Shodan

143.107.183.125

Regular View Raw Data
Last Seen: 2024-05-03
Tags:
eol-product

GeneralInformation

Hostnames egov.icmc.usp.br
java.icmc.usp.br
Domains usp.br 
Country Brazil
City São Carlos
Organization UNIVERSIDADE DE SAO PAULO
ISP UNIVERSIDADE DE SAO PAULO
ASN AS28571

WebTechnologies

CDN
Google Hosted Libraries
JavaScript graphics
D3
JavaScript libraries
jQuery1.10.2

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487 The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-3618 5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017 6.8A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.
CVE-2020-11023 4.3In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2020-11022 4.3In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2019-11358 4.3jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
CVE-2015-9251 4.3jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.

OpenPorts 

-2102844022 | 2024-05-01T16:58:28.766188
22 / tcp 
-2060961880 | 2024-05-01T17:59:35.915898
80 / tcp 
-815951585 | 2024-05-01T15:15:41.202891
443 / tcp 
-815951585 | 2024-05-03T09:10:12.456171
8090 / tcp 
1697110477 | 2024-05-01T18:50:22.545830
9999 / tcp 
759417089 | 2024-05-01T19:33:33.103520
10000 / tcp 
-2078422527 | 2024-05-01T15:28:13.886033
10001 / tcp



Products
Pricing
Contact Us

Shodan ® - All rights reserved