| Hostnames |
clinicaesthetics.ro whmpanels.com server-0394.whmpanels.com |
| Domains | clinicaesthetics.ro whmpanels.com |
| Country | Romania |
| City | Bucharest |
| Organization | ROMARG SRL |
| ISP | ROMARG SRL |
| ASN | AS205275 |
Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.
| CVE-2020-11023 | 4.3In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0. |
| CVE-2020-11022 | 4.3In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0. |
| CVE-2019-11358 | 4.3jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype. |
1640351248 | 2024-05-19T21:50:06.94708280 / tcp
HTTP/1.1 404 Not Found Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 1163 date: Sun, 19 May 2024 21:50:04 GMT server: LiteSpeed x-xss-protection: 1; mode=block x-content-type-options: nosniff
1559185454 | 2024-05-02T03:19:26.413084143 / tcp
* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE NAMESPACE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready.
* CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE NAMESPACE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN
A001 OK Pre-login capabilities listed, post-login capabilities have more.
* ID ("name" "Dovecot")
A002 OK ID completed.
A003 BAD Error in IMAP command received by server.
* BYE Logging out
A004 OK Logout completed.
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:a3:aa:f5:e7:4b:83:64:18:c9:53:15:3b:87:a8:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
Validity
Not Before: Mar 26 00:00:00 2024 GMT
Not After : Apr 26 23:59:59 2025 GMT
Subject: CN=*.whmpanels.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:9e:fc:58:9e:fb:f3:fb:18:a2:f6:d8:d3:1f:f5:
d6:bd:c9:2b:04:e2:3a:f1:b2:e2:81:d2:cb:26:5c:
e5:6d:8b:ca:4f:91:fb:36:b2:a5:94:68:d6:4b:c0:
79:1f:63:ea:68:81:f2:ab:11:41:bd:6d:72:15:c7:
e1:e8:2a:ae:3f:69:36:ee:37:74:46:02:13:aa:46:
ca:9f:21:e6:f8:3c:f6:c3:30:b7:cf:02:37:46:af:
54:d0:33:9e:f1:b7:f6:ff:4b:8c:4e:ee:ef:ef:78:
4a:1b:c5:b3:b0:f8:e9:3e:a9:f8:62:80:af:bf:97:
79:07:a3:ee:a8:35:32:82:18:4e:db:7c:c3:16:b2:
70:73:57:12:5d:b0:d3:c1:13:c1:97:05:41:07:54:
3b:c4:5b:53:89:38:98:9c:67:99:77:27:af:25:73:
94:91:c2:d1:15:7d:ca:14:63:a7:63:57:e4:d7:d0:
4b:5b:02:32:c1:49:3c:47:f0:fc:a9:59:90:56:a9:
9e:3c:87:20:9f:de:48:cd:16:b3:b8:94:bb:49:9b:
1c:da:71:57:5a:bd:c9:f4:0c:6f:ad:4a:61:08:f6:
fe:6d:75:cb:19:09:6a:23:dc:42:17:7c:c9:dc:b4:
e1:83:c6:08:79:2a:d3:2f:ba:4b:61:1f:bf:08:f0:
5c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Authority Key Identifier:
8D:8C:5E:C4:54:AD:8A:E1:77:E9:9B:F9:9B:05:E1:B8:01:8D:61:E1
X509v3 Subject Key Identifier:
71:84:C4:53:9F:D5:BA:FD:DE:60:74:65:48:0B:EF:8D:99:09:6B:BD
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Certificate Policies:
Policy: 1.3.6.1.4.1.6449.1.2.2.7
CPS: https://sectigo.com/CPS
Policy: 2.23.140.1.2.1
Authority Information Access:
CA Issuers - URI:http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt
