Apache 2.4.58
tcp/443 tcp/80
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522e0121b9c
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = git@bitbucket.org:qltechteam/learning-objects.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master [branch "feature/home_net_bck"] remote = origin merge = refs/heads/feature/home_net_bck
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522ce43394f
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = git@bitbucket.org:qltechteam/learning-objects.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master
Open service 167.235.23.111:443 · academy.soluzionisrl.com
2025-12-19 03:13
HTTP/1.1 200 OK
Date: Fri, 19 Dec 2025 03:13:20 GMT
Server: Apache/2.4.58 (Ubuntu)
Set-Cookie: LearningObjectsSESSID=upd2efgtjd6n7coeaoenjihh9j; path=/; domain=academy.soluzionisrl.com; secure; HttpOnly; SameSite=Strict
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Vary: Accept-Encoding
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
Page title: Learning Objects
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" lang="it">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>Learning Objects</title>
<link href="//cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css" rel="stylesheet"
integrity="sha384-EVSTQN3/azprG1Anm3QDgpJLIm9Nao0Yz1ztcQTwFspd3yD65VohhpuuCOmLASjC" crossorigin="anonymous">
<link href="/node_modules/font-awesome/css/font-awesome.min.css" rel="stylesheet">
<link href="/css/login.css" rel="stylesheet">
<link rel="apple-touch-icon" sizes="57x57" href="/img/favicon/apple-icon-57x57.png">
<link rel="apple-touch-icon" sizes="60x60" href="/img/favicon/apple-icon-60x60.png">
<link rel="apple-touch-icon" sizes="72x72" href="/img/favicon/apple-icon-72x72.png">
<link rel="apple-touch-icon" sizes="76x76" href="/img/favicon/apple-icon-76x76.png">
<link rel="apple-touch-icon" sizes="114x114" href="/img/favicon/apple-icon-114x114.png">
<link rel="apple-touch-icon" sizes="120x120" href="/img/favicon/apple-icon-120x120.png">
<link rel="apple-touch-icon" sizes="144x144" href="/img/favicon/apple-icon-144x144.png">
<link rel="apple-touch-icon" sizes="152x152" href="/img/favicon/apple-icon-152x152.png">
<link rel="apple-touch-icon" sizes="180x180" href="/img/favicon/apple-icon-180x180.png">
<link rel="icon" type="image/png" sizes="192x192" href="/img/favicon/android-icon-192x192.png">
<link rel="icon" type="image/png" sizes="32x32" href="/img/favicon/favicon-32x32.png">
<link rel="icon" type="image/png" sizes="96x96" href="/img/favicon/favicon-96x96.png">
<link rel="icon" type="image/png" sizes="16x16" href="/img/favicon/favicon-16x16.png">
<link rel="manifest" href="/img/favicon/manifest.json">
<meta name="msapplication-TileColor" content="#ffffff">
<meta name="msapplication-TileImage" content="/img/favicon/ms-icon-144x144.png">
<meta name="theme-color" content="#ffffff">
<script type="text/javascript" src="/node_modules/jquery/dist/jquery.min.js"></script>
<script type="text/javascript" src="/node_modules/jquery-lang-js/js/jquery-lang.js"
charset="utf-8"></script>
<script type="text/javascript" src="/node_modules/jquery-lang-js/js/js.cookie.js"
charset="utf-8"></script>
<script type="text/javascript">
function language() {
const lang = new Lang();
lang.dynamic('it', '/js/langpack/it.json');
lang.init({
defaultLang: 'it',
currentLang: 'it',
/*cookie: {
name: 'langCookie',
expiry: 365,
path: '/'
},
allowCookieOverride: true*/
});
if (lang.afterUpdate()) {
setTimeout(function () {
$('html').css('visibility', 'visible');
}, 500)
}
}
</script>
</head>
<body>
<div id="site_login" class="login">
<div class="card card_login">
<div class="card_login_logo">
<img src="/resources/e440ffde-6eac-4cd1-8686-994d4f27ded9/logo/68fa4690a7498.jpg" alt="Learning Objects" style="max-width: 250px">
</div>
<div class="card_login_body">
<form name="frmLogin" action="" method="post">
<input type="hidden" name="login" value="e440ffde-6eac-4cd1-8686-994d4f27ded9"/>
<input type="hidden" name="stato"/>
<div class="form_group">
<div class="input_group">
<div class="input_group_prepend">
<i class="fa fa-user" style="margin-top: 11px;"></i></div>
<input class="input_group_input" id="username_field" type="email" name="email"
placeholder="Email" re
Open service 167.235.23.111:80 · academy.soluzionisrl.com
2025-12-19 03:13
HTTP/1.1 302 Found Date: Fri, 19 Dec 2025 03:13:20 GMT Server: Apache/2.4.58 (Ubuntu) Location: https://academy.soluzionisrl.com/ Content-Length: 307 Connection: close Content-Type: text/html; charset=iso-8859-1 Page title: 302 Found <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>302 Found</title> </head><body> <h1>Found</h1> <p>The document has moved <a href="https://academy.soluzionisrl.com/">here</a>.</p> <hr> <address>Apache/2.4.58 (Ubuntu) Server at academy.soluzionisrl.com Port 80</address> </body></html>