nginx 1.22.1
tcp/443 tcp/80 tcp/8443
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Additionally the GIT credentials are present and could give unauthorized access to source code repository of private projects.
Severity: critical
Fingerprint: 2580fa947178c88c8f88f4f64b143e4f192660cba91884022910647aa95114c8
[init] defaultBranch = none [fetch] recurseSubmodules = false [http "https://git.mbgft.de"] sslCAInfo = /var/www/birkenfeld_freizeit.tmp/CI_SERVER_TLS_CA_FILE [core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://gitlab-ci-token:64_oCzsCR8Mv-cRXrXrgjFA@git.mbgft.de/web/birkenfeld/freizeit.git fetch = +refs/heads/*:refs/remotes/origin/*
Severity: critical
Fingerprint: 2580fa947178c88c8f88f4f64b143e4f192660cba91884022910647ac14f5cbc
[init] defaultBranch = none [fetch] recurseSubmodules = false [http "https://git.mbgft.de"] sslCAInfo = /var/www/birkenfeld_freizeit.tmp/CI_SERVER_TLS_CA_FILE [core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://gitlab-ci-token:64_wx6sxFxLWyk393Czg-TF@git.mbgft.de/web/birkenfeld/freizeit.git fetch = +refs/heads/*:refs/remotes/origin/*
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Additionally the GIT credentials are present and could give unauthorized access to source code repository of private projects.
Severity: critical
Fingerprint: 2580fa947178c88c8f88f4f64b143e4f192660cba91884022910647aa95114c8
[init] defaultBranch = none [fetch] recurseSubmodules = false [http "https://git.mbgft.de"] sslCAInfo = /var/www/birkenfeld_freizeit.tmp/CI_SERVER_TLS_CA_FILE [core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://gitlab-ci-token:64_oCzsCR8Mv-cRXrXrgjFA@git.mbgft.de/web/birkenfeld/freizeit.git fetch = +refs/heads/*:refs/remotes/origin/*
Severity: critical
Fingerprint: 2580fa947178c88c8f88f4f64b143e4f192660cba91884022910647ac14f5cbc
[init] defaultBranch = none [fetch] recurseSubmodules = false [http "https://git.mbgft.de"] sslCAInfo = /var/www/birkenfeld_freizeit.tmp/CI_SERVER_TLS_CA_FILE [core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://gitlab-ci-token:64_wx6sxFxLWyk393Czg-TF@git.mbgft.de/web/birkenfeld/freizeit.git fetch = +refs/heads/*:refs/remotes/origin/*
Open service 2a03:4000:1a:59:986e:ceff:fe4f:18c1:80 · freizeit.mbg-birkenfeld.de
2025-12-19 20:18
HTTP/1.1 301 Moved Permanently Server: nginx/1.22.1 Date: Fri, 19 Dec 2025 20:18:34 GMT Content-Type: text/html Content-Length: 169 Connection: close Location: https://freizeit.mbg-birkenfeld.de:443/ Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx/1.22.1</center> </body> </html>
Open service 185.162.248.67:80 · freizeit.mbg-birkenfeld.de
2025-12-19 20:18
HTTP/1.1 301 Moved Permanently Server: nginx/1.22.1 Date: Fri, 19 Dec 2025 20:18:34 GMT Content-Type: text/html Content-Length: 169 Connection: close Location: https://freizeit.mbg-birkenfeld.de:443/ Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx/1.22.1</center> </body> </html>
Open service 185.162.248.67:8443 · www.freizeit.mbg-birkenfeld.de
2025-12-19 20:18
HTTP/1.1 302 Server: nginx/1.22.1 Date: Fri, 19 Dec 2025 20:18:33 GMT Content-Length: 0 Connection: close Location: /manage
Open service 185.162.248.67:8443 · freizeit.mbg-birkenfeld.de
2025-12-19 20:18
HTTP/1.1 302 Server: nginx/1.22.1 Date: Fri, 19 Dec 2025 20:18:33 GMT Content-Length: 0 Connection: close Location: /manage
Open service 185.162.248.67:443 · freizeit.mbg-birkenfeld.de
2025-12-19 20:18
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Fri, 19 Dec 2025 20:18:32 GMT
Content-Type: text/html
Content-Length: 12597
Connection: close
Last-Modified: Thu, 10 Apr 2025 09:44:55 GMT
ETag: "67f79317-3135"
Accept-Ranges: bytes
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Page title: Kinderfreizeit in Birkenfeld
<!DOCTYPE HTML>
<html>
<head>
<title>Kinderfreizeit in Birkenfeld</title>
