LeakIX - Host 91.216.248.23

Host 91.216.248.23

Germany

Hetzner Online GmbH

Debian

Software information

openresty

tcp/443 tcp/80

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 89.58.14.31
Domain: weissfewo.de
Port: 443
URL: https://weissfewo.de

First seen 2022-09-19 00:27
Last seen 2024-11-22 14:48
Open for 795 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09cc169dbbec169dbbe251a1ae79d87fdea16056e9c90316be2
```
Found 15 files trough .DS_Store spidering:

/Bilder
/Bilder/Fewo
/Bilder/Fewo/allgemein
/Bilder/Fewo/bad
/Bilder/Fewo/schlafzimmer
/Bilder/Fewo/wohnzimmer
/Bilder/Tagesausfluege
/FeWo
/fonts
/Gastgeber
/Kontakt
/Oberharmersbach
/Script
/Style
/Style/images
```
  Found on 2024-11-22 14:48
- Severity: low
  Fingerprint: 5f32cf5d6962f09c4239b3d84239b3d82f803df118a35e252f5db48e9127246b
```
Found 8 files trough .DS_Store spidering:

/Bilder
/FeWo
/fonts
/Gastgeber
/Kontakt
/Oberharmersbach
/Script
/Style
```
  Found on 2024-10-10 07:01
- Severity: low
  Fingerprint: 5f32cf5d6962f09c39aac35b39aac35ba26501a80cef94d5c297078b04d39060
```
Found 14 files trough .DS_Store spidering:

/Bilder
/Bilder/Fewo
/Bilder/Fewo/allgemein
/Bilder/Fewo/bad
/Bilder/Fewo/schlafzimmer
/Bilder/Fewo/wohnzimmer
/Bilder/Tagesausfluege
/FeWo
/fonts
/Gastgeber
/Kontakt
/Oberharmersbach
/Script
/Style
```
  Found on 2024-09-10 07:47
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 91.216.248.23
Domain: www.moodle.medienspatzen.de
Port: 443
URL: https://www.moodle.medienspatzen.de

First seen 2022-07-20 15:23
Last seen 2024-03-15 01:13
Open for 603 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522d3d10826
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git://git.moodle.org/moodle.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[branch "MOODLE_35_STABLE"]
	remote = origin
	merge = refs/heads/MOODLE_35_STABLE
```
  Found on 2024-03-15 01:13
  
  338 Bytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 91.216.248.23
Domain: olaf-landa.de
Port: 443
URL: https://olaf-landa.de

First seen 2022-12-17 21:18
Last seen 2024-03-12 16:41
Open for 450 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc51fa561c93df1df8ed6e4be30a99a90b
```
Found 4 files trough .DS_Store spidering:

/css
/favicons
/fonts
/js
```
  Found on 2024-03-12 16:41
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 91.216.248.23
Domain: t-g-t.de
Port: 443
URL: https://t-g-t.de

First seen 2022-09-17 09:27
Last seen 2024-03-10 10:19
Open for 540 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9da134e5eba134e5eba134e5eba134e5eb
```
Found 1 files trough .DS_Store spidering:

/readme.html
```
  Found on 2024-03-10 10:19
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 91.216.248.23
Domain: www.katapultu-abo.de
Port: 443
URL: https://www.katapultu-abo.de

First seen 2024-03-09 08:41
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0fd02d66877591c360f966c9a6f966c9a6
```
Found 3 files trough .DS_Store spidering:

/css
/images
/js
```
  Found on 2024-03-09 08:41
Create report
Moodle is vulnerable
The following Moodle application is publicly accessible and looks out-dated :

It is highly recommended to update to a safe version as soon as possible since multiple CVEs allow remote attackers to craft XSS attacks leading to code execution on the server.

If the application was already patched, reloading the web server to clear the PHP opcache will fix issue.

Reference:

https://www.cvedetails.com/cve/CVE-2023-30943
IP: 91.216.248.23
Domain: inccas-moodle.de
Port: 443
URL: https://inccas-moodle.de

First seen 2023-09-07 07:13
Last seen 2024-01-07 07:43
Open for 122 days
- Severity: high
  Fingerprint: 0b591a20d83e9bbda3370ce58008084480080844800808448008084480080844
```
Found vulnerable Moodle application:
Affected by CVE-2023-30943
```
  Found on 2024-01-07 07:43
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 91.216.248.23
Domain: deutschlandticket-studenten.de
Port: 443
URL: https://deutschlandticket-studenten.de

First seen 2023-06-08 12:14
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf176422b63f4828ac3cca08ac3cca08ac3cca0
```
Found 2 files trough .DS_Store spidering:

