header_header__Wffex"><div class="Header_logo__pNtf_"><img alt="QoreAI" fetchpriority="high" width="100" height="36" decoding="async" data-nimg="1" style="color:transparent" srcSet="/_next/image?url=%2FQoreAI-Logo.webp&w=128&q=75 1x, /_next/image?url=%2FQoreAI-Logo.webp&w=256&q=75 2x" src="/_next/image?url=%2FQoreAI-Logo.webp&w=256&q=75"/></div><nav><a data-active="true" href="/">Home</a><a data-active="false" href="https://www.qoreai.com/company/">About</a><a data-active="false" href="/docs">Docs</a><a data-active="false" href="/swagger">Swagger</a><a data-active="false" href="/contact">Contact</a><a data-active="false" href="/login">Login</a></nav></header><div class="z-10 w-full max-w-5xl items-center justify-between font-mono text-sm lg:flex"><p class="fixed left-0 top-0 flex w-full justify-center border-b border-gray-300 bg-gradient-to-b from-zinc-200 pb-6 pt-8 backdrop-blur-2xl dark:border-neutral-800 dark:bg-zinc-800/30 dark:from-inherit lg:static lg:w-auto lg:rounded-xl lg:border lg:bg-gray-200 lg:p-4 lg:dark:bg-zinc-800/30 text-2xl"><code class="font-mono font-bold">Available API's</code></p><div class="fixed bottom-0 left-0 flex h-48 w-full items-end justify-center bg-gradient-to-t from-white via-white dark:from-black dark:via-black lg:static lg:h-auto lg:w-auto lg:bg-none"><a class="pointer-events-none flex place-items-center gap-2 p-8 lg:pointer-events-auto lg:p-0" href="https://www.qoreai.com" target="_blank" rel="noopener noreferrer">By<!-- --> <img alt="QoreAI" fetchpriority="high" width="100" height="36" decoding="async" data-nimg="1" style="color:transparent" srcSet="/_next/image?url=%2FQoreAI-Logo.webp&w=128&q=75 1x, /_next/image?url=%2FQoreAI-Logo.webp&w=256&q=75 2x" src="/_next/image?url=%2FQoreAI-Logo.webp&w=256&q=75"/></a></div></div><div class="relative flex place-items-center before:absolute before:h-[300px] before:w-[480px] before:-translate-x-1/2 before:rounded-full before:bg-gradient-radial before:from-white before:to-transparent before:blur-2xl before:content-[''] after:absolute after:-z-20 after:h-[180px] after:w-[240px] after:translate-x-1/3 after:bg-gradient-conic after:from-sky-200 after:via-blue-200 after:blur-2xl after:content-['']
Open service 66.33.60.35:443 · stage.api.qoreai.com
2025-12-23 05:22
HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 0 Cache-Control: public, max-age=0, must-revalidate Content-Disposition: inline Content-Length: 37576 Content-Type: text/html; charset=utf-8 Date: Tue, 23 Dec 2025 05:22:12 GMT Etag: "3feb9ed618e64746950e93f891dad64b" Last-Modified: Tue, 23 Dec 2025 05:22:12 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: / X-Vercel-Cache: HIT X-Vercel-Id: lhr1::w8sg4-1766467332242-7d0613bfff16 Connection: close <!DOCTYPE html><html lang="en"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width"/><link rel="preload" as="image" imageSrcSet="/_next/image?url=%2FQoreAI-Logo.webp&w=128&q=75 1x, /_next/image?url=%2FQoreAI-Logo.webp&w=256&q=75 2x" fetchpriority="high"/><meta name="next-head-count" content="3"/><link rel="preload" href="/_next/static/media/e4af272ccee01ff0-s.p.woff2" as="font" type="font/woff2" crossorigin="anonymous" data-next-font="size-adjust"/><link rel="preload" href="/_next/static/css/2bfca27ac41d915f.css" as="style"/><link rel="stylesheet" href="/_next/static/css/2bfca27ac41d915f.css" data-n-g=""/><link rel="preload" href="/_next/static/css/a0f49a9b26f78ec7.css" as="style"/><link rel="stylesheet" href="/_next/static/css/a0f49a9b26f78ec7.css" data-n-p=""/><noscript data-n-css=""></noscript><script defer="" nomodule="" src="/_next/static/chunks/polyfills-42372ed130431b0a.js"></script><script src="/_next/static/chunks/webpack-038c0e5fc692a3a2.js" defer=""></script><script