149.30.246.111

Regular View Raw Data Timeline
Last Seen: 2025-04-06

GeneralInformation

Hostnames afmumen.com
m.afmumen.com
www.afmumen.com
bijiangsiwang.com
m.bijiangsiwang.com
www.bijiangsiwang.com
blhtny.com
m.blhtny.com
www.blhtny.com
cantonfair-dl.com
m.cantonfair-dl.com
www.cantonfair-dl.com
cc15.com
m.cc15.com
www.cc15.com
followculture.com
m.followculture.com
www.followculture.com
gshkx.com
m.gshkx.com
www.gshkx.com
gzkeetop.com
m.gzkeetop.com
www.gzkeetop.com
hcchair.com
m.hcchair.com
www.hcchair.com
its-110.com
m.its-110.com
www.its-110.com
kmyyhz.com
m.kmyyhz.com
www.kmyyhz.com
mbs001.com
m.mbs001.com
www.mbs001.com
qigaojidian.com
m.qigaojidian.com
www.qigaojidian.com
shangtecompany.com
m.shangtecompany.com
www.shangtecompany.com
shkunzhong.com
m.shkunzhong.com
www.shkunzhong.com
stsdw.com
m.stsdw.com
www.stsdw.com
tianzhenggroup.com
m.tianzhenggroup.com
www.tianzhenggroup.com
wanxiangtrade.com
m.wanxiangtrade.com
www.wanxiangtrade.com
xintuoedu.com
m.xintuoedu.com
www.xintuoedu.com
y-jr.com
m.y-jr.com
www.y-jr.com
ythexin.com
m.ythexin.com
www.ythexin.com
zhuogao6.com
m.zhuogao6.com
www.zhuogao6.com
Domains afmumen.com bijiangsiwang.com blhtny.com cantonfair-dl.com cc15.com followculture.com gshkx.com gzkeetop.com hcchair.com its-110.com kmyyhz.com mbs001.com qigaojidian.com shangtecompany.com shkunzhong.com stsdw.com tianzhenggroup.com wanxiangtrade.com xintuoedu.com y-jr.com ythexin.com zhuogao6.com 
Country Hong Kong
City Tseung Kwan O
Organization Cogent Communications
ISP SonderCloud Limited
ASN AS133199

WebTechnologies

JavaScript libraries

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2020(3)
CVE-2020-11023
6.9In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2020-11022
6.9In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2020-7656
6.1jquery prior to 1.9.0 allows Cross-site Scripting attacks via the load method. The load method fails to recognize and remove "<script>" HTML tags that contain a whitespace character, i.e: "</script >", which results in the enclosed script logic to be executed.
2019(1)
CVE-2019-11358
6.1jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
2015(1)
CVE-2015-9251
6.1jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.
2012(1)
CVE-2012-6708
6.1jQuery before 1.9.0 is vulnerable to Cross-site Scripting (XSS) attacks. The jQuery(strInput) function does not differentiate selectors from HTML in a reliable fashion. In vulnerable versions, jQuery determined whether the input was HTML by looking for the '<' character anywhere in the string, giving attackers more flexibility when attempting to construct a malicious payload. In fixed versions, jQuery only deems the input to be HTML if it explicitly starts with the '<' character, limiting exploitability only to attackers who can control the beginning of a string, which is far less common.

OpenPorts

21 / tcp
-1945558448 | 2025-04-03T18:57:45.834217
80 / tcp
-85749389 | 2025-04-06T02:57:26.533727
443 / tcp
-1866632497 | 2025-04-05T21:42:59.594845



Contact Us

Shodan ® - All rights reserved