GeneralInformation

Hostnames	git.boone-schulz.de
Domains	boone-schulz.de
Country	Germany
City	Nürnberg
Organization	netcup GmbH
ISP	netcup GmbH
ASN	AS197540

WebTechnologies

Development

Forgejo

JavaScript libraries

jQuery

Miscellaneous

PWA

RSS

Programming languages

SecurityContact

Policy	https://codeberg.org/forgejo/governance/src/commit/5c07b3801537212ed6be1edfec298d7b004ce92d/SECURITY-POLICY.md
Contact	security@forgejo.org
Encryption	https://keys.openpgp.org/vks/v1/by-fingerprint/1B638BDF10969D627926B8D9F585D0F99E1FB56F
Preferred-Languages	en
Expires	2026-07-16T23:59:59.000Z

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2025(2)

CVE-2025-26466

5.9A flaw was found in the OpenSSH package. For each ping packet the SSH server receives, a pong packet is allocated in a memory buffer and stored in a queue of packages. It is only freed when the server/client key exchange has finished. A malicious client may keep sending such packages, leading to an uncontrolled increase in memory consumption on the server side. Consequently, the server may become unavailable, resulting in a denial of service attack.

CVE-2025-26465

6.8A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine impersonating a legit server. This issue occurs due to how OpenSSH mishandles error codes in specific conditions when verifying the host key. For an attack to be considered successful, the attacker needs to manage to exhaust the client's memory resource first, turning the attack complexity high.

OpenPorts

80 443 2222

443 / tcp

-1724149099 | 2025-03-16T20:09:36.137752

Hashes

hash

1884885459

http.dom_hash

1587629416

http.favicon.hash

2028463767

http.html_hash

-1724149099

http.securitytxt_hash

-909932081

http.server_hash

-1340961475

http.sitemap_hash

-677381715

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 16 Mar 2025 20:09:35 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=0, private, must-revalidate, no-transform
Set-Cookie: i_like_gitea=4b3b9fea6d44afc8; Path=/; HttpOnly; Secure; SameSite=Lax
Set-Cookie: _csrf=6xMGpW0MXn8N_jvEc972Ye3LL2s6MTc0MjE1NTc3NTg4NTYwMDk4OQ; Path=/; Max-Age=86400; HttpOnly; Secure; SameSite=Lax
Set-Cookie: gitea_incredible=; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax
X-Frame-Options: SAMEORIGIN
X-Backend: git

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:b7:96:d6:b5:90:fa:5f:d7:b9:09:14:bf:ae:c6:81:d3:af
        Signature Algorithm: ecdsa-with-SHA384
        Issuer: C=US, O=Let's Encrypt, CN=E5
        Validity
            Not Before: Feb 22 10:42:03 2025 GMT
            Not After : May 23 10:42:02 2025 GMT
        Subject: CN=git.boone-schulz.de
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:6d:24:f2:bc:63:30:f4:11:69:70:fa:6e:e6:b4:
                    d3:c2:23:c1:b6:ce:f6:16:7c:60:fd:e5:06:e5:51:
                    e9:a3:ac:41:71:a3:97:d4:da:75:63:ae:7d:8b:e1:
                    d5:d5:24:34:56:b7:c4:95:67:5b:43:bf:27:83:dd:
                    b4:d0:32:94:ab
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                0E:EF:3D:8D:42:33:EB:15:6D:B3:F3:83:CF:DD:02:F9:46:29:F5:74
            X509v3 Authority Key Identifier: 
                9F:2B:5F:CF:3C:21:4F:9D:04:B7:ED:2B:2C:C4:C6:70:8B:D2:D7:0D
            Authority Information Access: 
                OCSP - URI:http://e5.o.lencr.org
                CA Issuers - URI:http://e5.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:git.boone-schulz.de
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
                                1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
                    Timestamp : Feb 22 11:40:33.947 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:5E:10:F1:FE:0C:FE:DA:A9:CA:A9:73:50:
                                F3:CE:A9:15:1B:C8:91:A1:06:AD:A7:9A:41:E7:F4:BD:
                                B4:88:88:55:02:21:00:CD:01:E8:60:15:71:A5:7E:3F:
                                82:9F:14:3B:7D:7B:11:0C:2D:7C:7A:6C:72:F1:A7:49:
                                70:C0:05:83:42:8D:6B
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 13:4A:DF:1A:B5:98:42:09:78:0C:6F:EF:4C:7A:91:A4:
                                16:B7:23:49:CE:58:57:6A:DF:AE:DA:A7:C2:AB:E0:22
                    Timestamp : Feb 22 11:40:34.299 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:E2:1B:BA:2B:1C:00:6E:FB:C4:48:5C:
                                4D:D8:A7:09:B5:51:9D:D3:C8:7E:E9:F9:AF:6B:E1:D3:
                                89:DD:21:62:B8:02:21:00:EF:1E:36:E7:11:40:9F:25:
                                70:78:11:02:15:60:77:A2:28:3F:A8:36:2D:13:29:9B:
                                4E:A9:DC:57:35:1B:44:02
    Signature Algorithm: ecdsa-with-SHA384
    Signature Value:
        30:65:02:31:00:e5:ff:60:ed:a2:7f:a0:d7:a2:92:8f:a3:d7:
        b7:b2:c3:32:a2:f4:a7:1c:46:6c:2c:96:a8:c5:9c:43:8e:ed:
        fa:d4:58:4f:e3:b0:e8:c2:7d:da:a6:d7:87:47:a1:cf:88:02:
        30:35:8a:e8:11:67:13:d3:de:39:5b:0a:8d:e9:71:e7:59:c2:
        ad:a2:35:e8:7d:44:67:6d:1e:4f:b6:c6:78:16:e4:e7:32:0e:
        7c:ad:ab:16:3e:fb:b1:23:9f:51:36:47:1c

2222 / tcp

-1678864248 | 2025-03-28T00:53:05.570377

SSH-2.0-OpenSSH_9.9
Key type: ssh-ed25519
Key: AAAAC3NzaC1lZDI1NTE5AAAAIF3i/NQiO51sJnyM4T10eEYroINx5kBJ1KhN87gnLVVQ
Fingerprint: de:fd:fb:6e:4d:d5:22:98:c0:45:7b:b8:75:d5:30:fd

Kex Algorithms:
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group-exchange-sha1
	diffie-hellman-group14-sha1
	ext-info-s
	kex-strict-s-v00@openssh.com

Server Host Key Algorithms:
	rsa-sha2-512
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	hmac-sha2-256
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

Vulnerabilities

185.244.193.186

Last Seen: 2025-03-28

GeneralInformation

WebTechnologies

SecurityContact

Vulnerabilities

OpenPorts

443 / tcp

-1724149099 | 2025-03-16T20:09:36.137752

Hashes

nginx

2222 / tcp

-1678864248 | 2025-03-28T00:53:05.570377

OpenSSH9.9

Products

Pricing

Contact Us

185.244.193.186

Last Seen: 2025-03-28

GeneralInformation

WebTechnologies

SecurityContact

Vulnerabilities All ports Port 2222 Latest CVSS

OpenPorts

443 / tcp -1724149099 | 2025-03-16T20:09:36.137752

Hashes

nginx

2222 / tcp -1678864248 | 2025-03-28T00:53:05.570377

OpenSSH9.9

Products

Pricing

Contact Us

Vulnerabilities

443 / tcp

-1724149099 | 2025-03-16T20:09:36.137752

2222 / tcp

-1678864248 | 2025-03-28T00:53:05.570377