/css
/js
```
  Found on 2023-06-08 12:14
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 91.216.248.23
Domain: talking-thesis.de
Port: 443
URL: https://talking-thesis.de

First seen 2023-05-06 09:17
Last seen 2023-05-06 09:17
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d516b4a56516b4a56516b4a56516b4a56
```
Found 1 files trough .DS_Store spidering:

/fonts
```
  Found on 2023-05-06 09:17
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 91.216.248.23
Domain: www.apple-bootstrap.patrickreinbold.com
Port: 443
URL: https://www.apple-bootstrap.patrickreinbold.com

First seen 2023-04-28 12:22
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbbbdf147bc
```
[core]
	repositoryformatversion = 0
	filemode = false
	bare = false
	logallrefupdates = true
	symlinks = false
	ignorecase = true
[remote "origin"]
	url = https://github.com/pure-bold/apple-bootstrap.git
	fetch = +refs/heads/*:refs/remotes/origin/*
	pushurl = https://github.com/pure-bold/apple-bootstrap.git
```
  Found on 2023-04-28 12:22
  
  309 Bytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 91.216.248.23
Domain: kr-eative.de
Port: 443
URL: https://kr-eative.de

First seen 2022-12-23 10:09
Last seen 2023-04-22 09:19
Open for 119 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d516b4a56516b4a56516b4a56516b4a56
```
Found 1 files trough .DS_Store spidering:

/fonts
```
  Found on 2022-12-23 10:09
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 91.216.248.22
Domain: www.sale.cheercity-shop.de
Port: 443
URL: https://www.sale.cheercity-shop.de

First seen 2022-10-21 09:17
Last seen 2023-04-19 12:21
Open for 180 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c8e4417c08e4417c0400545c55fa2ea0feb19d76f8cb58900

Found 62 files trough .DS_Store spidering:

/api
/aws
/aws/FBAInventoryServiceMWS
/aws/MarketplaceWebService
/aws/MarketplaceWebService/Samples
/blog
/burgel
/captcha
/CC_Katalog_2015
/css
/css/menu
/css/mobil
/csv
/de
/de/account
/de/account/_notes
/de/Adventskalender
/de/Aktionen
/de/cart
/de/customer
/de/email_Texte
/de/fanshop
/de/func
/de/individual_print
/de/kundenbefragung
/de/login
/de/navigation
/de/rating
/de/retoure
/de/Sale
/de/service
/de/stream
/de/styleboards
/de/Teamwear
/de/Uniformen
/DHL
/downloads
/easyrec
/ebay
/ecc2019
/error
/FileMaker
/fonts
/func
/igooMap.igoomap
/images
/img
/instagram
/js
/libs
/locale
/menu
/phpmailer
/phpMyAdmin
/player
/rechnungen
/scripts
/Service
/sitemap
/spirit_online
/StreamClassControl
/videos

Found on 2023-04-19 12:21

Severity: medium
Fingerprint: 5f32cf5d6962f09cb1c4b1dfb1c4b1df380713261e24aecc06315cf21ab73e74

Found 61 files trough .DS_Store spidering:

/api
/aws
/aws/FBAInventoryServiceMWS
/aws/MarketplaceWebService
/aws/MarketplaceWebService/Samples
/blog
/burgel
/captcha
/CC_Katalog_2015
/css
/css/menu
/css/mobil
/csv
/de
/de/account
/de/Adventskalender
/de/Aktionen
/de/cart
/de/customer
/de/email_Texte
/de/fanshop
/de/func
/de/individual_print
/de/kundenbefragung
/de/login
/de/navigation
/de/rating
/de/retoure
/de/Sale
/de/service
/de/stream
/de/styleboards
/de/Teamwear
/de/Uniformen
/DHL
/downloads
/easyrec
/ebay
/ecc2019
/error
/FileMaker
/fonts
/func
/igooMap.igoomap
/images
/img
/instagram
/js
/libs
/locale
/menu
/phpmailer
/phpMyAdmin
/player
/rechnungen
/scripts
/Service
/sitemap
/spirit_online
/StreamClassControl
/videos

Found on 2023-02-18 10:17

Severity: medium
Fingerprint: 5f32cf5d6962f09c09f5afde09f5afde6c1620077bd5a21de61d8b15f8a0d5cb

Found 64 files trough .DS_Store spidering:

/api
/aws
/aws/FBAInventoryServiceMWS
/aws/MarketplaceWebService
/aws/MarketplaceWebService/Samples
/blog
/burgel
/captcha
/CC_Katalog_2015
/css
/css/menu
/css/mobil
/csv
/de
/de/account
/de/account/_notes
/de/Adventskalender
/de/Aktionen
/de/Aktionen/Bilder_Adventskalender
/de/Aktionen/Bilder_Adventskalender/_notes
/de/cart
/de/customer
/de/email_Texte
/de/fanshop
/de/func
/de/individual_print
/de/kundenbefragung
/de/login
/de/navigation
/de/rating
/de/retoure
/de/Sale
/de/service
/de/stream
/de/styleboards
/de/Teamwear
/de/Uniformen
/DHL
/downloads
/easyrec
/ebay
/ecc2019
/error
/FileMaker
/fonts
/func
/igooMap.igoomap
/images
/img
/instagram
/js
/libs
/locale
/menu
/phpmailer
/phpMyAdmin
/player
/rechnungen
/scripts
/Service
/sitemap
/spirit_online
/StreamClassControl
/videos

Found on 2023-02-18 10:17

Severity: medium
Fingerprint: 5f32cf5d6962f09c2a0815492a081549621df04c3b56e856fe5e852c9be253da

Found 70 files trough .DS_Store spidering:

/api
/aws
/aws/FBAInventoryServiceMWS
/aws/MarketplaceWebService
/aws/MarketplaceWebService/Samples
/blog
/burgel
/captcha
/CC_Katalog_2015
/css
/css/menu
/css/mobil
/csv
/de
/de/account
/de/account/_notes
/de/Adventskalender
/de/Aktionen
/de/Aktionen/Bilder_Adventskalender
/de/Aktionen/Bilder_Adventskalender/_notes
/de/cart
/de/customer
/de/email_Texte
/de/email_Texte/DE
/de/email_Texte/EN
/de/fanshop
/de/func
/de/individual_print
/de/kundenbefragung
/de/kundenbefragung/_notes
/de/login
/de/navigation
/de/navigation/_notes
/de/rating
/de/rating/retoure
/de/retoure
/de/Sale
/de/Sale/_notes
/de/service
/de/stream
/de/styleboards
/de/Teamwear
/de/Uniformen
/DHL
/downloads
/easyrec
/ebay
/ecc2019
/error
/FileMaker
/fonts
