The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522088bd9cd
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true hooksPath = /dev/null [remote "origin"] url = https://devendra41309@bitbucket.org/mmvplproducts/www.vccedge.com.git fetch = +refs/heads/*:refs/remotes/origin/*
Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652223f667ff
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://devvcc@bitbucket.org/mmvplproducts/www.vccedge.com.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master [branch "develop"] remote = origin merge = refs/heads/develop
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65228216e51c
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = git@bitbucket.org:mmvplproducts/www.vccedge.com.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master [branch "develop"] remote = origin merge = refs/heads/develop
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4b39f17b21300a43922150963de2510652612a59a0
Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
GET /api/auth/LoggedUser
GET /api/auth/details
GET /api/auth/login-status
GET /api/auth/roles/{username}
GET /api/auth/validate
GET /permissions
GET /welcome
POST /api/auth/activate
POST /api/auth/attach-session-policy
POST /api/auth/attach-session-policy-to-group
POST /api/auth/check-session-status
POST /api/auth/forgot-password/update
POST /api/auth/generate-code
POST /api/auth/login
POST /api/auth/logout
POST /api/auth/logout-session
POST /api/auth/refresh-token
POST /api/auth/reset-password
POST /api/auth/session-policy
POST /api/auth/update-password
POST /api/auth/validate-code
Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4b39f17b21300a43922150963de2510652fafadef1
Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
GET /api/auth/LoggedUser
GET /api/auth/details
GET /api/auth/login-status
GET /api/auth/roles/{username}
GET /permissions
GET /welcome
POST /api/auth/activate
POST /api/auth/attach-session-policy
POST /api/auth/check-session-status
POST /api/auth/forgot-password/update
POST /api/auth/generate-code
POST /api/auth/login
POST /api/auth/logout
POST /api/auth/logout-session
POST /api/auth/refresh-token
POST /api/auth/reset-password
POST /api/auth/session-policy
POST /api/auth/update-password
POST /api/auth/validate-code
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522088bd9cd
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true hooksPath = /dev/null [remote "origin"] url = https://devendra41309@bitbucket.org/mmvplproducts/www.vccedge.com.git fetch = +refs/heads/*:refs/remotes/origin/*
Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652223f667ff
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://devvcc@bitbucket.org/mmvplproducts/www.vccedge.com.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master [branch "develop"] remote = origin merge = refs/heads/develop
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652254374d05
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = git@bitbucket.org:mmvplproducts/www.vccedge.com.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master [branch "develop"] remote = origin merge = refs/heads/develop [branch "feature/verify-email-otp"] remote = origin merge = refs/heads/feature/verify-email-otp
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652254374d05
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = git@bitbucket.org:mmvplproducts/www.vccedge.com.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master [branch "develop"] remote = origin merge = refs/heads/develop [branch "feature/verify-email-otp"] remote = origin merge = refs/heads/feature/verify-email-otp
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522088bd9cd
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true hooksPath = /dev/null [remote "origin"] url = https://devendra41309@bitbucket.org/mmvplproducts/www.vccedge.com.git fetch = +refs/heads/*:refs/remotes/origin/*
Open service 2.19.126.162:443 · www.vccedge.com
2026-01-10 03:44
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
x-nextjs-cache: HIT
ETag: "12ukruy22sncar"
X-Akamai-Transformed: 9 3667 0 pmb=mRUM,2
Cache-Control: no-store, must-revalidate
Date: Sat, 10 Jan 2026 03:44:31 GMT
Content-Length: 20684
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=128
Server-Timing: origin; dur=7
Alt-Svc: h3=":443"; ma=93600
X-Client-IP: 142.93.0.66
X-Frame-Options: DENY
Akamai-Cache-Status: NotCacheable from child
Server-Timing: ak_p; desc="1768016670883_34831714_4212397104_13448_6124_83_100_-";dur=1
Page title: VCCEdge: India’s Top Financial Data and Investment Research