src="/_next/static/chunks/framework-63d16ff2f5e08230.js" defer=""></script><script src="/_next/static/chunks/main-2dfc49bde70faad2.js" defer=""></script><script src="/_next/static/chunks/pages/_app-caa46865c99e0a9c.js" defer=""></script><script src="/_next/static/chunks/332-115b0c492711475c.js" defer=""></script><script src="/_next/static/chunks/61-6e6fc9699332da0b.js" defer=""></script><script src="/_next/static/chunks/pages/index-fbd585547290fa0c.js" defer=""></script><script src="/_next/static/dNRZT2ssqN5H1exrBOqX3/_buildManifest.js" defer=""></script><script src="/_next/static/dNRZT2ssqN5H1exrBOqX3/_ssgManifest.js" defer=""></script></head><body><div id="__next"><main class="__className_f367f3 flex min-h-screen flex-col items-center justify-between p-24"><header class="Header_header__Wffex"><div class="Header_logo__pNtf_"><img alt="QoreAI" fetchpriority="high" width="100" height="36" decoding="async" data-nimg="1" style="color:transparent" srcSet="/_next/image?url=%2FQoreAI-Logo.webp&w=128&q=75 1x, /_next/image?url=%2FQoreAI-Logo.webp&w=256&q=75 2x" src="/_next/image?url=%2FQoreAI-Logo.webp&w=256&q=75"/></div><nav><a data-active="true" href="/">Home</a><a data-active="false" href="https://www.qoreai.com/company/">About</a><a data-active="false" href="/docs">Docs</a><a data-active="false" href="/swagger">Swagger</a><a data-active="false" href="/contact">Contact</a><a data-active="false" href="/login">Login</a></nav></header><div class="z-10 w-full max-w-5xl items-center justify-between font-mono text-sm lg:flex"><p class="fixed left-0 top-0 flex w-full justify-center border-b border-gray-300 bg-gradient-to-b from-zinc-200 pb-6 pt-8 backdrop-blur-2xl dark:border-neutral-800 dark:bg-zinc-800/30 dark:from-inherit lg:static lg:w-auto lg:rounded-xl lg:border lg:bg-gray-200 lg:p-4 lg:dark:bg-zinc-800/30 text-2xl"><code class="font-mono font-bold">Available API's</code></p><div class="fixed bottom-0 left-0 flex h-48 w-full items-end justify-center bg-gradient-to-t from-white via-white dark:from-black dark:via-black lg:static lg:h-auto lg:w-auto lg:bg-none"><a class="pointer-events-none flex place-items-center gap-2 p-8 lg:pointer-events-auto lg:p-0" href="https://www.qoreai.com" target="_blank" rel="noopener noreferrer">By<!-- --> <img alt="QoreAI" fetchpriority="high" width="100" height="36" decoding="async" data-nimg="1" style="color:transparent" srcSet="/_next/image?url=%2FQoreAI-Logo.webp&w=128&q=75 1x, /_next/image?url=%2FQoreAI-Logo.webp&w=256&q=75 2x" src="/_next/image?url=%2FQoreAI-Logo.webp&w=256&q=75"/></a></div></div><div class="relative flex place-items-center before:absolute before:h-[300px] before:w-[480px] before:-translate-x-1/2 before:rounded-full before:bg-gradient-radial before:from-white before:to-transparent before:blur-2xl before:content-[''] after:absolute after:-z-20 after:h-[180px] after:w-[240px] after:translate-x-1/3 after:bg-gradient-conic after:from-sky-200 after:via-blue-200 after:blur-2xl after:content-['']
Open service 66.33.60.35:443 · stage.api.qoreai.com
2025-12-20 15:25
HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 0 Cache-Control: public, max-age=0, must-revalidate Content-Disposition: inline Content-Length: 37576 Content-Type: text/html; charset=utf-8 Date: Sat, 20 Dec 2025 15:25:58 GMT Etag: "3feb9ed618e64746950e93f891dad64b" Last-Modified: Sat, 20 Dec 2025 15:25:58 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: / X-Vercel-Cache: HIT X-Vercel-Id: iad1::lx7df-1766244358631-2bc6a4623c4e Connection: close <!DOCTYPE html><html lang="en"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width"/><link rel="preload" as="image" imageSrcSet="/_next/image?url=%2FQoreAI-Logo.webp&w=128&q=75 1x, /_next/image?url=%2FQoreAI-Logo.webp&w=256&q=75 