GeneralInformation

Hostnames	beam.vecer.com kibana.beam.vecer.com segments.beam.vecer.com tracker.beam.vecer.com campaign.vecer.com mailer.vecer.com sso.vecer.com adminer.sso.vecer.com uporabnik.vecer.com
Domains	vecer.com
Country	Slovenia
City	Ljubljana
Organization	Salomon d.o.o.
ISP	Salomon d.o.o.
ASN	AS41543

WebTechnologies

JavaScript libraries

jQuery1.11.2

UI frameworks

Bootstrap

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487	The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-3618	5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2020-11023	4.3In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2020-11022	4.3In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2019-11358	4.3jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
CVE-2015-9251	4.3jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.

OpenPorts

22 80 443

1018919602 | 2024-05-09T03:36:10.077641

22 / tcp

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.11
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABgQCq/BNz1YDEzx0/RiOn/SfVPMVZ2d8uLY0tvnaJGxhPnt20
F2HU8VVun6vtRzTn0rLaA0X7xcfWWQnhM2/lDVtYdgM+HOI8YaZ7IfVU8Fvheb+4s5W3/y01cEaM
aKKkAfpQcl4CGzYABpgjve/ZjLlf9MrJm+Qx63vDs84EdQrmx63pbmcZQwoqGsC4SHZTRt0DU3Z8
DrMIk2JNZ3FsHsIMXJbPZbSvZdvPxYCc6eiUJzxdJ8fEcQCY7ZY5LyoiQiXWxeK9L+epYYAUMSX6
nGXJ+cyhS9s+EUgCt4BapiQdPA3FJjkzEY8C0noTeyq9CPQnr8ZZxGmFtKezCDz+Rr4S6LgMeCil
Gm3kzYfKdsS3rw5uJy554k5URSWMto+MveIhQlvhBjktbMthFjJ5/UFSES1wxQ+QBVKCapxw2JSU
XGQKHM6MP9w8MPk52lFoh3baMTYRpZz2Viy541D+jEektmxfsjT89yfLpSJHj0OKokLY2vI8OnEs
slc/TlBmJOs=
Fingerprint: 67:5c:5b:dc:f3:07:bf:54:c6:52:9c:09:4b:e3:d8:a2

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256
	kex-strict-s-v00@openssh.com

Server Host Key Algorithms:
	rsa-sha2-512
	rsa-sha2-256
	ssh-rsa
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

1651973090 | 2024-05-09T05:24:22.835667

80 / tcp

HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Thu, 09 May 2024 05:24:22 GMT
Content-Type: text/html
Content-Length: 612
Last-Modified: Tue, 16 Nov 2021 14:44:02 GMT
Connection: keep-alive
ETag: "6193c3b2-264"
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
X-Frame-Options: sameorigin
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Accept-Ranges: bytes