OCSP - URI:http://ocsp.sectigo.com
X509v3 Subject Alternative Name:
DNS:*.whmpanels.com, DNS:whmpanels.com
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
Timestamp : Mar 26 08:31:28.616 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:8B:7B:9C:DB:29:B8:30:5E:EA:E7:9C:
31:8C:AA:83:B4:00:29:55:9C:22:3D:C0:5C:B6:18:9D:
B5:CD:4A:60:18:02:21:00:E2:D3:6A:98:63:69:BE:9E:
42:23:E0:DD:77:8A:60:B7:15:51:78:EE:A6:17:F6:4A:
F5:C2:15:C1:65:62:D0:B7
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
Timestamp : Mar 26 08:31:28.568 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:87:15:7E:45:4B:E4:E5:C7:87:E0:3E:
23:9D:AE:3D:D5:77:78:09:A4:59:E2:84:35:B9:C1:66:
02:7A:68:A8:7E:02:21:00:E8:61:C1:2A:ED:47:4E:88:
B4:27:5D:3B:76:B0:70:F5:76:C4:AF:C9:0C:33:EB:FF:
97:3B:80:5D:AD:2D:01:A7
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
Timestamp : Mar 26 08:31:28.568 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:73:BA:BC:93:5A:1A:EB:DB:CC:76:AD:FD:
EF:79:DD:7B:52:EF:24:14:E8:46:A8:0F:AB:5F:48:56:
7C:7C:3C:82:02:21:00:E0:18:99:09:24:E7:26:B7:E5:
1F:B2:54:CA:8F:78:EA:D3:A6:77:23:16:51:51:AA:70:
46:8B:57:52:76:E6:8B
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
4e:f6:d9:39:3a:db:dc:95:86:05:1a:fc:1e:b7:11:b6:84:51:
25:7a:2a:2a:9d:77:39:61:c7:e6:50:e8:6d:37:8c:ac:42:8a:
ce:1a:6a:68:25:a0:35:52:80:0c:42:bf:9b:d8:84:79:1d:2d:
6a:7c:04:1c:68:b4:7e:9d:5e:6f:33:04:4d:cf:dc:fa:85:33:
c3:38:8d:a7:4b:8e:23:f4:3b:d0:dc:45:97:f7:14:38:54:14:
01:5e:3e:44:8a:ae:ff:db:dd:de:ef:02:83:da:96:f7:e9:ca:
4a:43:29:a7:d5:50:60:14:36:16:e2:2c:34:b5:6f:6f:03:ec:
88:33:b4:cb:0c:04:14:54:d7:9f:25:12:7f:8b:fd:7c:e8:f0:
7d:0a:ae:46:7c:1d:9d:eb:c1:06:c9:3d:82:5f:ed:fc:d2:12:
7c:8c:d7:76:ab:03:d5:40:bb:e6:28:08:07:09:8f:d5:2e:c4:
4b:c8:cb:ae:5b:bc:30:77:0f:20:0e:6e:3a:f8:07:d6:92:72:
d7:5f:79:de:b8:79:07:58:5c:17:00:19:50:9b:16:54:04:0d:
1b:9a:48:b4:e0:20:16:b7:ef:86:60:04:a0:35:d6:5e:1b:7a:
83:82:d1:32:7b:e1:33:ee:0e:8d:e0:e3:15:ee:1c:ca:61:02:
6a:f1:2f:95
-1560430414 | 2024-05-20T20:32:24.023155443 / tcp
HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=31536000 expires: Tue, 20 May 2025 20:32:17 GMT content-type: text/html last-modified: Tue, 12 Mar 2024 20:03:26 GMT accept-ranges: bytes content-length: 46080 date: Mon, 20 May 2024 20:32:17 GMT server: LiteSpeed x-xss-protection: 1; mode=block x-content-type-options: nosniff alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:4b:c5:42:25:a7:a7:10:b4:d6:9c:28:ce:28:6e:50:c4:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=Let's Encrypt, CN=R3
Validity
Not Before: May 10 06:02:33 2024 GMT
Not After : Aug 8 06:02:32 2024 GMT
Subject: CN=clinicaesthetics.ro
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:d0:f6:e7:22:0e:31:73:9d:e0:79:98:22:5f:e9:
4e:90:9f:8f:57:7f:24:2f:1b:d6:48:c8:f6:18:21:
f0:11:d9:6b:e9:f0:77:ed:7f:cd:71:5b:d8:98:f3:
54:52:53:0c:a3:50:29:2d:c3:3c:e5:a3:45:86:48:
d1:a0:95:6f:13:bf:89:09:06:25:e0:93:05:5f:2e:
a2:0b:39:92:b4:80:5e:74:19:04:95:0b:67:e4:eb:
5b:d8:ae:f7:a5:50:ad:ec:6a:62:62:2c:40:23:d1:
43:6c:c3:03:10:55:23:1c:ed:a3:a2:b2:12:2e:13:
19:d9:1c:9a:84:74:c2:49:4e:b9:bd:41:a0:57:70:
80:d6:a1:f8:39:93:31:a1:d7:f6:0d:d8:86:fc:10:
ca:fc:12:e0:09:73:49:1d:47:10:bc:bf:11:32:8a:
4d:75:3b:f0:34:8b:85:ad:92:12:c8:26:4e:89:cc:
94:0b:8a:e7:a7:0a:9d:69:54:45:97:8e:c9:92:04:
66:6d:14:78:a6:1d:c7:aa:fa:4f:86:a2:9d:47:a2:
d2:8a:3b:8c:e3:a6:4b:b3:33:e4:11:be:eb:dd:0f:
39:90:11:33:6d:eb:c0:5c:7d:d8:39:45:ce:ea:24:
96:3a:ab:7e:f7:fe:37:11:08:c8:78:d8:88:fd:d0:
7a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
43:F8:BB:DC:5B:B8:86:28:E5:1E:07:2F:0B:2B:E8:92:6A:AF:6E:5D
X509v3 Authority Key Identifier:
14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
Authority Information Access:
OCSP - URI:http://r3.o.lencr.org
CA Issuers - URI:http://r3.i.lencr.org/
X509v3 Subject Alternative Name:
DNS:*.clinicaesthetics.ro, DNS:clinicaesthetics.ro
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
Timestamp : May 10 07:02:33.410 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:9E:DE:2A:DF:4B:FA:5E:2F:4C:E8:39:
51:B3:39:82:F2:F6:A6:C6:37:A5:27:C5:04:EE:83:64:
C6:93:B2:CE:24:02:20:7A:85:5B:C5:B5:6A:78:97:6E:
5F:B3:AE:2C:8B:D9:39:10:8C:0A:E3:D1:CA:D6:26:2F:
C4:8D:1E:64:4B:3C:E8
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
Timestamp : May 10 07:02:33.403 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:7A:02:E3:BF:17:BE:CD:F3:D6:B0:4B:DD:
BF:CB:BA:C9:47:6C:DF:30:FD:D5:2D:A0:7B:65:BE:2E:
C7:A4:06:50:02:21:00:BF:27:78:53:01:FE:4F:66:6F:
26:49:66:4A:8D:F6:2C:80:31:31:4B:47:A2:1C:FC:EC:
26:D2:AC:92:07:8D:25
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
a2:d7:64:dd:7e:55:ff:53:eb:f5:f4:59:02:2d:57:e0:75:6a:
81:a2:5c:c6:62:cf:aa:74:14:9f:36:4c:87:29:e5:dc:91:99:
4e:70:ee:dc:f8:83:7c:90:7b:37:b2:85:75:6f:ad:81:8f:22:
95:79:3d:4f:ea:89:59:b7:d8:12:2a:bc:2c:7f:61:6a:16:0f:
fb:f5:75:27:76:79:71:b0:be:f5:94:be:ca:5c:45:f5:aa:0a:
9a:6a:ff:7c:0a:d6:a1:3d:0d:62:2b:3d:54:e3:68:56:1b:a0:
c6:b9:fb:75:cd:35:76:c2:96:51:01:c6:1a:48:6d:d0:0a:a5:
69:2b:e7:ad:1f:87:a4:ab:33:93:c8:83:e0:39:5b:82:70:5c:
c5:97:86:ef:1a:30:fa:85:53:17:47:cd:f6:5c:5d:7d:5f:a1:
22:45:02:96:a9:fb:c5:dc:77:a1:0b:76:87:cf:4d:4a:64:5b:
08:5a:10:55:20:56:ae:40:9c:b4:81:e9:66:5c:24:6a:4e:bc:
eb:0f:23:9f:12:58:aa:00:f2:be:a5:df:d0:ed:83:c9:93:90:
89:78:c9:ad:27:76:a8:af:6f:04:e8:8c:1c:03:76:a5:10:e4:
99:39:82:34:69:bb:73:fe:ed:4c:db:3e:83:8e:77:29:42:3b:
85:fc:50:f2
-1354584663 | 2024-05-15T00:22:44.2208462082 / tcp
HTTP/1.1 200 OK Date: Wed, 15 May 2024 00:22:40 GMT Content-Length: 1440 Connection: keep-alive Cache-Control: no-cache, no-store, must-revalidate, max-age=0 Cache-Control: no-store, max-age=0 Server: imunify360-webshield/1.21