OVHcloud
tcp/443 tcp/80
The application has Symfony profiling enabled.
It enables an attacker to access the following sensitive content :
Fingerprint: 407cf4363b0e62fafca67e070e67adc60e67adc60e67adc60e67adc60e67adc6
Symfony profiler enabled: https://www.freecab.fr/_profiler/empty/search/results
The application has Symfony profiling enabled.
It enables an attacker to access the following sensitive content :
Fingerprint: 407cf4363b0e62fafca67e0714a6621514a6621514a6621514a6621514a66215
Symfony profiler enabled: https://freecab.fr/_profiler/empty/search/results
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb5092b461
[core] repositoryformatversion = 0 filemode = false bare = false logallrefupdates = true symlinks = false ignorecase = true [remote "origin"] url = https://github.com/labidiyassine/freecabs.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "main"] remote = origin merge = refs/heads/main
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb5092b461
[core] repositoryformatversion = 0 filemode = false bare = false logallrefupdates = true symlinks = false ignorecase = true [remote "origin"] url = https://github.com/labidiyassine/freecabs.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "main"] remote = origin merge = refs/heads/main
Open service 54.36.91.62:443 · www.freecab.fr
2026-01-09 06:26
HTTP/1.1 301 Moved Permanently Date: Fri, 09 Jan 2026 06:26:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: OVHcloud X-Powered-By: PHP/8.1 X-Content-Security-Policy: default-src 'self'; script-src 'self' https://hcaptcha.com https://*.hcaptcha.com; frame-src 'self' https://hcaptcha.com https://*.hcaptcha.com; style-src 'self' https://hcaptcha.com https://*.hcaptcha.com; connect-src 'self' https://hcaptcha.com https://*.hcaptcha.com; unsafe-eval 'self' https://hcaptcha.com https://*.hcaptcha.com; unsafe-inline 'self' https://hcaptcha.com https://*.hcaptcha.com; X-Redirect-By: WordPress Location: https://freecab.fr/
Open service 54.36.91.62:80 · www.freecab.fr
2026-01-09 03:02
HTTP/1.1 301 Moved Permanently date: Fri, 09 Jan 2026 03:02:38 GMT content-type: text/html; charset=UTF-8 transfer-encoding: chunked server: OVHcloud x-powered-by: PHP/8.1 x-content-security-policy: default-src 'self'; script-src 'self' https://hcaptcha.com https://*.hcaptcha.com; frame-src 'self' https://hcaptcha.com https://*.hcaptcha.com; style-src 'self' https://hcaptcha.com https://*.hcaptcha.com; connect-src 'self' https://hcaptcha.com https://*.hcaptcha.com; unsafe-eval 'self' https://hcaptcha.com https://*.hcaptcha.com; unsafe-inline 'self' https://hcaptcha.com https://*.hcaptcha.com; x-redirect-by: WordPress location: https://freecab.fr/ x-iplb-request-id: A7475172:B6F8_36245B3E:0050_69606FCD_71173:31B8 x-iplb-instance: 52233 connection: close
Open service 54.36.91.62:443 · freecab.fr
2026-01-09 02:38
HTTP/1.1 200 OK Date: Fri, 09 Jan 2026 02:38:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: OVHcloud X-Powered-By: PHP/8.1 X-Content-Security-Policy: default-src 'self'; script-src 'self' https://hcaptcha.com https://*.hcaptcha.com; frame-src 'self' https://hcaptcha.com https://*.hcaptcha.com; style-src 'self' https://hcaptcha.com https://*.hcaptcha.com; connect-src 'self' https://hcaptcha.com https://*.hcaptcha.com; unsafe-eval 'self' https://hcaptcha.com https://*.hcaptcha.com; unsafe-inline 'self' https://hcaptcha.com https://*.hcaptcha.com; Link: <https://freecab.fr/wp-json/>; rel="https://api.w.org/" Link: <https://freecab.fr/wp-json/wp/v2/pages/947>; rel="alternate"; title="JSON"; type="application/json" Link: <https://freecab.fr/>; rel=shortlink Vary: Accept-Encoding
