Shodan

208.72.222.35

Regular View Raw Data
Last Seen: 2024-04-27

GeneralInformation

Hostnames mklending.com
www.mklending.com
Domains mklending.com 
Country United States
City Los Angeles
Organization NexG
ISP NexG
ASN AS16848
Operating System Windows

WebTechnologies

JavaScript frameworks
Prototype
JavaScript libraries
jQuery1.11.3
Modernizr
UI frameworks
Bootstrap3.5
Widgets
FlexSlider

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2020-11023 4.3In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2020-11022 4.3In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2019-11358 4.3jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
CVE-2015-9251 4.3jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.
CVE-2010-3972 10.0Heap-based buffer overflow in the TELNET_STREAM_CONTEXT::OnSendData function in ftpsvc.dll in Microsoft FTP Service 7.0 and 7.5 for Internet Information Services (IIS) 7.0, and IIS 7.5, allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a crafted FTP command, aka "IIS FTP Service Heap Buffer Overrun Vulnerability." NOTE: some of these details are obtained from third party information.
CVE-2010-2730 9.3Buffer overflow in Microsoft Internet Information Services (IIS) 7.5, when FastCGI is enabled, allows remote attackers to execute arbitrary code via crafted headers in a request, aka "Request Header Buffer Overflow Vulnerability."
CVE-2010-1899 4.3Stack consumption vulnerability in the ASP implementation in Microsoft Internet Information Services (IIS) 5.1, 6.0, 7.0, and 7.5 allows remote attackers to cause a denial of service (daemon outage) via a crafted request, related to asp.dll, aka "IIS Repeated Parameter Request Denial of Service Vulnerability."

OpenPorts 

910170198 | 2024-04-27T13:43:34.626800
80 / tcp 
-375376562 | 2024-04-17T07:41:42.760687
135 / tcp 
-1565380869 | 2024-04-27T13:43:39.044052
443 / tcp 
1656507553 | 2024-04-15T17:09:26.437502
587 / tcp 
1223867270 | 2024-04-24T00:32:36.025836
1433 / tcp 
-1237486218 | 2024-04-15T06:35:25.666313
8443 / tcp



Products
Pricing
Contact Us

Shodan ® - All rights reserved