GeneralInformation

Hostnames	server-18-172-226-42.bcn50.r.cloudfront.net spjain.org
Domains	cloudfront.net spjain.org
Cloud Provider	Amazon
Cloud Region	GLOBAL
Cloud Service	CLOUDFRONT
Country	Spain
City	Barcelona
Organization	Amazon.com, Inc.
ISP	Amazon.com, Inc.
ASN	AS16509

WebTechnologies

CDN

JavaScript libraries

Miscellaneous

UI frameworks

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2020-11023	4.3In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2020-11022	4.3In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2019-11358	4.3jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
CVE-2018-14042	4.3In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip.
CVE-2018-14041	4.3In Bootstrap before 4.1.2, XSS is possible in the data-target property of scrollspy.
CVE-2018-14040	4.3In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute.
CVE-2016-10735	4.3In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041.

OpenPorts

80 443

69263208 | 2024-05-20T03:36:10.815419

80 / tcp

HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Mon, 20 May 2024 03:36:10 GMT
Content-Type: text/html
Content-Length: 915
Connection: keep-alive
X-Cache: Error from cloudfront
Via: 1.1 6e5dd992d3363f94cc1bff71c8061b48.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: BCN50-P2
X-Amz-Cf-Id: mWuwAUc2tvSs5avfL6WYIc31porIGvTZePxs-9p0fso7dtDrZ8OF2A==

2053481714 | 2024-05-19T13:43:27.105765

443 / tcp

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 3593
Connection: keep-alive
Date: Sun, 19 May 2024 13:10:43 GMT
Last-Modified: Mon, 15 Mar 2021 12:31:59 GMT
ETag: "1423edb37dde42c39618c25f0e06c4f5"
Server: AmazonS3
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 26128c902f606477b4fcc17362e0ae9c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: BCN50-P2
X-Amz-Cf-Id: LQeqGDKFawltKXltDsGlnT6c1LJNAJ4aBBCDKW1LhjK8hPNrGzpDqA==
Age: 1964

