loqate-api-key: Loqate API Key

2025-08-01 loqate-api-key PoC Public

Description

Loqate API Key is leaked.

PoC

id: loqate-api-key

info:
  name: Loqate API Key
  author: realexp3rt
  severity: low
  description: Loqate API Key is leaked.
  reference:
    - https://www.loqate.com/en-gb/home/
  classification:
    cwe-id: CWE-522,CWE-540
  metadata:
    max-request: 1
  tags: exposure,token,loqate,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    extractors:
      - type: regex
        part: body
        regex:
          - "[A-Z]{2}[0-9]{2}-[A-Z]{2}[0-9]{2}-[A-Z]{2}[0-9]{2}-[A-Z]{2}[0-9]{2}"
# digest: 490a0046304402203cf853ed783faeb562d1f24d5d9622436a1c33bef97ef281b0e24ddc0040f30902201ff7486f70b33144977385ab4312a2ce0a728eb8fdf5b6943bbaf179c4da2dff:922c64590222798bb761d5b6d8e72950

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.
Source: https://github.com/projectdiscovery/nuclei-templates/blob/main/http/exposures/tokens/loqate/loqate-api-key.yaml

References