nginx 1.14.2
tcp/443 tcp/80
MySQL is currently open without authentication.
This results in all the database data made available publicly.
Severity: medium
Fingerprint: cf350410ecceb5fd7d931c4fb5dca7703007704d0ca97f10cc587039ef248329
Databases: 39, row count: 0, size: 0 B Found table lista-bitest.activities_summary with 0 records Found table listadb-development.activities_summary with 0 records Found table listadb-development.admins with 0 records Found table listadb-development.dashboard_reports with 0 records Found table listadb-development.user_sessions with 0 records Found table listadb-development.users with 0 records Found table listadb-development.users_activities with 0 records Found table INFORMATION_SCHEMA.CHARACTER_SETS with 0 records Found table INFORMATION_SCHEMA.COLLATIONS with 0 records Found table INFORMATION_SCHEMA.COLLATION_CHARACTER_SET_APPLICABILITY with 0 records Found table INFORMATION_SCHEMA.COLUMNS with 0 records Found table INFORMATION_SCHEMA.COLUMN_PRIVILEGES with 0 records Found table INFORMATION_SCHEMA.ENGINES with 0 records Found table INFORMATION_SCHEMA.EVENTS with 0 records Found table INFORMATION_SCHEMA.FILES with 0 records Found table INFORMATION_SCHEMA.KEY_COLUMN_USAGE with 0 records Found table INFORMATION_SCHEMA.ndb_transid_mysql_connection_map with 0 records Found table INFORMATION_SCHEMA.PARAMETERS with 0 records Found table INFORMATION_SCHEMA.PARTITIONS with 0 records Found table INFORMATION_SCHEMA.PLUGINS with 0 records Found table INFORMATION_SCHEMA.PROFILING with 0 records Found table INFORMATION_SCHEMA.REFERENTIAL_CONSTRAINTS with 0 records Found table INFORMATION_SCHEMA.ROUTINES with 0 records Found table INFORMATION_SCHEMA.SCHEMATA with 0 records Found table INFORMATION_SCHEMA.SCHEMA_PRIVILEGES with 0 records Found table INFORMATION_SCHEMA.STATISTICS with 0 records Found table INFORMATION_SCHEMA.TABLES with 0 records Found table INFORMATION_SCHEMA.TABLESPACES with 0 records Found table INFORMATION_SCHEMA.TABLE_CONSTRAINTS with 0 records Found table INFORMATION_SCHEMA.TABLE_PRIVILEGES with 0 records Found table INFORMATION_SCHEMA.TRIGGERS with 0 records Found table INFORMATION_SCHEMA.USER_PRIVILEGES with 0 records Found table INFORMATION_SCHEMA.VIEWS with 0 records Found table INFORMATION_SCHEMA.GLOBAL_VARIABLES with 0 records Found table INFORMATION_SCHEMA.GLOBAL_STATUS with 0 records Found table INFORMATION_SCHEMA.SESSION_VARIABLES with 0 records Found table INFORMATION_SCHEMA.SESSION_STATUS with 0 records Found table INFORMATION_SCHEMA.PROCESSLIST with 0 records Found table mysql.proc with 0 records
The following URL (usually /.git/config
) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522ae175f45
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://github.com/mckageth000/260CP1.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "main"] remote = origin merge = refs/heads/main
Open service 137.184.35.242:3307
2024-11-02 01:52
MySQL detected
Open service 137.184.35.242:3307
2024-10-31 23:35
MySQL detected
Open service 137.184.35.242:3307
2024-10-29 23:59
MySQL detected
Open service 137.184.35.242:3307
2024-10-21 21:33
MySQL detected
Open service 137.184.35.242:3307
2024-10-19 21:39
MySQL detected
Open service 137.184.35.242:3307
2024-10-17 21:43
MySQL detected
Open service 137.184.35.242:80 · api.development.lista.upgrade.fundak.io
2024-10-16 21:23
HTTP/1.1 301 Moved Permanently Server: nginx/1.14.2 Date: Wed, 16 Oct 2024 21:23:04 GMT Content-Type: text/html Content-Length: 185 Connection: close Location: https://api.development.lista.upgrade.fundak.io/ Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body bgcolor="white"> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx/1.14.2</center> </body> </html>
Open service 137.184.35.242:443 · api.development.lista.upgrade.fundak.io
2024-10-16 21:23
HTTP/1.1 404 Not Found Server: nginx/1.14.2 Date: Wed, 16 Oct 2024 21:23:07 GMT Content-Type: application/json; charset=utf-8 Content-Length: 72 Connection: close vary: Origin access-control-allow-origin: * {"message":"Route GET:/ not found","error":"Not Found","statusCode":404}
Open service 137.184.35.242:3307
2024-10-15 22:02
MySQL detected
Open service 137.184.35.242:3307
2024-10-01 22:34
MySQL detected
Open service 137.184.35.242:3307
2024-09-29 20:04
MySQL detected
Open service 137.184.35.242:3307
2024-09-27 21:20
MySQL detected