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:75:72:de:5c:14:fc:09:8e:f9:af:72:a7:69:9d:5d
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
        Validity
            Not Before: Apr 10 00:00:00 2023 GMT
            Not After : May 10 23:59:59 2024 GMT
        Subject: CN=*.spjain.org
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d8:50:d0:fc:9a:20:c5:84:d9:e2:15:33:08:05:
                    7b:94:d4:f8:27:cd:36:e4:14:0b:0a:5e:4a:94:08:
                    04:0b:b3:72:5a:d5:23:96:e4:f4:35:99:c2:0a:b5:
                    e5:f8:6e:0a:e2:3e:3d:79:83:10:be:5c:bc:0f:1b:
                    39:32:67:42:3e:9f:8d:5a:1e:5a:67:e0:19:5a:f7:
                    cc:92:8d:68:5e:fb:44:73:01:ea:d1:86:0c:20:96:
                    b1:47:f5:42:dc:c2:6b:22:7d:1e:c1:f4:8f:41:3f:
                    b1:57:8c:1c:3b:21:22:f7:9d:86:f6:7f:91:2e:ca:
                    68:f8:5f:34:6d:40:3d:06:7c:29:a1:1b:a7:41:ee:
                    16:66:cb:b5:d8:b3:fe:a9:5b:11:fd:2e:25:b2:3f:
                    36:a3:8b:3a:6f:15:5d:34:97:44:15:6a:10:cc:e5:
                    ef:64:75:c1:5d:fc:84:4c:2b:81:88:99:55:4e:c8:
                    8a:55:72:c1:7b:cc:a5:fa:bc:a2:71:ce:e2:7e:ec:
                    5e:53:82:37:f0:98:95:3e:21:05:4b:af:70:e0:74:
                    83:f8:90:19:31:51:d8:86:53:ce:e6:ce:af:45:8b:
                    80:9e:be:e0:1c:71:51:34:04:d1:3c:a6:00:60:d3:
                    eb:bf:50:69:04:4a:93:11:1f:a4:40:f1:c6:f8:6e:
                    9d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                8D:8C:5E:C4:54:AD:8A:E1:77:E9:9B:F9:9B:05:E1:B8:01:8D:61:E1
            X509v3 Subject Key Identifier: 
                43:E4:39:B9:3C:66:98:6E:99:28:76:17:2E:8F:A8:2A:63:DD:70:53
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.2.7
                  CPS: https://sectigo.com/CPS
                Policy: 2.23.140.1.2.1
            Authority Information Access: 
                CA Issuers - URI:http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt
                OCSP - URI:http://ocsp.sectigo.com
            X509v3 Subject Alternative Name: 
                DNS:*.spjain.org, DNS:spjain.org
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34:
                                B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74
                    Timestamp : Apr 10 09:56:59.650 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:49:08:2C:7F:1B:0B:7E:AE:F0:A2:84:62:
                                A4:E9:8D:72:49:2B:B1:E6:CD:9B:89:A3:AA:06:97:43:
                                51:E5:47:82:02:20:01:7F:78:7E:7C:92:29:57:1F:B3:
                                2D:DF:C8:71:95:4C:AC:8D:DB:2A:57:4B:DB:F8:4C:C0:
                                AD:FB:01:1F:17:16
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70:
                                91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB
                    Timestamp : Apr 10 09:56:59.748 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:33:9E:E3:EA:EF:9D:98:12:25:BA:D9:B0:
                                2D:1E:D7:82:1B:E3:B8:AC:59:1B:24:22:96:19:AC:3C:
                                86:58:03:56:02:20:78:E4:D1:67:80:B5:62:62:2E:E2:
                                CE:E6:86:F5:46:03:77:AB:1E:DB:2D:6C:63:EE:A8:2E:
                                28:B2:94:A6:7E:BD
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
                                32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
                    Timestamp : Apr 10 09:56:59.695 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:81:FA:7B:75:C4:CB:30:F1:84:3A:A0:
                                62:3B:E5:66:1B:0E:37:DF:34:63:7B:5E:FE:28:F2:B4:
                                AE:6D:77:22:41:02:20:4F:D2:96:69:0E:AE:F5:68:FB:
                                69:A2:70:1A:33:4C:24:FE:93:5A:75:27:17:18:B6:FC:
                                CA:EF:1C:E1:26:CF:7F
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        3f:ba:76:d9:91:b5:e5:c1:71:44:93:7c:58:58:c4:7b:26:a6:
        39:5e:99:c4:07:bd:1f:01:ce:2c:7f:24:24:7c:d2:03:22:14:
        26:af:64:4b:5b:1c:75:42:08:dc:b8:73:99:23:87:69:0a:b9:
        54:49:f6:d7:2f:2b:3d:49:71:88:3a:7d:c6:98:c0:20:d7:db:
        a0:40:85:25:f6:50:59:45:d5:83:bc:36:cd:90:b7:97:5a:07:
        b7:b2:8d:03:d6:17:07:82:4f:e0:f7:39:80:a4:5f:95:62:cd:
        09:4e:94:44:63:9d:84:db:97:83:3d:0c:44:07:c3:a0:7f:89:
        98:77:87:96:a8:42:47:e9:39:54:e3:0a:63:d2:60:88:fb:ee:
        ce:f5:ba:46:74:64:c2:cc:c9:db:ef:f5:bc:cd:a4:99:2a:7a:
        df:6f:e0:e0:73:b7:4e:8c:86:c1:80:69:ec:d7:00:d9:61:82:
        e7:85:a8:bd:45:10:df:9b:5a:2a:2b:bc:74:3a:78:ec:5f:08:
        c7:c6:72:01:9c:7a:11:d3:3a:79:c4:3d:a8:32:a6:fa:27:fb:
        be:ff:8c:9b:24:29:98:d7:79:c2:97:66:13:00:fe:26:01:f9:
        88:b7:6d:40:36:c2:30:97:f2:a6:57:e8:8b:ea:4f:c2:b7:ad:
        84:51:f0:a9

18.172.226.42

Last Seen: 2024-05-20

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

69263208 | 2024-05-20T03:36:10.815419
80 / tcp

CloudFront httpd

2053481714 | 2024-05-19T13:43:27.105765
443 / tcp

Products

Pricing

Contact Us

18.172.226.42

Last Seen: 2024-05-20

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

69263208 | 2024-05-20T03:36:10.815419 80 / tcp

CloudFront httpd

2053481714 | 2024-05-19T13:43:27.105765 443 / tcp

Products

Pricing

Contact Us

69263208 | 2024-05-20T03:36:10.815419
80 / tcp

2053481714 | 2024-05-19T13:43:27.105765
443 / tcp