nginx 1.22.1
tcp/443
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Additionally the GIT credentials are present and could give unauthorized access to source code repository of private projects.
Severity: critical
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652214b7a655
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://gitlab-ci-token:glcbt-64_AsKs1xvRuw-r3r61MfoE@gitlab.droidnet.de/droid.ac15/appcreator-cms.git fetch = +refs/heads/*:refs/remotes/origin/* [lfs] repositoryformatversion = 0
Severity: critical
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65223d8dbf18
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://gitlab-ci-token:glcbt-64_zmRXrAAE3hrsQQutyy-4@gitlab.droidnet.de/droid.ac15/appcreator-cms.git fetch = +refs/heads/*:refs/remotes/origin/* [lfs] repositoryformatversion = 0
Open service 49.12.43.166:443 · lm-test-beta.appcms-lm.droidhosting.de
2026-01-10 21:21
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Sat, 10 Jan 2026 21:21:06 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=b21850f25268ac4925dfca508ef56043; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · lm-test-beta.appcms-lm.droidhosting.de
2026-01-09 21:46
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Fri, 09 Jan 2026 21:46:40 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=5bfac67be88c4cb870374e4c9a85ebef; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · lm-test-beta.appcms-lm.droidhosting.de
2026-01-08 21:40
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Thu, 08 Jan 2026 21:40:11 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=02a6f31b1563498f2da65bb2925e2485; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · lm-test-beta.appcms-lm.droidhosting.de
2026-01-07 21:21
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Wed, 07 Jan 2026 21:21:28 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=4b87e3598686b50827ce5bfa4f899084; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · lm-test-beta.appcms-lm.droidhosting.de
2026-01-06 21:15
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Tue, 06 Jan 2026 21:15:52 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=d1053e515c91138f1f7a6341c286962f; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · lm-test-beta.appcms-lm.droidhosting.de
2026-01-03 21:24
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Sat, 03 Jan 2026 21:24:42 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=d56f87e6c81f2ef008008a44f137be7d; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · lm-test-beta.appcms-lm.droidhosting.de
2026-01-02 21:09
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Fri, 02 Jan 2026 21:09:13 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=9c63f9ee076e70876121c949b4b4bdb7; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · lm-test-beta.appcms-lm.droidhosting.de
2026-01-01 21:41
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Thu, 01 Jan 2026 21:41:09 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=ee31dc6f710f817117a07233a24b8479; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · lm-test-beta.appcms-lm.droidhosting.de
2025-12-31 21:45
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Wed, 31 Dec 2025 21:45:05 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=c6e4ddb6182e291ebd8a3647717d2eb6; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · lm-test-beta.appcms-lm.droidhosting.de
2025-12-30 21:34
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Tue, 30 Dec 2025 21:35:00 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=6fc61efa2a0c863e0b4299cf452f3b36; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · lm-test-beta.appcms-lm.droidhosting.de
2025-12-22 22:09
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Mon, 22 Dec 2025 22:09:46 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=0029df9f8aed46c28a9a36f973df7d51; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · lm-test-beta.appcms-lm.droidhosting.de
2025-12-21 03:59
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Sun, 21 Dec 2025 03:59:04 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=3b7eedc0985680acc992bb25e6e283b0; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · lm-test-beta.appcms-lm.droidhosting.de
2025-12-19 02:42
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Fri, 19 Dec 2025 02:42:24 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=5bcbf45ccb55b2ad55f3f34eb12d65e8; path=/ Connection: close Transfer-Encoding: chunked