Open service 2001:41d0:301::27:443 · www.freecab.fr
2026-01-03 08:07
HTTP/1.1 301 Moved Permanently Date: Sat, 03 Jan 2026 08:07:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: OVHcloud X-Powered-By: PHP/8.1 X-Content-Security-Policy: default-src 'self'; script-src 'self' https://hcaptcha.com https://*.hcaptcha.com; frame-src 'self' https://hcaptcha.com https://*.hcaptcha.com; style-src 'self' https://hcaptcha.com https://*.hcaptcha.com; connect-src 'self' https://hcaptcha.com https://*.hcaptcha.com; unsafe-eval 'self' https://hcaptcha.com https://*.hcaptcha.com; unsafe-inline 'self' https://hcaptcha.com https://*.hcaptcha.com; X-Redirect-By: WordPress Location: https://freecab.fr/
Open service 2001:41d0:301::27:80 · www.freecab.fr
2026-01-03 08:07
HTTP/1.1 301 Moved Permanently date: Sat, 03 Jan 2026 08:07:07 GMT content-type: text/html; charset=UTF-8 transfer-encoding: chunked server: OVHcloud x-powered-by: PHP/8.1 x-content-security-policy: default-src 'self'; script-src 'self' https://hcaptcha.com https://*.hcaptcha.com; frame-src 'self' https://hcaptcha.com https://*.hcaptcha.com; style-src 'self' https://hcaptcha.com https://*.hcaptcha.com; connect-src 'self' https://hcaptcha.com https://*.hcaptcha.com; unsafe-eval 'self' https://hcaptcha.com https://*.hcaptcha.com; unsafe-inline 'self' https://hcaptcha.com https://*.hcaptcha.com; x-redirect-by: WordPress location: https://freecab.fr/ x-iplb-request-id: 2604A880040000D00000000024ED0001:EAEE_200141D0030100000000000000000027:0050_6958CE2A_8C1E1:0967 x-iplb-instance: 52245 connection: close
Open service 2001:41d0:301::27:80 · freecab.fr
2026-01-03 08:03
HTTP/1.1 301 Moved Permanently date: Sat, 03 Jan 2026 08:03:41 GMT content-type: text/html; charset=UTF-8 transfer-encoding: chunked server: OVHcloud x-powered-by: PHP/8.1 x-content-security-policy: default-src 'self'; script-src 'self' https://hcaptcha.com https://*.hcaptcha.com; frame-src 'self' https://hcaptcha.com https://*.hcaptcha.com; style-src 'self' https://hcaptcha.com https://*.hcaptcha.com; connect-src 'self' https://hcaptcha.com https://*.hcaptcha.com; unsafe-eval 'self' https://hcaptcha.com https://*.hcaptcha.com; unsafe-inline 'self' https://hcaptcha.com https://*.hcaptcha.com; x-redirect-by: WordPress location: https://freecab.fr/ x-iplb-request-id: 24006180010000D00000000008CF7001:8512_200141D0030100000000000000000027:0050_6958CD5C_C18D:48A3 x-iplb-instance: 52219 connection: close
Open service 2001:41d0:301::27:443 · freecab.fr
2026-01-03 08:03
HTTP/1.1 200 OK Date: Sat, 03 Jan 2026 08:03:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: OVHcloud X-Powered-By: PHP/8.1 X-Content-Security-Policy: default-src 'self'; script-src 'self' https://hcaptcha.com https://*.hcaptcha.com; frame-src 'self' https://hcaptcha.com https://*.hcaptcha.com; style-src 'self' https://hcaptcha.com https://*.hcaptcha.com; connect-src 'self' https://hcaptcha.com https://*.hcaptcha.com; unsafe-eval 'self' https://hcaptcha.com https://*.hcaptcha.com; unsafe-inline 'self' https://hcaptcha.com https://*.hcaptcha.com; Link: <https://freecab.fr/wp-json/>; rel="https://api.w.org/" Link: <https://freecab.fr/wp-json/wp/v2/pages/947>; rel="alternate"; title="JSON"; type="application/json" Link: <https://freecab.fr/>; rel=shortlink Vary: Accept-Encoding