<!DOCTYPE html><html lang="en"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="/_next/static/css/b26a1f6328a29379.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/67b533e600c52194.css" data-precedence="next"/><link rel="preload" as="script" fetchPriority="low" href="/_next/static/chunks/webpack-cb48f1fe17085811.js"/><script src="/_next/static/chunks/fd9d1056-e4a901286683d9bb.js" async=""></script><script src="/_next/static/chunks/52117-3bafa46182eeec46.js" async=""></script><script src="/_next/static/chunks/main-app-29d7f4e3ceafa307.js" async=""></script><script src="/_next/static/chunks/2170a4aa-2fe34ccf96f291d0.js" async=""></script><script src="/_next/static/chunks/31144-64f7ad506df1b738.js" async=""></script><script src="/_next/static/chunks/53392-4044c5d08e663b41.js" async=""></script><script src="/_next/static/chunks/27648-c85d08c2d8573649.js" async=""></script><script src="/_next/static/chunks/33145-33aa40f192b96247.js" async=""></script><script src="/_next/static/chunks/77030-2b3965fc7e785218.js" async=""></script><script src="/_next/static/chunks/58639-48b165415bc4c364.js" async=""></script><script src="/_next/static/chunks/38398-dffc62fcc1055b58.js" async=""></script><script src="/_next/static/chunks/48467-8bfa1079adf3e91f.js" async=""></script><script src="/_next/static/chunks/57793-0080b13031d71ecd.js" async=""></script><script src="/_next/static/chunks/66751-78b869b31336d4a9.js" async=""></script><script src="/_next/static/chunks/9467-0b19d1ae6c1f9ef6.js" async=""></script><script src="/_next/static/chunks/67571-06ca79556e9eb0dd.js" async=""></script><script src="/_next/static/chunks/77545-e894322c14476d2b.js" async=""></script><script src="/_next/static/chunks/31171-c4f179ec5c38bd98.js" async=""></script><script src="/_next/static/chunks/65244-f14974a94fb4a509.js" async=""></script><script src="/_next/static/chunks/73708-0795b30692d4faff.js" async=""></script><script src="/_next/static/chunks/90945-9051fdc097bed685.js" async=""></script><script src="/_next/static/chunks/42513-e9d9e22cd830fdac.js" async=""></script><script src="/_next/static/chunks/app/page-455ca56fb41195ea.js" async=""></script><script src="/_next/static/chunks/52658-61cf475d9b907c74.js" async=""></script><script src="/_next/static/chunks/7261-17f001602bd2cd63.js" async=""></script><script src="/_next/static/chunks/73294-6f5e53b87925504d.js" async=""></script><script src="/_next/static/chunks/60401-a120242f2049f38a.js" async=""></script><script src="/_next/static/chunks/75055-fcae740929d0a87c.js" async=""></script><script src="/_next/static/chunks/app/layout-f96686cf953dbd42.js" async=""></script><script src="/_next/static/chunks/app/error-0cf7bf9d0c676a77.js" async=""></script><link rel="preload" href="/_next/static/css/19a50093c8d7bd4b.css" as="style"/><link rel="preload" href="/_next/static/css/d2cd8a6deccd0871.css" as="style"/><link rel="preload" href="/_next/static/css/6271df8554b4de7b.css" as="style"/><meta name="google-site-verification" content="s01rNH5qfGYgqF0YkMj8S5JgfM42y1v4A86w4SQLF6s"/><title>VCCEdge: India’s Top Financial Data and Investment Research</title><meta name="description" content="Get deep market insights with VCCEdge—India’s leading platform for financial data, PE/VC deals, M&A, ECM, debt transactions, and advanced analytics."/><meta name="robots" content="index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1"/><link rel="icon" href="/favicon.ico" type="image/x-icon" sizes="32x32"/><link rel="canonical" href=""/><script type="application/ld+json">{"@context":"https://schema.org","@type":"Organization","name":"VCCEdge","url":"https://www.vccedge.com/","logo":"https://www.vccedge.com/images/lp-images/vccedge_logo.svg","contactPoint":{"@type":"ContactPoint","telephone":"+91-1244574283","contactType":"Financial Data Platform","areaServed":"IN","availableLanguage":"English","email":"sales@vccedge.com"},"sameAs":["https://www.linkedin.com/company/vccedge1/","https://www.instagram.com/v
Open service 2.21.110.197:443 · old.vccedge.com
2026-01-09 05:36
HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 X-Akamai-Transformed: 9 - 0 pmb=mRUM,2 Cache-Control: max-age=19758 Date: Fri, 09 Jan 2026 05:36:37 GMT Alt-Svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600 Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 Akamai-Cache-Status: Hit from child Server-Timing: ak_p; desc="1767936997405_34824909_334641681_22_1157_83_99_-";dur=1
Open service 2.16.183.196:443 · vccedge.com
2026-01-03 03:47
HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://www.vccedge.com/ Cache-Control: max-age=0 Date: Sat, 03 Jan 2026 03:47:14 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 Alt-Svc: h3=":443"; ma=93600 X-Client-IP: 164.92.107.174 X-Frame-Options: DENY Akamai-Cache-Status: NotCacheable from child Server-Timing: ak_p; desc="1767412034601_399897889_676550775_14_6163_152_163_-";dur=1
