Shodan

195.181.166.158

Regular View Raw Data
Last Seen: 2024-05-17

GeneralInformation

Hostnames b-cdn.net
edge-725.bunnyinfra.net
Domains b-cdn.net bunnyinfra.net 
Country Sweden
City Stockholm
Organization Datacamp Limited
ISP Datacamp Limited
ASN AS60068

WebTechnologies

Blogs
WordPress
CMS
WordPress
Databases
MySQL
JavaScript libraries
jQuery
jQuery Migrate3.3.2
Photo galleries
Slider Revolution6.6.5
Programming languages
PHP
SEO
Yoast SEO20.4
Widgets
Slider Revolution6.6.5
WordPress plugins
Yoast SEO20.4

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2022-37454 The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties. This occurs in the sponge function interface.
CVE-2022-31629 In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the vulnerability enables network and same-site attackers to set a standard insecure cookie in the victim's browser which is treated as a `__Host-` or `__Secure-` cookie by PHP applications.
CVE-2022-31628 In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress "quines" gzip files, resulting in an infinite loop.
CVE-2021-21707 5.0In PHP versions 7.3.x below 7.3.33, 7.4.x below 7.4.26 and 8.0.x below 8.0.13, certain XML parsing functions, like simplexml_load_file(), URL-decode the filename passed to them. If that filename contains URL-encoded NUL character, this may cause the function to interpret this as the end of the filename, thus interpreting the filename differently from what the user intended, which may lead it to reading a different file than intended.
CVE-2021-21706 4.3In PHP versions 7.3.x below 7.3.31, 7.4.x below 7.4.24 and 8.0.x below 8.0.11, in Microsoft Windows environment, ZipArchive::extractTo may be tricked into writing a file outside target directory when extracting a ZIP file, thus potentially causing files to be created or overwritten, subject to OS permissions.
CVE-2021-21705 5.0In PHP versions 7.3.x below 7.3.29, 7.4.x below 7.4.21 and 8.0.x below 8.0.8, when using URL validation functionality via filter_var() function with FILTER_VALIDATE_URL parameter, an URL with invalid password field can be accepted as valid. This can lead to the code incorrectly parsing the URL and potentially leading to other security implications - like contacting a wrong server or making a wrong access decision.
CVE-2021-21704 4.3In PHP versions 7.3.x below 7.3.29, 7.4.x below 7.4.21 and 8.0.x below 8.0.8, when using Firebird PDO driver extension, a malicious database server could cause crashes in various database functions, such as getAttribute(), execute(), fetch() and others by returning invalid response data that is not parsed correctly by the driver. This can result in crashes, denial of service or potentially memory corruption.
CVE-2021-21703 6.9In PHP versions 7.3.x up to and including 7.3.31, 7.4.x below 7.4.25 and 8.0.x below 8.0.12, when running PHP FPM SAPI with main FPM daemon process running as root and child worker processes running as lower-privileged users, it is possible for the child processes to access memory shared with the main process and write to it, modifying it in a way that would cause the root process to conduct invalid memory reads and writes, which can be used to escalate privileges from local unprivileged user to the root user.
CVE-2017-8923 7.5The zend_string_extend function in Zend/zend_string.h in PHP through 7.1.5 does not prevent changes to string objects that result in a negative length, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact by leveraging a script's use of .= with a long string.
CVE-2013-2220 7.5Buffer overflow in the radius_get_vendor_attr function in the Radius extension before 1.2.7 for PHP allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large Vendor Specific Attributes (VSA) length value.
CVE-2007-3205 5.0The parse_str function in (1) PHP, (2) Hardened-PHP, and (3) Suhosin, when called without a second parameter, might allow remote attackers to overwrite arbitrary variables by specifying variable names and values in the string to be parsed. NOTE: it is not clear whether this is a design limitation of the function or a bug in PHP, although it is likely to be regarded as a bug in Hardened-PHP and Suhosin.

OpenPorts 

326112459 | 2024-05-14T20:29:40.433054
22 / tcp 
307358080 | 2024-05-16T20:28:27.903253
80 / tcp 
1694124378 | 2024-05-17T03:26:59.495650
443 / tcp 
199333125 | 2024-05-15T22:58:16.897953
1935 / tcp 
-945640099 | 2024-05-15T14:42:28.443924
6000 / tcp 
1252689081 | 2024-05-15T22:51:36.184171
6001 / tcp 
307358080 | 2024-05-12T10:28:44.124004
6002 / tcp 
-815676549 | 2024-05-01T07:52:39.787333
7001 / tcp 
307358080 | 2024-04-21T05:52:15.157918
7003 / tcp 
307358080 | 2024-04-28T01:43:43.723130
7004 / tcp 
683753383 | 2024-05-03T00:57:30.391566
8082 / tcp 
1642372679 | 2024-05-16T13:06:46.005642
8085 / tcp 
748850419 | 2024-05-14T10:56:47.764158
8181 / tcp



Products
Pricing
Contact Us

Shodan ® - All rights reserved