passlisted in Coinbase#523 by calls of 1,014 on this host
0.003 USDC
per call, as the listing declares it on eip155:
- Validation state
- pass
- Uptime, 7 / 30 / 90 days
- 100% / 100% / 100%
- Calls, trailing 30 days
- 2
- Unique payers, trailing 30 days
- 2
- Last called
- 2026-10-06 20:30 UTC
- First observed by TOLLderived
- 2026-10-04
- Pricederived
- 0.003 USDC
- Networks
- 5
How big is this endpoint among the ones like it?
No trace is drawn of this endpoint’s own volume. Its counters have changed 2 times across 16 observations, and 3 changes are the fewest this site will draw a trace through, because two points and a guess are not a series. Every observation is in the JSON.
exploited vulnerabilities is one of 1,014 listed endpoints on api.vextorium.com, tied 523rd by calls with 471 others among them.
exploited vulnerabilities takes a json body with the fields days and limit.
A response from exploited vulnerabilities, as declared, includes source, catalog, matches, total_catalog and vulnerabilities.
The registry's counters give exploited vulnerabilities 2 calls and 2 unique payers over 30 days, every call from a different payer.
exploited vulnerabilities was last called 3 days before the snapshot.
Each call is priced at 0.003 USDC, payable on Base.
For exploited vulnerabilities the listing declares 5 accepts on Base, Solana, Polygon, Optimism and 1 other, to 2 different wallets.
exploited vulnerabilities, a POST endpoint on api.vextorium.com, appears in the Coinbase registry; TOLL's taxonomy puts it in search.
exploited vulnerabilities answered the sweep of 2026-10-09 with a valid 402, as at every sweep since 2026-10-04.
Closest in price to exploited vulnerabilities within search: search at search.cyberwarex.com and exa contents at stableenrich.dev.
Among comparable prices in search, exploited vulnerabilities sits above 14% of them.
For 1 of the options on exploited vulnerabilities, TOLL has no verified decimals and shows the raw amount.
The wallet paid by exploited vulnerabilities is the payee of 1,024 endpoints across 3 hosts.
Seller tags: cve, kev, vulnerabilities and security.
The price of exploited vulnerabilities is declared by 151 other listings in search too.
the payment options, as of 2026-10-09 13:14 UTC · method · pinnable
| registry | network | asset | amount | scheme | pay to |
|---|---|---|---|---|---|
| Coinbase | eip155: | USDC | 0.003 USDC | exact | 0xb9f06D…b71aCf |
| Coinbase | solana: | USDC | 0.003 USDC | exact | HcjfmZLg…yt3pz2 |
| Coinbase | eip155: | USDC | 0.003 USDC | exact | 0xb9f06D…b71aCf |
| Coinbase | eip155: | USDC | 0.003 USDC | exact | 0xb9f06D…b71aCf |
| Coinbase | eip155: | GatewayWalletBatched | 3000 smallest units, decimals unknown | exact | 0xb9f06D…b71aCf |
the checks, as of 2026-10-09 12:38 UTC · method · pinnableendpoint answered HTTP 402
No named check failed.
Every sweep that observed this endpoint, newest first.
| observed, UTC | state | failed checks | sweep |
|---|---|---|---|
| 2026-10-09 12:38 UTC | pass | 0 | daily-2026-10-09 |
| 2026-10-08 14:29 UTC | pass | 0 | daily-2026-10-08 |
| 2026-10-07 13:38 UTC | pass | 0 | daily-2026-10-07 |
| 2026-10-06 14:13 UTC | pass | 0 | daily-2026-10-06 |
| 2026-10-05 12:24 UTC | pass | 0 | daily-2026-10-05 |
| 2026-10-04 14:56 UTC | pass | 0 | daily-2026-10-04 |
| 2026-10-04 08:16 UTC | pass | 0 | new-after-daily-2026-10-04 |
Presence in a registry, not liveness of the service (method). Newest first.
- listed in Coinbase
From the registry record, not validated by TOLL.the declared schema, as of 2026-10-06 20:30 UTC · method · live
The input and output block
{
"input": {
"body": {
"days": 14,
"limit": 2
},
"type": "http",
"method": "POST",
"bodyType": "json"
},
"output": {
"type": "json",
"example": {
"source": "CISA Known Exploited Vulnerabilities (US public domain)",
"catalog": "2026.10.02",
"matches": 17,
"total_catalog": 1733,
"vulnerabilities": [
{
"cve": "CVE-2026-102490",
"cwe": [
"CWE-269"
],
"high": "2026-10-02",
"name": "Zammad GmbH Zammad Improper Privilege Management Vulnerability",
"action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discon…",
"product": "Zammad",
"ransomware": "Unknown",
"description": "Zammad GmbH Zammad contains an improper privilege management vulnerability that can allow the local zammad user to escalate privileges to root. This vulnerability can be chained with CVE-2026-102489.",
"manufacturer": "Zammad GmbH",
"correction_term": "2026-10-05"
},
{
"cve": "CVE-2026-102489",
"cwe": [
"CWE-384"
],
"high": "2026-10-02",
"name": "Zammad GmbH Zammad Session Fixation Vulnerability",
"action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discon…",
"product": "Zammad",
"ransomware": "Unknown",
"description": "Zammad GmbH Zammad contains a session fixation vulnerability that can lead to remote code execution as the zammad user. This vulnerability can be chained with CVE-2026-102490.",
"manufacturer": "Zammad GmbH",
"correction_term": "2026-10-05"
}
]
}
}
}Cite this page
The pinned URL below renders this page from the snapshot of 2026-10-09 13:14 UTC and does not change; the live page does, every six hours. Data reuse is under CC BY 4.0 (terms).
Plain text
TOLL, "exploited vulnerabilities on api.vextorium.com", snapshot of 2026-10-09 13:14 UTC. https://tollindex.com/e/api-vextorium-com-v1-exploited-vulnerabilities-eaa3a9/at/2026-10-09T13-14Z. Accessed [access date].
BibTeX
@misc{toll-e-api-vextorium-com-v1-exploited-vulnerabilities-eaa3a9-2026-10-09T13-14Z,
author = {TOLL},
title = {exploited vulnerabilities on api.vextorium.com},
howpublished = {\url{https://tollindex.com/e/api-vextorium-com-v1-exploited-vulnerabilities-eaa3a9/at/2026-10-09T13-14Z}},
year = {2026},
month = {10},
note = {Pinned view of the snapshot of 2026-10-09 13:14 UTC. Accessed [access date].}
}None yet. Anything submitted through the form below is published here with its outcome.