2x" fetchpriority="high"/><meta name="next-head-count" content="3"/><link rel="preload" href="/_next/static/media/e4af272ccee01ff0-s.p.woff2" as="font" type="font/woff2" crossorigin="anonymous" data-next-font="size-adjust"/><link rel="preload" href="/_next/static/css/2bfca27ac41d915f.css" as="style"/><link rel="stylesheet" href="/_next/static/css/2bfca27ac41d915f.css" data-n-g=""/><link rel="preload" href="/_next/static/css/a0f49a9b26f78ec7.css" as="style"/><link rel="stylesheet" href="/_next/static/css/a0f49a9b26f78ec7.css" data-n-p=""/><noscript data-n-css=""></noscript><script defer="" nomodule="" src="/_next/static/chunks/polyfills-42372ed130431b0a.js"></script><script src="/_next/static/chunks/webpack-038c0e5fc692a3a2.js" defer=""></script><script src="/_next/static/chunks/framework-63d16ff2f5e08230.js" defer=""></script><script src="/_next/static/chunks/main-2dfc49bde70faad2.js" defer=""></script><script src="/_next/static/chunks/pages/_app-caa46865c99e0a9c.js" defer=""></script><script src="/_next/static/chunks/332-115b0c492711475c.js" defer=""></script><script src="/_next/static/chunks/61-6e6fc9699332da0b.js" defer=""></script><script src="/_next/static/chunks/pages/index-fbd585547290fa0c.js" defer=""></script><script src="/_next/static/dNRZT2ssqN5H1exrBOqX3/_buildManifest.js" defer=""></script><script src="/_next/static/dNRZT2ssqN5H1exrBOqX3/_ssgManifest.js" defer=""></script></head><body><div id="__next"><main class="__className_f367f3 flex min-h-screen flex-col items-center justify-between p-24"><header class="Header_header__Wffex"><div class="Header_logo__pNtf_"><img alt="QoreAI" fetchpriority="high" width="100" height="36" decoding="async" data-nimg="1" style="color:transparent" srcSet="/_next/image?url=%2FQoreAI-Logo.webp&w=128&q=75 1x, /_next/image?url=%2FQoreAI-Logo.webp&w=256&q=75 2x" src="/_next/image?url=%2FQoreAI-Logo.webp&w=256&q=75"/></div><nav><a data-active="true" href="/">Home</a><a data-active="false" href="https://www.qoreai.com/company/">About</a><a data-active="false" href="/docs">Docs</a><a data-active="false" href="/swagger">Swagger</a><a data-active="false" href="/contact">Contact</a><a data-active="false" href="/login">Login</a></nav></header><div class="z-10 w-full max-w-5xl items-center justify-between font-mono text-sm lg:flex"><p class="fixed left-0 top-0 flex w-full justify-center border-b border-gray-300 bg-gradient-to-b from-zinc-200 pb-6 pt-8 backdrop-blur-2xl dark:border-neutral-800 dark:bg-zinc-800/30 dark:from-inherit lg:static lg:w-auto lg:rounded-xl lg:border lg:bg-gray-200 lg:p-4 lg:dark:bg-zinc-800/30 text-2xl"><code class="font-mono font-bold">Available API's</code></p><div class="fixed bottom-0 left-0 flex h-48 w-full items-end justify-center bg-gradient-to-t from-white via-white dark:from-black dark:via-black lg:static lg:h-auto lg:w-auto lg:bg-none"><a class="pointer-events-none flex place-items-center gap-2 p-8 lg:pointer-events-auto lg:p-0" href="https://www.qoreai.com" target="_blank" rel="noopener noreferrer">By<!-- --> <img alt="QoreAI" fetchpriority="high" width="100" height="36" decoding="async" data-nimg="1" style="color:transparent" srcSet="/_next/image?url=%2FQoreAI-Logo.webp&w=128&q=75 1x, /_next/image?url=%2FQoreAI-Logo.webp&w=256&q=75 2x" src="/_next/image?url=%2FQoreAI-Logo.webp&w=256&q=75"/></a></div></div><div class="relative flex place-items-center before:absolute before:h-[300px] before:w-[480px] before:-translate-x-1/2 before:rounded-full before:bg-gradient-radial before:from-white before:to-transparent before:blur-2xl before:content-[''] after:absolute after:-z-20 after:h-[180px] after:w-[240px] after:translate-x-1/3 after:bg-gradient-conic after:from-sky-200 after:via-blue-200 after:blur-2xl after:content-['']