GeneralInformation

Hostnames	federalberghi.it
Domains	federalberghi.it
Country	Italy
City	Rome
Organization	ITnet S.r.l.
ISP	ITnet S.r.l.
ASN	AS3242
Operating System	Windows

WebTechnologies

CMS

JavaScript libraries

UI frameworks

Widgets

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2020-11023	4.3In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2020-11022	4.3In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2019-11358	4.3jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
CVE-2015-9251	4.3jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.
CVE-2014-4078	5.1The IP Security feature in Microsoft Internet Information Services (IIS) 8.0 and 8.5 does not properly process wildcard allow and deny rules for domains within the "IP Address and Domain Restrictions" list, which makes it easier for remote attackers to bypass an intended rule set via an HTTP request, aka "IIS Security Feature Bypass Vulnerability."

OpenPorts

80 443 8000 8001

-1997869334 | 2024-05-08T03:50:45.736669

80 / tcp

HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/8.0
X-SharePointHealthScore: 0
X-AspNet-Version: 4.0.30319
SPRequestGuid: ff8726a1-1c4e-c035-4b67-937d8d98d124
request-id: ff8726a1-1c4e-c035-4b67-937d8d98d124
X-FRAME-OPTIONS: SAMEORIGIN
SPRequestDuration: 2400
SPIisLatency: 2
X-Powered-By: ASP.NET
MicrosoftSharePointTeamServices: 15.0.0.4701
X-Content-Type-Options: nosniff
X-MS-InvokeApp: 1; RequireReadOnly
Access-Control-Allow-Origin: *
Date: Wed, 08 May 2024 03:50:40 GMT
Content-Length: 98555

884644969 | 2024-05-07T20:37:54.371897

443 / tcp

HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/8.0
X-SharePointHealthScore: 0
X-AspNet-Version: 4.0.30319
SPRequestGuid: 3a6f26a1-ac1c-c035-4b67-9bce5f241a05
request-id: 3a6f26a1-ac1c-c035-4b67-9bce5f241a05
X-FRAME-OPTIONS: SAMEORIGIN
SPRequestDuration: 2515
SPIisLatency: 1
X-Powered-By: ASP.NET
MicrosoftSharePointTeamServices: 15.0.0.4701
X-Content-Type-Options: nosniff
X-MS-InvokeApp: 1; RequireReadOnly
Access-Control-Allow-Origin: *
Date: Tue, 07 May 2024 20:37:47 GMT
Content-Length: 98773