/func
/igooMap.igoomap
/images
/img
/instagram
/js
/libs
/locale
/menu
/phpmailer
/phpMyAdmin
/player
/rechnungen
/scripts
/Service
/sitemap
/spirit_online
/StreamClassControl
/videos

Found on 2023-02-18 10:17

Severity: medium
Fingerprint: 5f32cf5d6962f09c8051bd0c8051bd0ca76720897ff46613717db753c83e1dad

Found 66 files trough .DS_Store spidering:

/api
/aws
/aws/FBAInventoryServiceMWS
/aws/MarketplaceWebService
/aws/MarketplaceWebService/Samples
/blog
/burgel
/captcha
/CC_Katalog_2015
/css
/css/menu
/css/mobil
/csv
/de
/de/account
/de/account/_notes
/de/Adventskalender
/de/Aktionen
/de/Aktionen/Bilder_Adventskalender
/de/Aktionen/Bilder_Adventskalender/_notes
/de/cart
/de/customer
/de/email_Texte
/de/email_Texte/DE
/de/email_Texte/EN
/de/fanshop
/de/func
/de/individual_print
/de/kundenbefragung
/de/login
/de/navigation
/de/rating
/de/retoure
/de/Sale
/de/service
/de/stream
/de/styleboards
/de/Teamwear
/de/Uniformen
/DHL
/downloads
/easyrec
/ebay
/ecc2019
/error
/FileMaker
/fonts
/func
/igooMap.igoomap
/images
/img
/instagram
/js
/libs
/locale
/menu
/phpmailer
/phpMyAdmin
/player
/rechnungen
/scripts
/Service
/sitemap
/spirit_online
/StreamClassControl
/videos

Found on 2022-12-20 10:17

Severity: medium
Fingerprint: 5f32cf5d6962f09c3005b7223005b72236c02b8339c2bcf98710b791350d383c

Found 77 files trough .DS_Store spidering:

/api
/aws
/aws/FBAInventoryServiceMWS
/aws/MarketplaceWebService
/aws/MarketplaceWebService/Samples
/blog
/burgel
/captcha
/CC_Katalog_2015
/css
/css/menu
/css/mobil
/csv
/de
/de/account
/de/account/_notes
/de/Adventskalender
/de/Aktionen
/de/Aktionen/Bilder_Adventskalender
/de/Aktionen/Bilder_Adventskalender/_notes
/de/cart
/de/customer
/de/email_Texte
/de/email_Texte/DE
/de/email_Texte/EN
/de/fanshop
/de/func
/de/individual_print
/de/kundenbefragung
/de/kundenbefragung/_notes
/de/login
/de/navigation
/de/navigation/_notes
/de/rating
/de/rating/retoure
/de/retoure
/de/Sale
/de/Sale/_notes
/de/service
/de/service/DE
/de/service/DE/_notes
/de/service/EN
/de/service/EN/_notes
/de/stream
/de/stream/player7
/de/stream/player7/skins
/de/styleboards
/de/Teamwear
/de/Teamwear/_notes
/de/Uniformen
/DHL
/downloads
/easyrec
/ebay
/ecc2019
/error
/FileMaker
/fonts
/func
/igooMap.igoomap
/images
/img
/instagram
/js
/libs
/locale
/menu
/phpmailer
/phpMyAdmin
/player
/rechnungen
/scripts
/Service
/sitemap
/spirit_online
/StreamClassControl
/videos

Found on 2022-12-20 10:17

Severity: medium
Fingerprint: 5f32cf5d6962f09c8efce1938efce193ec59b7f2699b8a88de05475b4a5062bb

Found 36 files trough .DS_Store spidering:

/api
/aws
/blog
/burgel
/captcha
/CC_Katalog_2015
/css
/csv
/de
/DHL
/downloads
/easyrec
/ebay
/ecc2019
/error
/FileMaker
/fonts
/func
/igooMap.igoomap
/images
/img
/instagram
/js
/libs
/locale
/menu
/phpmailer
/phpMyAdmin
/player
/rechnungen
/scripts
/Service
/sitemap
/spirit_online
/StreamClassControl
/videos

Found on 2022-12-20 10:17

Severity: medium
Fingerprint: 5f32cf5d6962f09cb3107650b3107650a48fc0f5f3b9ad7ff00c29dfed43df62

Found 39 files trough .DS_Store spidering:

/api
/aws
/aws/FBAInventoryServiceMWS
/aws/MarketplaceWebService
/aws/MarketplaceWebService/Samples
/blog
/burgel
/captcha
/CC_Katalog_2015
/css
/csv
/de
/DHL
/downloads
/easyrec
/ebay
/ecc2019
/error
/FileMaker
/fonts
/func
/igooMap.igoomap
/images
/img
/instagram
/js
/libs
/locale
/menu
/phpmailer
/phpMyAdmin
/player
/rechnungen
/scripts
/Service
/sitemap
/spirit_online
/StreamClassControl
/videos

Found on 2022-10-21 09:17

Severity: medium
Fingerprint: 5f32cf5d6962f09c248e4f81248e4f81d53800843ef12ffe6fe56c94fd9bc659

Found 41 files trough .DS_Store spidering:

/api
/aws
/aws/FBAInventoryServiceMWS
/aws/MarketplaceWebService
/aws/MarketplaceWebService/Samples
/blog
/burgel
/captcha
/CC_Katalog_2015
/css
/css/menu
/css/mobil
/csv
/de
/DHL
/downloads
/easyrec
/ebay
/ecc2019
/error