Open service 2a02:26f0:3400::1702:d22:80 · vccedge.com
2026-01-03 03:47
HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://www.vccedge.com/ Cache-Control: max-age=0 Date: Sat, 03 Jan 2026 03:47:16 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 X-Client-IP: 2a03:b0c0:3:d0::1047:b001 X-Frame-Options: DENY Akamai-Cache-Status: NotCacheable from child Server-Timing: ak_p; desc="1767412036901_386010398_1276670710_11_6422_0_0_-";dur=1
Open service 2a02:26f0:3400::1702:d22:443 · vccedge.com
2026-01-03 03:47
HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://www.vccedge.com/ Cache-Control: max-age=0 Date: Sat, 03 Jan 2026 03:47:13 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 Alt-Svc: h3=":443"; ma=93600 X-Client-IP: 2a03:b0c0:3:d0::e58:2001 X-Frame-Options: DENY Akamai-Cache-Status: NotCacheable from child Server-Timing: ak_p; desc="1767412033915_386010398_1276669111_14_7006_1_23_-";dur=1
Open service 2.16.183.225:443 · vccedge.com
2026-01-03 03:47
HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://www.vccedge.com/ Cache-Control: max-age=0 Date: Sat, 03 Jan 2026 03:47:14 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 Alt-Svc: h3=":443"; ma=93600 X-Client-IP: 165.227.39.235 X-Frame-Options: DENY Akamai-Cache-Status: NotCacheable from child Server-Timing: ak_p; desc="1767412034349_399897860_587526063_17_6216_97_104_-";dur=1
Open service 2.16.183.225:80 · vccedge.com
2026-01-03 03:47
HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://www.vccedge.com/ Cache-Control: max-age=0 Date: Sat, 03 Jan 2026 03:47:17 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 X-Client-IP: 146.190.103.103 X-Frame-Options: DENY Akamai-Cache-Status: NotCacheable from child Server-Timing: ak_p; desc="1767412037663_399897889_676551329_13_5752_163_0_-";dur=1
Open service 2a02:26f0:3400::1702:d19:80 · vccedge.com
2026-01-03 03:47
HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://www.vccedge.com/ Cache-Control: max-age=0 Date: Sat, 03 Jan 2026 03:47:16 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 X-Client-IP: 2a03:b0c0:3:d0::d1a:1 X-Frame-Options: DENY Akamai-Cache-Status: NotCacheable from child Server-Timing: ak_p; desc="1767412036881_386010389_496084714_13_5701_1_0_-";dur=1
Open service 2a02:26f0:3400::1702:d19:443 · vccedge.com
2026-01-03 03:47
HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://www.vccedge.com/ Cache-Control: max-age=0 Date: Sat, 03 Jan 2026 03:47:13 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 Alt-Svc: h3=":443"; ma=93600 X-Client-IP: 2a03:b0c0:3:d0::dc2:2001 X-Frame-Options: DENY Akamai-Cache-Status: NotCacheable from child Server-Timing: ak_p; desc="1767412033899_386010389_496084445_13_6449_1_15_-";dur=1
Open service 2.16.183.196:80 · vccedge.com
2026-01-03 03:47
HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://www.vccedge.com/ Cache-Control: max-age=0 Date: Sat, 03 Jan 2026 03:47:16 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 X-Client-IP: 188.166.108.93 X-Frame-Options: DENY Akamai-Cache-Status: NotCacheable from child Server-Timing: ak_p; desc="1767412036849_399897860_587526436_9_5749_9_0_-";dur=1
Open service 2.21.110.197:443 · old.vccedge.com
2026-01-02 04:58
HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 X-Akamai-Transformed: 9 18806 0 pmb=mRUM,2 Cache-Control: max-age=66204 Date: Fri, 02 Jan 2026 04:58:57 GMT Alt-Svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600 Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=35 Server-Timing: origin; dur=0 Akamai-Cache-Status: Miss from child, Hit from parent Server-Timing: ak_p; desc="1767329937085_34824909_1596959662_3523_830_17_35_-";dur=1
Open service 2.21.110.197:443 · old.vccedge.com
2025-12-22 16:50
HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 X-Akamai-Transformed: 9 - 0 pmb=mRUM,2 Cache-Control: max-age=86400 Date: Mon, 22 Dec 2025 16:50:13 GMT Alt-Svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600 Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=11 Akamai-Cache-Status: Hit from child Server-Timing: ak_p; desc="1766422212961_34824909_1660119782_1022_1134_89_106_-";dur=1
Open service 2.21.110.197:443 · old.vccedge.com
2025-12-20 15:14
HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 X-Akamai-Transformed: 9 18810 0 pmb=mRUM,2 Cache-Control: max-age=77015 Date: Sat, 20 Dec 2025 15:14:26 GMT Alt-Svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600 Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=44 Server-Timing: origin; dur=0 Akamai-Cache-Status: Miss from child, Hit from parent Server-Timing: ak_p; desc="1766243665982_34824909_925796030_4372_2222_9_39_-";dur=1