Shodan

120.77.241.95

Regular View Raw Data
Last Seen: 2024-04-18
Tags:
eol-product

GeneralInformation

Country China
City Shenzhen
Organization Aliyun Computing Co., LTD
ISP Hangzhou Alibaba Advertising Co.,Ltd.
ASN AS37963
Operating System Ubuntu

WebTechnologies

Blogs
Halo1.6.1
CMS
Halo1.6.1
JavaScript frameworks
AngularJS
JavaScript libraries
jQuery1.9.1
Miscellaneous
Gravatar
Programming languages
Java

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487 The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-3618 5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017 6.8A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.
CVE-2020-11023 4.3In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2020-11022 4.3In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2019-11358 4.3jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
CVE-2015-9251 4.3jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.

OpenPorts 

951664451 | 2024-04-16T18:53:31.858691
22 / tcp 
1651973090 | 2024-04-18T16:30:22.652740
80 / tcp 
1080186494 | 2024-04-08T05:46:35.144244
4567 / tcp 
574130828 | 2024-04-15T22:30:42.527383
8000 / tcp 
567746907 | 2024-04-04T11:16:57.093939
8090 / tcp 
1212680812 | 2024-04-14T09:30:52.354797
9443 / tcp



Products
Pricing
Contact Us

Shodan ® - All rights reserved