/FileMaker
/fonts
/func
/igooMap.igoomap
/images
/img
/instagram
/js
/libs
/locale
/menu
/phpmailer
/phpMyAdmin
/player
/rechnungen
/scripts
/Service
/sitemap
/spirit_online
/StreamClassControl
/videos

Found on 2022-10-21 09:17

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b775fdf39eca8ce2940e11adfa10886ad7

Found 128 files trough .DS_Store spidering:

/api
/aws
/aws/FBAInventoryServiceMWS
/aws/MarketplaceWebService
/aws/MarketplaceWebService/Samples
/blog
/burgel
/captcha
/CC_Katalog_2015
/css
/css/menu
/css/mobil
/csv
/de
/de/account
/de/account/_notes
/de/Adventskalender
/de/Aktionen
/de/Aktionen/Bilder_Adventskalender
/de/Aktionen/Bilder_Adventskalender/_notes
/de/cart
/de/customer
/de/email_Texte
/de/email_Texte/DE
/de/email_Texte/EN
/de/fanshop
/de/func
/de/individual_print
/de/kundenbefragung
/de/kundenbefragung/_notes
/de/login
/de/navigation
/de/navigation/_notes
/de/rating
/de/rating/retoure
/de/retoure
/de/Sale
/de/Sale/_notes
/de/service
/de/service/DE
/de/service/DE/_notes
/de/service/EN
/de/service/EN/_notes
/de/stream
/de/stream/player7
/de/stream/player7/skins
/de/styleboards
/de/Teamwear
/de/Teamwear/_notes
/de/Uniformen
/de/Uniformen/_notes
/DHL
/DHL/includes
/DHL/lib
/downloads
/downloads/invoices
/easyrec
/ebay
/ebay/OrderFullFillment_Files
/ecc2019
/error
/FileMaker
/FileMaker/Command
/FileMaker/conf
/FileMaker/Error
/FileMaker/Implementation
/fonts
/func
/igooMap.igoomap
/images
/images/2e_1162737.jpg
/images/2eDS_Store
/images/add-to-review.png
/images/arrow-menu1.gif
/images/arrow-menu1.png
/images/arrow-menu1.psd
/images/arrow-menu2.png
/images/baerchen.jpg
/images/Banner
/images/Banner/02_2019_BannerSweater737px
/images/Banner/02_2019_BannerSweater737px.jpg
/images/Banner/02_2019_SweaterBlingBling737px.jpg
/images/Banner/13165828_10153909224594230_9160998580744194372_n.jpg
/images/Banner/13466174_10154009808344230_6795038909705939793_n.jpg
/images/Banner/2018_final_Sale.jpg
/images/Banner/2019
/images/Banner/2019/03_2019
/images/Banner/2019/06_2019
/images/Banner/2019/07_2019
/images/Banner/2019/08_2019
/images/Banner/2019/10_2019
/images/Banner/2019/11_2019
/images/Banner/2019/12_2019
/images/Banner/2020
/images/Banner/2020/01_2020
/images/Banner/2020/02_2020
/images/Banner/2020/03_2020
/images/Banner/2020/05_2020
/images/Banner/2020/06_2020
/images/Banner/6560_kaepa_starlyte_right.jpg
/images/Banner/Adventsbanner.jpg
/images/Banner/AIO_Eventshirt2018.jpg
/images/Banner/Aktion_CH0035-Zenith.jpg
/images/Banner/aktion_kaffeetasse.jpg
/images/Banner/Aktion_Teamrucksäcke.jpg
/images/Banner/anklmagz_banner.jpg
/images/Banner/back_to_school_rucksack.jpg
/images/Banner/backtoschool660px.jpg
/images/Banner/backtoschool_2015.jpg
/images/Banner/bags_banner.jpg
/images/Banner/Banner-Bagpacks.jpg
/images/Banner/banner-BCM2018.jpg
/images/Banner/banner-SCM737.jpg
/images/Banner/Banner_275x125px_Sale.png
/images/Banner/Banner_275x125px_Tickets.png
/images/Banner/banner_737_individualline.jpg
/images/Banner/Banner_BeaStar_275px.jpg
/images/Banner/banner_bottle.jpg
/images/Banner/banner_camps.jpg
/images/Banner/banner_campwear.jpg
/images/Banner/banner_cheerbows.jpg
/images/Banner/banner_cheerfashion_campwear.jpg
/images/Banner/banner_cheerfashion_performance.jpg
/images/Banner/banner_cheerschuhe.jpg
/images/Banner/Banner_CoachesConference2017_737px.jpg
/images/Banner/Banner_CoffeeMug_737px.jpg
/images/Banner/banner_college_jacke.jpg
/images/Banner/banner_CustomDesign.jpg

Found on 2022-10-21 09:17

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 91.216.248.23
Domain: v2.kiddum.lukasfrey.net
Port: 443
URL: https://v2.kiddum.lukasfrey.net

First seen 2022-09-28 12:26
Last seen 2023-04-02 09:31
Open for 185 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9db5c4186fb5c4186fb5c4186fb5c4186f
```
Found 1 files trough .DS_Store spidering:

/resources
```
  Found on 2022-09-28 12:26
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 91.216.248.23
Domain: mikeroza.de
Port: 443
URL: https://mikeroza.de

First seen 2023-01-26 16:43
Last seen 2023-04-02 09:10
Open for 65 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d89a8fd6d89a8fd6d89a8fd6d89a8fd6d
```
Found 1 files trough .DS_Store spidering:

/img
```
  Found on 2023-01-26 16:43
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 91.216.248.23
Domain: www.ulogger.clawag.de
Port: 443
URL: https://www.ulogger.clawag.de

First seen 2022-09-21 09:21
Last seen 2023-03-23 16:04
Open for 183 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522de94e49c
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/bfabiszewski/ulogger-server.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2022-09-21 09:21
  
  275 Bytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 91.216.248.23
Domain: sf334.thenexuscommunity.net
Port: 443
URL: https://sf334.thenexuscommunity.net

First seen 2023-03-21 21:03
Last seen 2023-03-21 21:03
- Severity: low
  Fingerprint: 5f32cf5d6962f09c31c2f0b631c2f0b6ccb099923a0a1e56af84be26004a1886
```
Found 28 files trough .DS_Store spidering:

/assets
/assets/css
/assets/img
/assets/img/background
/assets/img/certification
/assets/img/education
/assets/img/me.jpg
/assets/img/project
/assets/img/project/blog.jpg
/assets/img/project/gan.jpg
/assets/img/project/iras.jpeg
/assets/img/project/ml.jpg
/assets/img/project/ml.jpg.crdownload
/assets/img/project/musicplayer.jpg
/assets/img/project/musicplayer.jpg.crdownload
/assets/img/project/recommender.jpg
/assets/img/project/resume.jpg
/assets/img/project/todo.jpg
/assets/img/project/twitteranalysis.jpg
/assets/img/project/vdg.jpg
/assets/js
/assets/vendor
/favicon.png
/index.html
/LICENSE
/projects
/Readme.md
/website_images
```
  Found on 2023-03-21 21:03
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 91.216.248.23
Domain: webexpanded.net
Port: 443
URL: https://webexpanded.net

First seen 2023-01-11 10:32
Last seen 2023-03-12 10:10
Open for 59 days

Severity: low
Fingerprint: 5f32cf5d6962f09c7c3d3e457c3d3e451e91988c9aa934108530f08f8bb4c34d

Found 30 files trough .DS_Store spidering:

/.nova
/app
/app/icons
/app/splash
/fonts
/fonts/css
/fonts/sprites
/fonts/webfonts
/images
/images/avatars
/images/careers
/images/flags
/images/framework
/images/icons
/images/pictures
/images/pictures_vertical
/images/products
/images/splash
/images/undraw
/php
/plugins
/plugins/charts
/plugins/countdown
/plugins/embedly
/plugins/filterizr
/plugins/galleryViews
/plugins/glightbox
/scripts
/scss
/styles

Found on 2023-03-12 10:10

Severity: medium
Fingerprint: 5f32cf5d6962f09c248e4f81248e4f81df4fa8b0c3b58ccc304fccbb847cec01

Found 41 files trough .DS_Store spidering:

/.nova
/app
/app/icons
/app/splash
/fonts
/fonts/css
/fonts/sprites
/fonts/webfonts
/images
/images/avatars
/images/careers
/images/flags
/images/framework
/images/icons
/images/pictures
/images/pictures_vertical
/images/products
/images/splash
/images/undraw
/php
/plugins
/plugins/charts
/plugins/countdown
/plugins/embedly
/plugins/filterizr
/plugins/galleryViews
/plugins/glightbox
/scripts
/scss
/scss/azures
/scss/bootstrap
/scss/bootstrap/forms
/scss/bootstrap/helpers
/scss/bootstrap/mixins
/scss/bootstrap/utilities
/scss/bootstrap/vendor
/scss/components
/scss/highlights
/scss/pages
/scss/plugins
/styles

Found on 2023-01-11 10:32

Severity: low
Fingerprint: 5f32cf5d6962f09c0f8dcf020f8dcf02b6c075776e6c7ac71cfcaef859d18fed

Found 24 files trough .DS_Store spidering:

/.nova
/app
/app/icons
/app/splash
/fonts
/fonts/css
/fonts/sprites
/fonts/webfonts
/images
/images/avatars
/images/careers
/images/flags
/images/framework
/images/icons
/images/pictures
/images/pictures_vertical
/images/products
/images/splash
/images/undraw
/php
/plugins
/scripts
/scss
/styles

Found on 2023-01-11 10:32

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 91.216.248.23
Domain: stba-design.de
Port: 443
URL: https://stba-design.de

First seen 2023-03-01 02:24

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522f4d94f8f

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	ignorecase = true
	precomposeunicode = true
[remote "origin"]
	url = git@github.com:TimAnthonyAlexander/stba.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