<link rel="icon" type="image/x-icon" href="img/favicon.png">
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<meta http-equiv="refresh" content="0; URL=https://anmeldung.mbg-birkenfeld.de/anmeldung/67f43422be6e003c839e97b6">
<link href="css/style.css" rel="stylesheet">
<script src="//ajax.googleapis.com/ajax/libs/jquery/2.0.3/jquery.min.js"></script>
<!--JS für Nav + Footer-->
<script src="./js/includeHTML.js"></script>
<!--JS für Formular-->
<script src="./form.js"></script>
</head>
<body class="bg-white max-w-6xl mx-auto">
<header>
<nav class="border-gray-200 mx-5 mt-4">
<div class="max-w-screen-xl flex flex-wrap items-center justify-between mx-auto pb-4">
<a href="https://mbg-birkenfeld.de" class="flex items-center">
<span class="text-gray-900 italic font-sans font-thin text-sm sm:block hidden">Mennoniten-Brüdergemeinde Birkenfeld</span>
<span class="text-gray-900 italic font-sans font-thin text-sm block sm:hidden">MBG Birkenfeld</span>
</a>
<ul class="font-medium lg:space-x-8">
<li>
<a href="https://mbg-birkenfeld.de/kinderfreizeit" class="text-gray-900 hover:bg-gray-100 hover:bg-transparent border-0 hover:text-sky-900">zurück</a>
</li>
</ul>
</div>
<hr>
</nav>
</header>
<main>
<!-- Anmeldeformular-->
<section id="anmeldung_kf" class="mx-5 pb-10">
<div class="flex py-5 items-center opacity-100">
<div class="flex-grow border-t border-stone-300"></div>
<h2 class="text-xl lg:text-2xl flex-shrink m-0 mx-4 text-stone-400">Anmeldung Kinderfreizeit</h2>
<div class="flex-grow border-t border-stone-300"></div>
</div>
<div>
<form method="POST" action="process.php" id="zeltfreizeit" accept-charset="utf-8">
<!--p class="pt-6 px-6 mr-6 ">Die durch den Coronavirus bedingten Hygiene- und Verhaltensregeln der Kinderfreizeit werden vor Beginn der Freizeit an die angegebene Email-Adresse des/der Erziehungsberechtigten verschickt.</p-->
<p class="py-6 px-2 text-red-500 text-sm">Mit (*) markierte Felder sind Pflichtfelder und müssen vor dem Versenden ausgefüllt werden.</p>
<h2 class="text-2xl">Kind</h2>
<div id="firstname-group" class="flex flex-col md:flex-row mb-2 form-group">
<label for="firstname" class="md:w-1/3 p-2">Vorname<span class="error"> *</span></label>
<input type="text" id="firstname" name="firstname" required class="appearance-none block w-full border rounded p-2" placeholder="Vorname">
<!-- errors will go here -->
</div>
<div id="secondname-group" class="flex flex-col md:flex-row mb-2 form-group">
<label for="secondname" class="md:w-1/3 p-2">Nachname<span class="error"> *</span></label>
<input type="text" id="secondname" name="secondname" required class="appearance-none block w-full border rounded p-2" placeholder="Nachname">
<!-- errors will go here -->
</div>
<div id="birthday-group" class="flex flex-col md:flex-row mb-2 form-group">
<label for="birthday" class="md:w-1/3 p-2">Geburtstag<span class="error"> *</span></label>
<input type="date" id="birthday" name="birthday" required class="appearance-none block w-full border rounded p-2">
<!-- errors will go here -->
</div>
<div id="comment-group" class="flex flex-col md:flex-row mb-2 form-group">
<lab
Open service 2a03:4000:1a:59:986e:ceff:fe4f:18c1:8443 · freizeit.mbg-birkenfeld.de
2025-12-19 20:18
HTTP/1.1 302 Server: nginx/1.22.1 Date: Fri, 19 Dec 2025 20:18:32 GMT Content-Length: 0 Connection: close Location: /manage
Open service 185.162.248.67:80 · www.freizeit.mbg-birkenfeld.de
2025-12-19 20:18
HTTP/1.1 301 Moved Permanently Server: nginx/1.22.1 Date: Fri, 19 Dec 2025 20:18:32 GMT Content-Type: text/html Content-Length: 169 Connection: close Location: https://freizeit.mbg-birkenfeld.de:443/ Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx/1.22.1</center> </body> </html>
Open service 2a03:4000:1a:59:986e:ceff:fe4f:18c1:443 · www.freizeit.mbg-birkenfeld.de
