37.143.15.77

Regular View Raw Data
Last Seen: 2024-05-10

GeneralInformation

Hostnames carsseller.ru
www.carsseller.ru
Domains carsseller.ru 
Country Russian Federation
City Moscow
Organization IHC.RU network in Eserver
ISP EuroByte LLC
ASN AS210079

WebTechnologies

JavaScript libraries
Miscellaneous

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487 The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-3618 5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017 6.8A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.
CVE-2020-23064 6.1Cross Site Scripting vulnerability in jQuery 2.2.0 through 3.x before 3.5.0 allows a remote attacker to execute arbitrary code via the <options> element.
CVE-2020-11023 6.1In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2020-11022 6.1In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2019-11358 6.1jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
-1256193587 | 2024-04-21T06:21:08.715756
  
22 / tcp
2010027495 | 2024-04-16T16:59:22.466114
  
25 / tcp
582435681 | 2024-04-16T05:52:59.473892
  
53 / udp
-1380144528 | 2024-05-08T00:50:03.291770
  
80 / tcp
-1380144528 | 2024-05-07T15:02:41.575674
  
443 / tcp
861004395 | 2024-04-14T04:49:57.070796
  
587 / tcp
-784819759 | 2024-04-14T21:36:55.134911
  
995 / tcp
-1818294028 | 2024-05-10T04:11:44.619581
  
3306 / tcp
1116486466 | 2024-04-17T02:19:56.372762
  
8083 / tcp



Contact Us

Shodan ® - All rights reserved