[user]
	name = Tim Anthony Alexander
	email = dev@myocto.de
[branch "tim"]
	remote = origin
	merge = refs/heads/tim

Found on 2023-03-01 02:24

425 Bytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 91.216.248.23
Domain: turnkey-group.de
Port: 443
URL: https://turnkey-group.de

First seen 2022-07-30 17:42
Last seen 2023-02-01 10:04
Open for 185 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbbaa1449cf

[core]
	repositoryformatversion = 0
	filemode = false
	bare = false
	logallrefupdates = true
	symlinks = false
	ignorecase = true
[submodule]
	active = .
[remote "origin"]
	url = git@ssh.dev.azure.com:v3/Turnkey-Multimedia/Turn%20Key%20Elektro%20Homepage/Turn%20Key%20Elektro%20Homepage
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
[branch "develop"]
	remote = origin
	merge = refs/heads/develop
[branch "publish"]
	remote = origin
	merge = refs/heads/publish

Found on 2022-07-30 17:42

518 Bytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 91.216.248.22
Domain: www.cheercity-shop.de
Port: 443
URL: https://www.cheercity-shop.de

First seen 2021-08-21 20:37
Last seen 2023-01-02 02:07
Open for 498 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c248e4f81248e4f81d538008442f5b374eda1531a4cb697d3

Found 41 files trough .DS_Store spidering:

/api
/css
/css/menu
/css/mobil
/csv
/de
/de/account
/de/account/_notes
/de/bewertung
/de/cart
/de/cmd
/de/customer
/de/email_Texte
/de/error
/de/func
/de/google
/de/individual_print
/de/login
/de/lp
/de/navigation
/de/Neuer Ordner
/de/poms
/de/rating
/de/retoure
/de/Sale
/de/service
/de/sonderposten
/de/styleboards
/de/teamshop
/de/Teamwear
/de/Uniformen
/DHL
/downloads
/export
/func
/images
/instagram
/newsletter
/phpmailer
/Service
/sitemap

Found on 2023-01-02 02:07

Severity: medium
Fingerprint: 5f32cf5d6962f09c99d3320899d332085291ebeda090563552551f95e670a5c7

Found 44 files trough .DS_Store spidering:

/api
/css
/css/menu
/css/mobil
/csv
/de
/de/account
/de/account/_notes
/de/bewertung
/de/cart
/de/cmd
/de/customer
/de/email_Texte
/de/email_Texte/DE
/de/email_Texte/EN
/de/error
/de/func
/de/func/u
/de/google
/de/individual_print
/de/login
/de/lp
/de/navigation
/de/Neuer Ordner
/de/poms
/de/rating
/de/retoure
/de/Sale
/de/service
/de/sonderposten
/de/styleboards
/de/teamshop
/de/Teamwear
/de/Uniformen
/DHL
/downloads
/export
/func
/images
/instagram
/newsletter
/phpmailer
/Service
/sitemap

Found on 2023-01-02 02:07

Severity: medium
Fingerprint: 5f32cf5d6962f09cb3107650b3107650a48fc0f5ffbe3d6d5b045bfd2f1dedf1

Found 39 files trough .DS_Store spidering:

/api
/css
/css/menu
/css/mobil
/csv
/de
/de/account
/de/account/_notes
/de/bewertung
/de/cart
/de/cmd
/de/customer
/de/email_Texte
/de/error
/de/func
/de/google
/de/individual_print
/de/login
/de/navigation
/de/Neuer Ordner
/de/poms
/de/rating
/de/retoure
/de/Sale
/de/service
/de/sonderposten
/de/styleboards
/de/teamshop
/de/Teamwear
/de/Uniformen
/DHL
/export
/func
/images
/instagram
/newsletter
/phpmailer
/Service
/sitemap

Found on 2021-10-24 04:05

Severity: medium
Fingerprint: 5f32cf5d6962f09c91500896915008965258b0ff3c95b237b83cdca3b21de730

Found 37 files trough .DS_Store spidering:

/api
/css
/css/menu
/css/mobil
/csv
/de
/de/account
/de/account/_notes
/de/bewertung
/de/cart
/de/cmd
/de/customer
/de/email_Texte
/de/error
/de/func
/de/google
/de/individual_print
/de/login
/de/navigation
/de/Neuer Ordner
/de/poms
/de/rating
/de/retoure
/de/Sale
/de/service
/de/sonderposten
/de/styleboards
/de/teamshop
/de/Teamwear
/de/Uniformen
/DHL
/export
/func
/images
/phpmailer
/Service
/sitemap

Found on 2021-08-21 20:37

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 91.216.248.23
Domain: www.u-kraken.de
Port: 443
URL: https://www.u-kraken.de

First seen 2022-12-30 10:07
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522c3c4eb71
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@bitbucket.org:alexander_friederich/utesch-handelsgesellschaft.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2022-12-30 10:07
  
  294 Bytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 91.216.248.23
Domain: derveganberater.de
Port: 443
URL: https://derveganberater.de

First seen 2022-10-15 21:03
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0fb3f5918ab01ce418f3b69db1f3b69db1
```
Found 3 files trough .DS_Store spidering:

/_vti_cnf
/_vti_pvt
/Bilder
```
  Found on 2022-10-15 21:03
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 91.216.248.23
Domain: stats.lukefrancke.de
Port: 443
URL: https://stats.lukefrancke.de

First seen 2022-09-23 19:34
Last seen 2022-09-23 19:35
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522967237da
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/electerious/Ackee
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2022-09-23 19:34
  
  261 Bytes
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 91.216.248.23
Domain: www.partyguru.antonhauffe.de
Port: 443
URL: https://www.partyguru.antonhauffe.de/_profiler/empty/search/results

First seen 2022-08-19 00:36
- Fingerprint: 407cf4363b0e62fafca67e0704d5a2c304d5a2c304d5a2c304d5a2c304d5a2c3
```
Symfony profiler enabled:
https://www.partyguru.antonhauffe.de/_profiler/empty/search/results
```
  Found on 2022-08-19 00:36
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 91.216.248.23
Domain: umami.lukefrancke.de
Port: 443
URL: https://umami.lukefrancke.de

First seen 2022-07-02 20:40
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522722dd5bb
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/mikecao/umami.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2022-07-02 20:40
  
  261 Bytes
Create report

Open service 91.216.248.23:443 · application.notar-liessem.de

2026-01-12 13:27

HTTP/1.1 301 Moved Permanently
Server: openresty
Date: Mon, 12 Jan 2026 13:27:47 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Connection: close
X-Lima-Id: gauJIQGy87vb2vyXuQ
Set-Cookie: _lcp=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax; HttpOnly
x-powered-by: PHP/5.6.40
location: https://www.notar-liessem.de/
Content-Security-Policy: upgrade-insecure-requests
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload

Found 7 minutes ago by HttpPlugin

Host 91.216.248.23

Germany

Software information

MacOS file listing through .DS_Store file

Git configuration and history exposed

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

Moodle is vulnerable

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

Git configuration and history exposed

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

Git configuration and history exposed

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

Git configuration and history exposed

Git configuration and history exposed

MacOS file listing through .DS_Store file

Git configuration and history exposed

MacOS file listing through .DS_Store file

Git configuration and history exposed

Symfony developement panel enabled

Git configuration and history exposed