2025-12-19 20:18
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Fri, 19 Dec 2025 20:18:32 GMT
Content-Type: text/html
Content-Length: 12597
Connection: close
Last-Modified: Thu, 10 Apr 2025 09:44:55 GMT
ETag: "67f79317-3135"
Accept-Ranges: bytes
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Page title: Kinderfreizeit in Birkenfeld
<!DOCTYPE HTML>
<html>
<head>
<title>Kinderfreizeit in Birkenfeld</title>
<link rel="icon" type="image/x-icon" href="img/favicon.png">
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<meta http-equiv="refresh" content="0; URL=https://anmeldung.mbg-birkenfeld.de/anmeldung/67f43422be6e003c839e97b6">
<link href="css/style.css" rel="stylesheet">
<script src="//ajax.googleapis.com/ajax/libs/jquery/2.0.3/jquery.min.js"></script>
<!--JS für Nav + Footer-->
<script src="./js/includeHTML.js"></script>
<!--JS für Formular-->
<script src="./form.js"></script>
</head>
<body class="bg-white max-w-6xl mx-auto">
<header>
<nav class="border-gray-200 mx-5 mt-4">
<div class="max-w-screen-xl flex flex-wrap items-center justify-between mx-auto pb-4">
<a href="https://mbg-birkenfeld.de" class="flex items-center">
<span class="text-gray-900 italic font-sans font-thin text-sm sm:block hidden">Mennoniten-Brüdergemeinde Birkenfeld</span>
<span class="text-gray-900 italic font-sans font-thin text-sm block sm:hidden">MBG Birkenfeld</span>
</a>
<ul class="font-medium lg:space-x-8">
<li>
<a href="https://mbg-birkenfeld.de/kinderfreizeit" class="text-gray-900 hover:bg-gray-100 hover:bg-transparent border-0 hover:text-sky-900">zurück</a>
</li>
</ul>
</div>
<hr>
</nav>
</header>
<main>
<!-- Anmeldeformular-->
<section id="anmeldung_kf" class="mx-5 pb-10">
<div class="flex py-5 items-center opacity-100">
<div class="flex-grow border-t border-stone-300"></div>
<h2 class="text-xl lg:text-2xl flex-shrink m-0 mx-4 text-stone-400">Anmeldung Kinderfreizeit</h2>
<div class="flex-grow border-t border-stone-300"></div>
</div>
<div>
<form method="POST" action="process.php" id="zeltfreizeit" accept-charset="utf-8">
<!--p class="pt-6 px-6 mr-6 ">Die durch den Coronavirus bedingten Hygiene- und Verhaltensregeln der Kinderfreizeit werden vor Beginn der Freizeit an die angegebene Email-Adresse des/der Erziehungsberechtigten verschickt.</p-->
<p class="py-6 px-2 text-red-500 text-sm">Mit (*) markierte Felder sind Pflichtfelder und müssen vor dem Versenden ausgefüllt werden.</p>
<h2 class="text-2xl">Kind</h2>
<div id="firstname-group" class="flex flex-col md:flex-row mb-2 form-group">
<label for="firstname" class="md:w-1/3 p-2">Vorname<span class="error"> *</span></label>
<input type="text" id="firstname" name="firstname" required class="appearance-none block w-full border rounded p-2" placeholder="Vorname">
<!-- errors will go here -->
</div>
<div id="secondname-group" class="flex flex-col md:flex-row mb-2 form-group">
<label for="secondname" class="md:w-1/3 p-2">Nachname<span class="error"> *</span></label>
<input type="text" id="secondname" name="secondname" required class="appearance-none block w-full border rounded p-2" placeholder="Nachname">
<!-- errors will go here -->
</div>
<div id="birthday-group" class="flex flex-col md:flex-row mb-2 form-group">
<label for="birthday" class="md:w-1/3 p-2">Geburtstag<span class="error"> *</span></label>
<input type="date" id="birthday" name="birthday" required class="appearance-none block w-full border rounded p-2">
<!-- errors will go here -->
</div>
<div id="comment-group" class="flex flex-col md:flex-row mb-2 form-group">
<lab
Open service 2a03:4000:1a:59:986e:ceff:fe4f:18c1:443 · freizeit.mbg-birkenfeld.de
2025-12-19 20:18
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Fri, 19 Dec 2025 20:18:32 GMT
Content-Type: text/html
Content-Length: 12597
Connection: close
