Shodan

46.183.118.110

Regular View Raw Data
Last Seen: 2024-05-14

GeneralInformation

Hostnames 4bde751b-8747-45c8-ae47-505132ca20d6.clouding.host
socialpubli.com
www.socialpubli.com
Domains clouding.host socialpubli.com 
Country Spain
City Madrid
Organization Clouding.io Virtual Machine Hosting
ISP CLOUDI NEXTGEN SL
ASN AS49635
Operating System Ubuntu

WebTechnologies

CDN
Cloudflare
cdnjs
jQuery CDN
JavaScript libraries
jQuery3.3.1
Miscellaneous
Popper1.14.6

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-46118 RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did not enforce an HTTP request body limit, making it vulnerable for denial of service (DoS) attacks with very large messages. An authenticated user with sufficient credentials can publish a very large messages over the HTTP API and cause target node to be terminated by an "out-of-memory killer"-like mechanism. This vulnerability has been patched in versions 3.11.24 and 3.12.7.
CVE-2022-31008 RabbitMQ is a multi-protocol messaging and streaming broker. In affected versions the shovel and federation plugins perform URI obfuscation in their worker (link) state. The encryption key used to encrypt the URI was seeded with a predictable secret. This means that in case of certain exceptions related to Shovel and Federation plugins, reasonably easily deobfuscatable data could appear in the node log. Patched versions correctly use a cluster-wide secret for that purpose. This issue has been addressed and Patched versions: `3.10.2`, `3.9.18`, `3.8.32` are available. Users unable to upgrade should disable the Shovel and Federation plugins.
CVE-2021-32719 3.5RabbitMQ is a multi-protocol messaging broker. In rabbitmq-server prior to version 3.8.18, when a federation link was displayed in the RabbitMQ management UI via the `rabbitmq_federation_management` plugin, its consumer tag was rendered without proper <script> tag sanitization. This potentially allows for JavaScript code execution in the context of the page. The user must be signed in and have elevated permissions (manage federation upstreams and policies) for this to occur. The vulnerability is patched in RabbitMQ 3.8.18. As a workaround, disable the `rabbitmq_federation_management` plugin and use [CLI tools](https://www.rabbitmq.com/cli.html) instead.
CVE-2021-32718 3.5RabbitMQ is a multi-protocol messaging broker. In rabbitmq-server prior to version 3.8.17, a new user being added via management UI could lead to the user's bane being rendered in a confirmation message without proper `<script>` tag sanitization, potentially allowing for JavaScript code execution in the context of the page. In order for this to occur, the user must be signed in and have elevated permissions (other user management). The vulnerability is patched in RabbitMQ 3.8.17. As a workaround, disable `rabbitmq_management` plugin and use CLI tools for management operations and Prometheus and Grafana for metrics and monitoring.
CVE-2021-22117 4.6RabbitMQ installers on Windows prior to version 3.8.16 do not harden plugin directory permissions, potentially allowing attackers with sufficient local filesystem permissions to add arbitrary plugins.
CVE-2021-22116 4.3RabbitMQ all versions prior to 3.8.16 are prone to a denial of service vulnerability due to improper input validation in AMQP 1.0 client connection endpoint. A malicious user can exploit the vulnerability by sending malicious AMQP messages to the target RabbitMQ instance having the AMQP 1.0 plugin enabled.
CVE-2020-5419 4.6RabbitMQ versions 3.8.x prior to 3.8.7 are prone to a Windows-specific binary planting security vulnerability that allows for arbitrary code execution. An attacker with write privileges to the RabbitMQ installation directory and local access on Windows could carry out a local binary hijacking (planting) attack and execute arbitrary code.
CVE-2020-23064 Cross Site Scripting vulnerability in jQuery 2.2.0 through 3.x before 3.5.0 allows a remote attacker to execute arbitrary code via the <options> element.
CVE-2020-11023 4.3In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2020-11022 4.3In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2019-11358 4.3jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.

OpenPorts 

-1914751838 | 2024-05-14T17:23:08.065123
22 / tcp 
-1208417463 | 2024-05-08T21:48:29.137433
25 / tcp 
864306896 | 2024-05-12T09:35:28.962418
80 / tcp 
1952082069 | 2024-05-09T01:20:16.563464
110 / tcp 
-1267549069 | 2024-05-02T21:23:11.365368
143 / tcp 
864306896 | 2024-05-12T23:24:42.471278
443 / tcp 
-1623577654 | 2024-05-01T00:55:57.248672
465 / tcp 
-345981339 | 2024-04-20T13:17:24.653641
587 / tcp 
1520541986 | 2024-05-12T05:26:22.339454
993 / tcp 
-1001764030 | 2024-05-02T21:13:41.365507
995 / tcp 
-1060095501 | 2024-05-12T02:43:19.717902
3000 / tcp 
1697588976 | 2024-05-11T22:31:47.128468
3306 / tcp 
363190761 | 2024-05-12T11:36:44.166707
5672 / tcp 
1116486466 | 2024-05-11T19:54:02.878030
8083 / tcp



Products
Pricing
Contact Us

Shodan ® - All rights reserved