Host 18.177.83.124
Japan
-
Symfony developement panel enabled
The application has Symfony profiling enabled.
It enables an attacker to access the following sensitive content :
- System configuration
- Request log, including POST request with credentials and/or api keys
First seen 2023-10-24 02:01
Last seen 2023-10-26 14:11
Open for 2 days-
Fingerprint: 407cf4363b0e62fafca67e072423883d2423883d2423883d2423883d2423883d
Symfony profiler enabled: https://18.177.83.124/_profiler/empty/search/results
Found on 2023-10-26 14:11
-
Git configuration and history exposed
The following URL (usually
/.git/config) is publicly accessible and is leaking source code and repository configuration.First seen 2022-06-06 17:48
Last seen 2022-07-16 12:15
Open for 39 days-
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522079c1e36[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [submodule "application/third_party/facebook-php-sdk"] url = https://github.com/facebook/facebook-php-sdk.git [remote "origin"] url = ec2-user@dev.baby365.jp:/var/www/git/baby365-Server.git fetch = +refs/heads/*:refs/remotes/origin/*
Found on 2022-06-06 17:48329 Bytes
-
-
Git configuration and history exposed
The following URL (usually
/.git/config) is publicly accessible and is leaking source code and repository configuration.First seen 2022-06-07 04:02
Last seen 2022-06-10 06:07
Open for 3 days-
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522079c1e36[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [submodule "application/third_party/facebook-php-sdk"] url = https://github.com/facebook/facebook-php-sdk.git [remote "origin"] url = ec2-user@dev.baby365.jp:/var/www/git/baby365-Server.git fetch = +refs/heads/*:refs/remotes/origin/*
Found on 2022-06-07 04:02329 Bytes
-