Shodan

137.184.212.168

Regular View Raw Data
Last Seen: 2024-05-09

GeneralInformation

Hostnames mackinacferry.com
www.mackinacferry.com
cloud74.michigandigital.com
pineconevacations.com
www.pineconevacations.com
Domains mackinacferry.com michigandigital.com pineconevacations.com 
Cloud Provider DigitalOcean
Cloud Region us-nj
Country United States
City North Bergen
Organization DigitalOcean, LLC
ISP DigitalOcean, LLC
ASN AS14061
Operating System Ubuntu

WebTechnologies

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2024-3097 The WordPress Gallery Plugin – NextGEN Gallery plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the get_item function in versions up to, and including, 3.59. This makes it possible for unauthenticated attackers to extract sensitive data including EXIF and other metadata of any image uploaded through the plugin.
CVE-2023-48328 Cross-Site Request Forgery (CSRF) vulnerability in Imagely WordPress Gallery Plugin – NextGEN Gallery allows Cross Site Request Forgery.This issue affects WordPress Gallery Plugin – NextGEN Gallery: from n/a through 3.37.
CVE-2023-44487 The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2023-3279 The WordPress Gallery Plugin WordPress plugin before 3.39 does not validate some block attributes before using them to generate paths passed to include function/s, allowing Admin users to perform LFI attacks
CVE-2023-3155 The WordPress Gallery Plugin WordPress plugin before 3.39 is vulnerable to Arbitrary File Read and Delete due to a lack of input parameter validation in the `gallery_edit` function, allowing an attacker to access arbitrary resources on the server.
CVE-2023-3154 The WordPress Gallery Plugin WordPress plugin before 3.39 is vulnerable to PHAR Deserialization due to a lack of input parameter validation in the `gallery_edit` function, allowing an attacker to access arbitrary resources on the server.
CVE-2022-38468 Cross-Site Request Forgery (CSRF) vulnerability in Imagely WordPress Gallery Plugin – NextGEN Gallery plugin <= 3.28 leading to thumbnail alteration.
CVE-2021-3618 5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017 6.8A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

OpenPorts 

-1047631728 | 2024-04-30T23:07:44.626743
21 / tcp 
-1864009291 | 2024-05-09T06:44:10.969777
22 / tcp 
840357445 | 2024-05-06T19:49:55.206665
80 / tcp 
-320630204 | 2024-05-09T07:33:35.751996
443 / tcp 
-2120412095 | 2024-05-06T00:56:44.857936
8080 / tcp 
677579724 | 2024-05-02T11:28:07.170476
8081 / tcp



Products
Pricing
Contact Us

Shodan ® - All rights reserved