Last-Modified: Thu, 10 Apr 2025 09:44:55 GMT
ETag: "67f79317-3135"
Accept-Ranges: bytes
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Page title: Kinderfreizeit in Birkenfeld
<!DOCTYPE HTML>
<html>
<head>
<title>Kinderfreizeit in Birkenfeld</title>
<link rel="icon" type="image/x-icon" href="img/favicon.png">
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<meta http-equiv="refresh" content="0; URL=https://anmeldung.mbg-birkenfeld.de/anmeldung/67f43422be6e003c839e97b6">
<link href="css/style.css" rel="stylesheet">
<script src="//ajax.googleapis.com/ajax/libs/jquery/2.0.3/jquery.min.js"></script>
<!--JS für Nav + Footer-->
<script src="./js/includeHTML.js"></script>
<!--JS für Formular-->
<script src="./form.js"></script>
</head>
<body class="bg-white max-w-6xl mx-auto">
<header>
<nav class="border-gray-200 mx-5 mt-4">
<div class="max-w-screen-xl flex flex-wrap items-center justify-between mx-auto pb-4">
<a href="https://mbg-birkenfeld.de" class="flex items-center">
<span class="text-gray-900 italic font-sans font-thin text-sm sm:block hidden">Mennoniten-Brüdergemeinde Birkenfeld</span>
<span class="text-gray-900 italic font-sans font-thin text-sm block sm:hidden">MBG Birkenfeld</span>
</a>
<ul class="font-medium lg:space-x-8">
<li>
<a href="https://mbg-birkenfeld.de/kinderfreizeit" class="text-gray-900 hover:bg-gray-100 hover:bg-transparent border-0 hover:text-sky-900">zurück</a>
</li>
</ul>
</div>
<hr>
</nav>
</header>
<main>
<!-- Anmeldeformular-->
<section id="anmeldung_kf" class="mx-5 pb-10">
<div class="flex py-5 items-center opacity-100">
<div class="flex-grow border-t border-stone-300"></div>
<h2 class="text-xl lg:text-2xl flex-shrink m-0 mx-4 text-stone-400">Anmeldung Kinderfreizeit</h2>
<div class="flex-grow border-t border-stone-300"></div>
</div>
<div>
<form method="POST" action="process.php" id="zeltfreizeit" accept-charset="utf-8">
<!--p class="pt-6 px-6 mr-6 ">Die durch den Coronavirus bedingten Hygiene- und Verhaltensregeln der Kinderfreizeit werden vor Beginn der Freizeit an die angegebene Email-Adresse des/der Erziehungsberechtigten verschickt.</p-->
<p class="py-6 px-2 text-red-500 text-sm">Mit (*) markierte Felder sind Pflichtfelder und müssen vor dem Versenden ausgefüllt werden.</p>
<h2 class="text-2xl">Kind</h2>
<div id="firstname-group" class="flex flex-col md:flex-row mb-2 form-group">
<label for="firstname" class="md:w-1/3 p-2">Vorname<span class="error"> *</span></label>
<input type="text" id="firstname" name="firstname" required class="appearance-none block w-full border rounded p-2" placeholder="Vorname">
<!-- errors will go here -->
</div>
<div id="secondname-group" class="flex flex-col md:flex-row mb-2 form-group">
<label for="secondname" class="md:w-1/3 p-2">Nachname<span class="error"> *</span></label>
<input type="text" id="secondname" name="secondname" required class="appearance-none block w-full border rounded p-2" placeholder="Nachname">
<!-- errors will go here -->
</div>
<div id="birthday-group" class="flex flex-col md:flex-row mb-2 form-group">
<label for="birthday" class="md:w-1/3 p-2">Geburtstag<span class="error"> *</span></label>
<input type="date" id="birthday" name="birthday" required class="appearance-none block w-full border rounded p-2">
<!-- errors will go here -->
</div>
<div id="comment-group" class="flex flex-col md:flex-row mb-2 form-group">
<lab
Open service 2a03:4000:1a:59:986e:ceff:fe4f:18c1:8443 · www.freizeit.mbg-birkenfeld.de
2025-12-19 20:18
HTTP/1.1 302 Server: nginx/1.22.1 Date: Fri, 19 Dec 2025 20:18:32 GMT Content-Length: 0 Connection: close Location: /manage
Open service 185.162.248.67:443 · www.freizeit.mbg-birkenfeld.de
2025-12-19 20:18
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Fri, 19 Dec 2025 20:18:32 GMT
Content-Type: text/html
