nginx 1.22.1
tcp/443
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Additionally the GIT credentials are present and could give unauthorized access to source code repository of private projects.
Severity: critical
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652214b7a655
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://gitlab-ci-token:glcbt-64_AsKs1xvRuw-r3r61MfoE@gitlab.droidnet.de/droid.ac15/appcreator-cms.git fetch = +refs/heads/*:refs/remotes/origin/* [lfs] repositoryformatversion = 0
Severity: critical
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65223d8dbf18
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://gitlab-ci-token:glcbt-64_zmRXrAAE3hrsQQutyy-4@gitlab.droidnet.de/droid.ac15/appcreator-cms.git fetch = +refs/heads/*:refs/remotes/origin/* [lfs] repositoryformatversion = 0
Open service 49.12.43.166:443 · haus-garten-freizeit.appcms-lm.droidhosting.de
2026-01-10 21:03
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Sat, 10 Jan 2026 21:03:56 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=c9ef8773991803d1ac290d62c0fed150; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · haus-garten-freizeit.appcms-lm.droidhosting.de
2026-01-09 21:10
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Fri, 09 Jan 2026 21:10:52 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=de24b7bfc3341dd5ad7798d7225bc50e; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · haus-garten-freizeit.appcms-lm.droidhosting.de
2026-01-08 21:15
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Thu, 08 Jan 2026 21:15:24 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=53241d0f0667b4e2c5117a2f82406c1e; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · haus-garten-freizeit.appcms-lm.droidhosting.de
2026-01-07 21:08
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Wed, 07 Jan 2026 21:08:38 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=5f8714707c7b59431d7eb31560d35ccc; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · haus-garten-freizeit.appcms-lm.droidhosting.de
2026-01-06 21:04
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Tue, 06 Jan 2026 21:04:06 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=8887d78770856a6f903436232d6f3674; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · haus-garten-freizeit.appcms-lm.droidhosting.de
2026-01-03 21:11
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Sat, 03 Jan 2026 21:11:46 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=a77f051cef59b9a4b20db10e34379668; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · haus-garten-freizeit.appcms-lm.droidhosting.de
2026-01-02 21:21
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Fri, 02 Jan 2026 21:21:39 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=82a813dea52f00efe9967409bf133ff9; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · haus-garten-freizeit.appcms-lm.droidhosting.de
2026-01-01 21:23
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Thu, 01 Jan 2026 21:23:35 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=902e61aada3415e9f6e9a6eb9bf6673e; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · haus-garten-freizeit.appcms-lm.droidhosting.de
2025-12-31 21:28
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Wed, 31 Dec 2025 21:28:31 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=e34d8f3f1d366d2a437b9d7aeaa38a5d; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · haus-garten-freizeit.appcms-lm.droidhosting.de
2025-12-30 21:26
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Tue, 30 Dec 2025 21:26:31 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=303a21d7904241728574ecebf9f87272; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · haus-garten-freizeit.appcms-lm.droidhosting.de
2025-12-23 02:41
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Tue, 23 Dec 2025 02:41:28 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=16e12faa540753867b7fd815c2725912; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · haus-garten-freizeit.appcms-lm.droidhosting.de
2025-12-20 20:12
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Sat, 20 Dec 2025 20:12:35 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=1d8d6e089e0230dc9c9e26265e91c3f4; path=/ Content-Length: 0 Connection: close
Open service 49.12.43.166:443 · haus-garten-freizeit.appcms-lm.droidhosting.de
2025-12-19 00:47
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Fri, 19 Dec 2025 00:47:05 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=ec3b9c9ec905724a90e675b9b0757f37; path=/ Connection: close Transfer-Encoding: chunked