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:70:93:4e:19:48:e2:d7:7e:00:71:0b:8a:66:03:83
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1
        Validity
            Not Before: Jan  8 00:00:00 2024 GMT
            Not After : Feb  7 23:59:59 2025 GMT
        Subject: C=IT, L=Roma, O=Federalberghi, CN=*.federalberghi.it
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c4:d7:bf:4b:b0:aa:b7:3d:39:3a:04:cc:a9:58:
                    a1:df:9e:6d:92:5d:67:bc:53:04:c2:66:c2:39:95:
                    d5:8b:df:13:a7:96:09:d3:b9:65:d9:cb:6b:02:ad:
                    04:5a:a0:7c:9d:de:11:f0:84:54:31:e3:e8:c7:6c:
                    64:ed:9a:40:0e:b6:bb:ea:b5:f9:dc:44:48:63:0a:
                    76:1d:c5:96:61:bf:8a:8a:ea:b5:58:75:34:59:f5:
                    9b:7d:f9:6f:63:4b:d0:ca:02:78:f3:b9:e1:c3:a7:
                    39:01:25:bb:c2:02:6e:4a:d0:c6:9e:cb:59:6a:22:
                    28:c7:8e:07:89:e9:a2:53:c2:cb:9c:7b:47:2d:11:
                    ab:6d:59:7c:58:bc:eb:71:4a:76:53:a0:d3:cb:8e:
                    b7:40:5e:04:d9:06:1e:f5:c9:95:86:a8:6f:4f:94:
                    4e:7e:67:da:82:40:57:3a:7d:c9:56:43:9e:76:12:
                    33:97:c9:6e:e0:ad:df:b1:23:2f:85:e1:7a:07:d4:
                    15:95:3f:67:c7:2f:3b:b8:cb:cb:4d:80:23:a1:23:
                    22:fc:ea:99:fe:e2:25:78:79:1e:21:23:26:39:55:
                    a0:40:f1:67:0a:91:8b:3c:29:bb:82:8b:cd:d4:75:
                    f9:7b:cb:40:5d:7f:2c:70:9c:c0:49:12:d1:e1:2f:
                    43:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                74:85:80:C0:66:C7:DF:37:DE:CF:BD:29:37:AA:03:1D:BE:ED:CD:17
            X509v3 Subject Key Identifier: 
                71:D3:7D:5A:79:7A:9A:75:92:4C:F6:D9:DE:C2:8E:16:87:FC:F0:A2
            X509v3 Subject Alternative Name: 
                DNS:*.federalberghi.it, DNS:federalberghi.it
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                  CPS: http://www.digicert.com/CPS
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
                Full Name:
                  URI:http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com
                CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt
            X509v3 Basic Constraints: critical
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
                                1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
                    Timestamp : Jan  8 15:06:33.340 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:99:EC:BC:72:59:AF:31:55:08:68:A7:
                                60:A7:65:AA:C9:65:93:E7:58:F7:02:E2:E4:54:08:79:
                                A4:4C:EE:32:49:02:20:0A:3F:2C:55:9C:42:F3:E6:EF:
                                91:68:4E:2E:6F:A9:EE:94:9E:AA:6C:A8:13:16:AD:43:
                                BC:E2:76:91:73:87:97
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 55:81:D4:C2:16:90:36:01:4A:EA:0B:9B:57:3C:53:F0:
                                C0:E4:38:78:70:25:08:17:2F:A3:AA:1D:07:13:D3:0C
                    Timestamp : Jan  8 15:06:33.378 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:52:C5:14:A4:A6:37:0A:FF:40:DA:BF:44:
                                47:B2:CA:74:67:DD:43:09:11:FD:14:FD:CB:49:C2:CA:
                                A0:B8:95:86:02:21:00:FC:DF:0C:1B:28:7A:39:CC:A6:
                                F2:48:08:97:AB:45:44:98:8A:24:7B:A3:1E:6D:20:46:
                                7A:17:BB:75:FB:C9:ED
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0:
                                87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8
                    Timestamp : Jan  8 15:06:33.309 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:DD:47:36:26:A5:7D:83:24:61:31:89:
                                31:CE:4C:B2:22:B1:33:6B:50:9A:DE:DE:1C:84:39:52:
                                6C:40:09:FA:78:02:20:1E:8E:D5:F0:B4:64:CF:42:61:
                                76:B2:A8:B2:DA:36:DE:DD:69:48:55:BD:55:81:F5:03:
                                9E:CB:3F:46:69:02:69
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        05:8c:13:30:96:1b:4b:83:d0:62:1f:60:41:1a:3a:3b:89:e6:
        14:92:44:b4:d7:2f:82:41:77:a6:b9:28:7e:49:5a:1b:f7:08:
        56:00:54:88:c9:af:a9:6b:c1:40:44:01:02:ee:ed:99:09:c8:
        e0:d3:01:e1:1e:3f:d7:b7:2f:96:15:a0:94:a3:17:29:5f:a2:
        b8:c9:93:a6:12:e5:83:e5:5a:68:1a:fa:be:6b:bf:2f:ec:72:
        da:2e:cc:1b:0f:83:fb:26:33:c5:23:5c:3e:29:c3:e6:e8:9d:
        b1:bd:9c:ea:70:a0:29:6b:35:3d:f0:4b:5e:87:cf:8d:1b:e2:
        22:7a:77:93:38:d0:7e:f3:76:bc:bf:aa:6f:8e:ec:01:3a:90:
        6f:3e:39:fb:ea:06:8b:ab:c0:22:e4:4c:fe:e7:74:33:14:59:
        f4:96:00:09:97:96:01:8a:ab:ce:5a:86:4e:ed:ff:07:d3:0a:
        7d:a1:b0:da:79:6c:59:f8:3c:35:1c:78:1e:7d:91:c1:04:f4:
        be:84:d6:e8:df:0c:98:43:4d:c0:33:9c:97:a8:a0:1a:28:b5:
        d4:a7:12:9d:27:43:23:e7:8e:b1:a3:13:25:4e:c3:4d:67:44:
        69:16:34:10:00:b6:ad:4a:7a:c3:c1:72:42:89:c6:e7:f9:2b:
        05:c0:08:80