Content-Length: 12597
Connection: close
Last-Modified: Thu, 10 Apr 2025 09:44:55 GMT
ETag: "67f79317-3135"
Accept-Ranges: bytes
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Page title: Kinderfreizeit in Birkenfeld
<!DOCTYPE HTML>
<html>
<head>
<title>Kinderfreizeit in Birkenfeld</title>
<link rel="icon" type="image/x-icon" href="img/favicon.png">
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<meta http-equiv="refresh" content="0; URL=https://anmeldung.mbg-birkenfeld.de/anmeldung/67f43422be6e003c839e97b6">
<link href="css/style.css" rel="stylesheet">
<script src="//ajax.googleapis.com/ajax/libs/jquery/2.0.3/jquery.min.js"></script>
<!--JS für Nav + Footer-->
<script src="./js/includeHTML.js"></script>
<!--JS für Formular-->
<script src="./form.js"></script>
</head>
<body class="bg-white max-w-6xl mx-auto">
<header>
<nav class="border-gray-200 mx-5 mt-4">
<div class="max-w-screen-xl flex flex-wrap items-center justify-between mx-auto pb-4">
<a href="https://mbg-birkenfeld.de" class="flex items-center">
<span class="text-gray-900 italic font-sans font-thin text-sm sm:block hidden">Mennoniten-Brüdergemeinde Birkenfeld</span>
<span class="text-gray-900 italic font-sans font-thin text-sm block sm:hidden">MBG Birkenfeld</span>
</a>
<ul class="font-medium lg:space-x-8">
<li>
<a href="https://mbg-birkenfeld.de/kinderfreizeit" class="text-gray-900 hover:bg-gray-100 hover:bg-transparent border-0 hover:text-sky-900">zurück</a>
</li>
</ul>
</div>
<hr>
</nav>
</header>
<main>
<!-- Anmeldeformular-->
<section id="anmeldung_kf" class="mx-5 pb-10">
<div class="flex py-5 items-center opacity-100">
<div class="flex-grow border-t border-stone-300"></div>
<h2 class="text-xl lg:text-2xl flex-shrink m-0 mx-4 text-stone-400">Anmeldung Kinderfreizeit</h2>
<div class="flex-grow border-t border-stone-300"></div>
</div>
<div>
<form method="POST" action="process.php" id="zeltfreizeit" accept-charset="utf-8">
<!--p class="pt-6 px-6 mr-6 ">Die durch den Coronavirus bedingten Hygiene- und Verhaltensregeln der Kinderfreizeit werden vor Beginn der Freizeit an die angegebene Email-Adresse des/der Erziehungsberechtigten verschickt.</p-->
<p class="py-6 px-2 text-red-500 text-sm">Mit (*) markierte Felder sind Pflichtfelder und müssen vor dem Versenden ausgefüllt werden.</p>
<h2 class="text-2xl">Kind</h2>
<div id="firstname-group" class="flex flex-col md:flex-row mb-2 form-group">
<label for="firstname" class="md:w-1/3 p-2">Vorname<span class="error"> *</span></label>
<input type="text" id="firstname" name="firstname" required class="appearance-none block w-full border rounded p-2" placeholder="Vorname">
<!-- errors will go here -->
</div>
<div id="secondname-group" class="flex flex-col md:flex-row mb-2 form-group">
<label for="secondname" class="md:w-1/3 p-2">Nachname<span class="error"> *</span></label>
<input type="text" id="secondname" name="secondname" required class="appearance-none block w-full border rounded p-2" placeholder="Nachname">
<!-- errors will go here -->
</div>
<div id="birthday-group" class="flex flex-col md:flex-row mb-2 form-group">
<label for="birthday" class="md:w-1/3 p-2">Geburtstag<span class="error"> *</span></label>
<input type="date" id="birthday" name="birthday" required class="appearance-none block w-full border rounded p-2">
<!-- errors will go here -->
</div>
<div id="comment-group" class="flex flex-col md:flex-row mb-2 form-group">
<lab
Open service 2a03:4000:1a:59:986e:ceff:fe4f:18c1:80 · www.freizeit.mbg-birkenfeld.de
2025-12-19 20:18
HTTP/1.1 301 Moved Permanently Server: nginx/1.22.1 Date: Fri, 19 Dec 2025 20:18:32 GMT Content-Type: text/html Content-Length: 169 Connection: close Location: https://freizeit.mbg-birkenfeld.de:443/ Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx/1.22.1</center> </body> </html>