GeneralInformation

Hostnames	180-218-104-153.dynamic.twmbroadband.net
Domains	twmbroadband.net
Country	Taiwan
City	Fengshan
Organization	TFN MEDIA CO., LTD.
ISP	UNION BROADBAND NETWORK
ASN	AS24164

WebTechnologies

CDN

JavaScript libraries

UI frameworks

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487	7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-3618	7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2020-23064	6.1Cross Site Scripting vulnerability in jQuery 2.2.0 through 3.x before 3.5.0 allows a remote attacker to execute arbitrary code via the <options> element.
CVE-2020-11023	6.1In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2020-11022	6.1In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2019-11358	6.1jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
CVE-2018-14042	6.1In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip.
CVE-2018-14041	6.1In Bootstrap before 4.1.2, XSS is possible in the data-target property of scrollspy.
CVE-2018-14040	6.1In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute.

OpenPorts

443 554

-1084902558 | 2024-04-10T19:03:49.802009

443 / tcp

HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Wed, 10 Apr 2024 19:03:57 GMT
Content-Type: text/html
Content-Length: 43138
Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT
Connection: keep-alive
ETag: "0-a882"
Cache-Control: max-age=0, must-revalidate
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Embedder-Policy: require-corp
Accept-Ranges: bytes

SSL Certificate

Certificate:
    Data:
        Version: 1 (0x0)
        Serial Number:
            b0:14:80:87:cd:28:50:2d
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=TW, ST=Taiwan, L=Taipei, O=iCatch Inc., OU=R&D/emailAddress=tech.support@icatchinc.com, CN=iCatch Inc. DVR WebService
        Validity
            Not Before: Dec 17 05:32:06 2019 GMT
            Not After : Dec 14 05:32:06 2029 GMT
        Subject: C=TW, ST=Taiwan, L=Taipei, O=iCatch Inc., OU=R&D/emailAddress=tech.support@icatchinc.com, CN=iCatch Inc. DVR WebService
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d2:1e:4d:59:8a:87:ba:f0:3c:44:a1:f7:1a:ec:
                    01:f0:b5:0c:b9:e1:c0:b6:ff:89:66:73:d1:ba:c2:
                    8f:30:8b:97:07:68:cc:13:ef:4c:de:00:de:96:45:
                    db:b3:05:e2:bd:cf:de:75:be:f8:f2:3c:bf:cf:4d:
                    77:e3:46:f7:af:21:f2:15:b5:2b:88:c3:d7:ff:fb:
                    e1:11:f0:55:73:98:6d:f5:e9:08:12:06:2b:70:79:
                    d2:1a:18:87:14:1b:80:1c:f2:a7:1c:15:c9:60:71:
                    20:92:66:cb:ad:2a:17:6b:fe:65:f4:83:27:58:9c:
                    ff:c6:29:87:23:09:ac:ef:33:50:4a:a3:ae:af:eb:
                    c7:e3:5b:f1:e6:e1:1e:e7:44:b9:fa:3a:78:e2:fb:
                    21:58:09:32:65:db:78:2f:47:f2:02:7a:e3:22:38:
                    af:a9:a8:d2:ae:5b:59:30:af:1e:35:0b:a2:94:0c:
                    64:38:06:4f:97:26:ee:4d:6e:5d:75:1c:97:26:27:
                    38:ec:c3:83:d5:24:9b:66:eb:9c:fd:fe:9b:0d:b9:
                    d2:03:4e:d2:f8:44:f8:5f:f1:73:3d:bf:76:00:e9:
                    3d:a2:8c:96:f9:f3:d2:95:31:12:30:0c:57:89:0b:
                    93:72:9e:f1:a6:e5:88:d6:b4:99:36:e9:fe:70:64:
                    b9:01
                Exponent: 65537 (0x10001)
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        35:f8:80:3d:4e:0d:13:c3:29:6e:e6:6d:90:35:62:ec:76:3d:
        56:06:b2:eb:57:46:27:d9:41:b7:45:75:6d:d6:e9:29:75:d7:
        23:f9:1c:a7:29:3c:da:dd:92:2b:18:7c:bb:2f:4c:27:43:ee:
        2f:f2:de:7b:85:54:5a:de:64:8a:e6:9b:ab:4a:39:ce:d0:c3:
        04:01:b4:29:58:fe:db:5a:d7:90:cd:ef:33:18:56:45:ea:81:
        65:01:54:4d:a8:26:fe:2a:46:41:7e:4c:50:9b:b9:b0:5f:b5:
        df:34:e9:48:22:be:54:46:7e:df:95:15:13:66:7f:12:2e:5b:
        c2:b0:67:fc:30:10:59:ef:4e:47:48:20:a5:83:5a:27:5a:fb:
        1b:9e:29:66:99:6d:ef:6b:b3:0c:51:5c:92:9e:f4:56:cd:2b:
        4d:4e:42:92:93:5c:99:12:c2:66:f3:f1:e5:1a:17:6e:39:ae:
        62:e0:20:e1:45:88:5f:62:42:1d:84:9d:de:16:4d:16:46:54:
        de:e3:47:32:c4:8d:af:ae:d6:c4:7b:15:15:12:ae:91:91:f1:
        fa:56:00:54:14:28:43:17:17:f0:02:50:ec:40:56:20:dc:0a:
        08:68:c2:5c:c0:bb:71:9d:6a:12:23:20:e0:27:6a:64:92:e5:
        83:b7:d2:ba

-940471364 | 2024-04-11T10:43:36.151479

554 / tcp

RTSP/1.0 200 OK
CSeq: 1
Public: OPTIONS, GET_PARAMETER, DESCRIBE, SETUP, TEARDOWN, PLAY

180.218.104.153

Last Seen: 2024-04-11

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-1084902558 | 2024-04-10T19:03:49.802009
443 / tcp

nginx1.20.1

-940471364 | 2024-04-11T10:43:36.151479
554 / tcp

Products

Pricing

Contact Us

180.218.104.153

Last Seen: 2024-04-11

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-1084902558 | 2024-04-10T19:03:49.802009 443 / tcp

nginx1.20.1

-940471364 | 2024-04-11T10:43:36.151479 554 / tcp

Products

Pricing

Contact Us

-1084902558 | 2024-04-10T19:03:49.802009
443 / tcp

-940471364 | 2024-04-11T10:43:36.151479
554 / tcp