-1150069310 | 2024-04-26T03:26:09.619081

8000 / tcp

HTTP/1.1 302 Redirect
Content-Type: text/html; charset=UTF-8
Location: https://intranet.federalberghi.it/
Server: Microsoft-IIS/8.0
SPRequestGuid: d3a922a1-ac45-c035-4b67-91c18bff3868
request-id: d3a922a1-ac45-c035-4b67-91c18bff3868
X-FRAME-OPTIONS: SAMEORIGIN
X-Powered-By: ASP.NET
MicrosoftSharePointTeamServices: 15.0.0.4535
X-Content-Type-Options: nosniff
X-MS-InvokeApp: 1; RequireReadOnly
Access-Control-Allow-Origin: *
Date: Fri, 26 Apr 2024 03:26:07 GMT
Content-Length: 188

-1660322901 | 2024-04-22T03:47:26.694855

8001 / tcp

HTTP/1.1 401 Unauthorized
Content-Type: text/plain; charset=utf-8
Server: Microsoft-IIS/8.0
X-SharePointHealthScore: 0
SPRequestGuid: 726121a1-6ca8-c035-4b67-9845f3ed1bb4
request-id: 726121a1-6ca8-c035-4b67-9845f3ed1bb4
WWW-Authenticate: NTLM
X-Powered-By: ASP.NET
MicrosoftSharePointTeamServices: 15.0.0.4535
X-Content-Type-Options: nosniff
X-MS-InvokeApp: 1; RequireReadOnly
Content-Security-Policy: frame-ancestors 'self' crm.federalberghi.it
Date: Mon, 22 Apr 2024 03:47:23 GMT
Content-Length: 16


HTTP NTLM Info:
  OS: Windows 8/Windows Server 2012
  OS Build: 6.2.9200
  Target Name: FEDERALBERGHI
  NetBIOS Domain Name: FEDERALBERGHI
  NetBIOS Computer Name: SHAREPOINT01
  DNS Domain Name: federalberghi.it
  DNS Tree Name: federalberghi.it
  FQDN: sharepoint01.federalberghi.it

151.1.178.168

Last Seen: 2024-05-08

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-1997869334 | 2024-05-08T03:50:45.736669
80 / tcp

Microsoft IIS httpd8.0

884644969 | 2024-05-07T20:37:54.371897
443 / tcp

Microsoft IIS httpd8.0

-1150069310 | 2024-04-26T03:26:09.619081
8000 / tcp

Microsoft IIS httpd8.0

-1660322901 | 2024-04-22T03:47:26.694855
8001 / tcp

Microsoft IIS httpd8.0

Products

Pricing

Contact Us

151.1.178.168

Last Seen: 2024-05-08

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-1997869334 | 2024-05-08T03:50:45.736669 80 / tcp

Microsoft IIS httpd8.0

884644969 | 2024-05-07T20:37:54.371897 443 / tcp

Microsoft IIS httpd8.0

-1150069310 | 2024-04-26T03:26:09.619081 8000 / tcp

Microsoft IIS httpd8.0

-1660322901 | 2024-04-22T03:47:26.694855 8001 / tcp

Microsoft IIS httpd8.0

Products

Pricing

Contact Us

-1997869334 | 2024-05-08T03:50:45.736669
80 / tcp

884644969 | 2024-05-07T20:37:54.371897
443 / tcp

-1150069310 | 2024-04-26T03:26:09.619081
8000 / tcp

-1660322901 | 2024-04-22T03:47:26.694855
8001 / tcp