Shodan

37.143.11.28

Regular View Raw Data
Last Seen: 2024-05-03
Tags:
eol-product

GeneralInformation

Hostnames hosted-by.ihc.ru
veronese.shop
www.veronese.shop
Domains ihc.ru veronese.shop 
Country Russian Federation
City Moscow
Organization IHC.RU network in Digital Hub
ISP EuroByte LLC
ASN AS210079
Operating System Linux

WebTechnologies

JavaScript libraries
jQuery1.11.1
jQuery Migrate1.2.1

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487 The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-3618 5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017 6.8A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.
CVE-2020-11023 4.3In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2020-11022 4.3In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2019-11358 4.3jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
CVE-2015-9251 4.3jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.

OpenPorts 

-1023243386 | 2024-04-15T09:11:16.514883
21 / tcp 
1831865489 | 2024-05-03T15:33:17.554039
22 / tcp 
1001126579 | 2024-04-30T21:39:09.422817
80 / tcp 
-282382297 | 2024-04-30T23:28:18.877760
123 / udp 
1001126579 | 2024-04-24T07:17:26.701080
443 / tcp



Products
Pricing
Contact Us

Shodan ® - All rights reserved