51949141 | 2024-05-06T10:58:35.936890

443 / tcp

HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Mon, 06 May 2024 10:58:35 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: Nette Framework 3
Set-Cookie: _nss=1; path=/; secure; HttpOnly; SameSite=Strict
Vary: X-Requested-With
Set-Cookie: PHPSESSID=57306d4810ea575daac3249fb21805c6; expires=Mon, 20-May-2024 10:58:35 GMT; Max-Age=1209600; path=/; secure; HttpOnly; SameSite=Lax
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
X-Frame-Options: sameorigin
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:91:98:e8:b9:14:2a:1f:25:3c:e6:1c:3a:62:90:4e:c4:8e
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R3
        Validity
            Not Before: Apr  5 23:06:52 2024 GMT
            Not After : Jul  4 23:06:51 2024 GMT
        Subject: CN=adminer.sso.vecer.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:e5:65:7b:ad:cc:6a:39:68:fc:e3:75:f1:3c:4d:
                    46:1a:e3:34:e1:66:b8:8d:eb:fe:01:08:ca:4d:6a:
                    9d:51:53:5c:42:37:e5:a2:3d:0e:82:fe:63:37:6c:
                    f8:44:06:84:fb:50:bc:f4:c4:f9:2f:70:96:cb:4b:
                    72:e2:94:9a:c5:26:b1:24:c2:bf:d0:30:99:14:dc:
                    66:44:34:71:66:ce:08:94:b6:50:39:fd:e4:5f:da:
                    5c:ed:01:4e:3a:55:a2:8d:8a:28:eb:a4:32:b9:22:
                    38:00:01:1e:55:0c:b2:9f:d4:7f:9e:8e:53:f6:9d:
                    27:c9:fa:ed:6e:b4:c7:e7:f5:5c:cb:3e:90:17:8f:
                    ee:df:aa:40:35:a2:33:0b:b9:47:70:d8:3c:b8:11:
                    5c:75:89:1c:c4:16:1f:2e:93:56:cc:49:b0:ad:7e:
                    f6:6d:f7:fc:cb:e3:b5:cb:4d:cb:42:bf:1e:96:5b:
                    e8:17:6c:62:e7:45:1b:7e:6f:3d:64:25:9d:56:dc:
                    92:99:08:47:5b:a8:a7:1c:8a:60:5c:08:e6:1c:5a:
                    cf:be:c5:73:c2:ce:bd:2d:ad:09:61:37:20:b0:d8:
                    08:35:84:1f:a8:51:a4:88:d5:38:46:cf:90:85:d7:
                    3a:31:a6:60:37:d1:83:e8:e0:1f:32:58:d0:69:ec:
                    21:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                67:BD:53:72:62:EC:32:F7:6B:A3:DC:A9:6B:EB:A8:5B:D1:86:B6:7D
            X509v3 Authority Key Identifier: 
                14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
            Authority Information Access: 
                OCSP - URI:http://r3.o.lencr.org
                CA Issuers - URI:http://r3.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:adminer.sso.vecer.com, DNS:beam.vecer.com, DNS:campaign.vecer.com, DNS:kibana.beam.vecer.com, DNS:mailer.vecer.com, DNS:segments.beam.vecer.com, DNS:sso.vecer.com, DNS:tracker.beam.vecer.com, DNS:uporabnik.vecer.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
                                32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
                    Timestamp : Apr  6 00:06:52.274 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:74:3F:06:18:9F:82:07:F8:EA:54:C7:A7:
                                A4:CD:DF:DF:DB:CE:D6:BF:FA:2D:A5:E9:A3:A6:22:B4:
                                84:5F:09:38:02:21:00:DB:AC:14:1B:EE:01:1D:85:13:
                                2F:01:4E:F4:04:2E:B9:95:BC:80:98:A0:D4:D8:02:F4:
                                CE:A3:48:28:B9:6C:36
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
                                1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
                    Timestamp : Apr  6 00:06:52.261 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:2F:DC:F2:EA:59:6C:D4:F8:CF:D1:92:A4:
                                86:95:04:4B:FC:A7:38:ED:D7:42:A0:45:3B:3C:B4:CC:
                                14:2C:92:1B:02:20:28:FE:34:DD:3A:E3:A7:CC:76:D3:
                                EB:F8:76:13:18:3F:3E:48:D0:11:33:04:C1:0E:D2:F1:
                                F8:89:FD:B9:B4:A1
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        2c:9a:53:65:ea:65:d1:70:eb:90:59:11:16:4f:46:51:6e:c8:
        04:88:bf:65:87:b2:3a:16:1e:7e:e5:d9:52:d0:a9:63:c0:9b:
        97:bb:6a:a1:03:35:35:a8:d3:20:e4:f5:cb:bb:f2:b2:11:39:
        ea:98:9b:58:e9:0c:43:27:e3:a2:d3:a9:2b:59:bc:dd:49:b8:
        5e:98:30:5a:54:3c:ff:63:af:32:a6:0d:d6:de:47:27:6e:44:
        21:4e:73:62:9c:0d:ef:ee:34:d2:05:73:6c:a5:f6:f9:bb:e3:
        e9:18:77:85:ea:51:8a:5f:00:dd:5f:a9:57:ba:e3:09:b3:13:
        71:92:b4:80:53:c8:6e:4b:e6:49:2b:b7:d6:48:72:7e:b5:92:
        77:e4:53:64:6c:27:65:76:c7:e3:c5:f5:54:23:53:08:a0:c8:
        aa:f3:7e:e8:a8:11:45:fb:1c:ea:9c:6a:c0:74:75:12:74:df:
        bd:de:dc:d0:d7:b6:c2:18:e3:2b:35:e1:c0:70:fa:60:5c:f2:
        76:65:3a:d3:f1:c4:e1:61:05:bb:0b:73:f0:f3:59:57:a8:8c:
        17:3c:4d:c8:4d:32:36:d7:1b:34:4e:fe:ca:4f:df:3c:df:2c:
        e5:15:46:04:d8:8b:e4:5b:85:fb:53:b8:10:00:69:37:3c:19:
        62:eb:9f:74

195.95.158.81

Last Seen: 2024-05-09

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

1018919602 | 2024-05-09T03:36:10.077641
22 / tcp

OpenSSH8.2p1 Ubuntu-4ubuntu0.11

1651973090 | 2024-05-09T05:24:22.835667
80 / tcp

nginx1.20.2

51949141 | 2024-05-06T10:58:35.936890
443 / tcp

nginx1.20.2

Products

Pricing

Contact Us

195.95.158.81

Last Seen: 2024-05-09

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

1018919602 | 2024-05-09T03:36:10.077641 22 / tcp

OpenSSH8.2p1 Ubuntu-4ubuntu0.11

1651973090 | 2024-05-09T05:24:22.835667 80 / tcp

nginx1.20.2

51949141 | 2024-05-06T10:58:35.936890 443 / tcp

nginx1.20.2

Products

Pricing

Contact Us

1018919602 | 2024-05-09T03:36:10.077641
22 / tcp

1651973090 | 2024-05-09T05:24:22.835667
80 / tcp

51949141 | 2024-05-06T10:58:35.936890
443 / tcp