Create a resource
curl --request POST \
--url https://aquila.attaxr.com/api/vulnerabilities \
--header 'Content-Type: application/json' \
--cookie better-auth.session_token= \
--data '
{
"id": "<string>",
"userId": "<string>",
"title": "<string>"
}
'const options = {
method: 'POST',
headers: {cookie: 'better-auth.session_token=', 'Content-Type': 'application/json'},
body: JSON.stringify({id: '<string>', userId: '<string>', title: '<string>'})
};
fetch('https://aquila.attaxr.com/api/vulnerabilities', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://aquila.attaxr.com/api/vulnerabilities"
payload = {
"id": "<string>",
"userId": "<string>",
"title": "<string>"
}
headers = {
"cookie": "better-auth.session_token=",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text){
"id": "<string>",
"userId": "<string>",
"title": "<string>",
"severity": "medium",
"status": "open",
"description": "",
"metadata": {},
"createdAt": "<unknown>",
"updatedAt": "<unknown>",
"leadId": "<string>",
"scanId": "<string>",
"target": "<string>",
"dedupKey": "<string>",
"score": 50,
"category": "<string>",
"featureCategory": "admin",
"proofOfConcept": "<string>",
"stepsToReproduce": "<string>",
"impact": "<string>",
"remediation": "<string>",
"attackScenarioMermaid": "<string>",
"chainRefs": [
{
"kind": "lead",
"id": "<string>",
"label": "<string>",
"note": "<string>"
}
],
"references": [
{
"title": "<string>",
"url": "<string>"
}
],
"evidence": [
{
"label": "<string>",
"detail": "<string>"
}
],
"methodology": "<string>",
"toolName": "<string>",
"confirmedAt": "<unknown>"
}{
"error": "<string>",
"details": "<unknown>"
}{
"error": "<string>"
}{
"error": "<string>"
}{
"error": "<string>"
}Vulnerabilities
Create a resource
Creates a row owned by the calling user; userId is injected server-side and never taken from the body.
POST
/
api
/
vulnerabilities
Create a resource
curl --request POST \
--url https://aquila.attaxr.com/api/vulnerabilities \
--header 'Content-Type: application/json' \
--cookie better-auth.session_token= \
--data '
{
"id": "<string>",
"userId": "<string>",
"title": "<string>"
}
'const options = {
method: 'POST',
headers: {cookie: 'better-auth.session_token=', 'Content-Type': 'application/json'},
body: JSON.stringify({id: '<string>', userId: '<string>', title: '<string>'})
};
fetch('https://aquila.attaxr.com/api/vulnerabilities', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://aquila.attaxr.com/api/vulnerabilities"
payload = {
"id": "<string>",
"userId": "<string>",
"title": "<string>"
}
headers = {
"cookie": "better-auth.session_token=",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text){
"id": "<string>",
"userId": "<string>",
"title": "<string>",
"severity": "medium",
"status": "open",
"description": "",
"metadata": {},
"createdAt": "<unknown>",
"updatedAt": "<unknown>",
"leadId": "<string>",
"scanId": "<string>",
"target": "<string>",
"dedupKey": "<string>",
"score": 50,
"category": "<string>",
"featureCategory": "admin",
"proofOfConcept": "<string>",
"stepsToReproduce": "<string>",
"impact": "<string>",
"remediation": "<string>",
"attackScenarioMermaid": "<string>",
"chainRefs": [
{
"kind": "lead",
"id": "<string>",
"label": "<string>",
"note": "<string>"
}
],
"references": [
{
"title": "<string>",
"url": "<string>"
}
],
"evidence": [
{
"label": "<string>",
"detail": "<string>"
}
],
"methodology": "<string>",
"toolName": "<string>",
"confirmedAt": "<unknown>"
}{
"error": "<string>",
"details": "<unknown>"
}{
"error": "<string>"
}{
"error": "<string>"
}{
"error": "<string>"
}Authorizations
apiKeyCookieapiKeyHeaderbearerAuth
Browser session cookie set by Better Auth sign-in.
Body
application/json
Minimum string length:
1Minimum string length:
1Available options:
info, low, medium, high, critical Required range:
0 <= x <= 100Available options:
open, triaging, confirmed, false_positive, fixed Available options:
admin, api, auth, static, cdn, redirect, error, login, file_upload, exposed_asset, form, authentication, infrastructure, documentation, javascript_analysis, hidden_functionality, debug, internal, sensitive_data, technology_signature, parameterized_endpoint Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes

