GeneralInformation

Hostnames	08dxh.com www.08dxh.com
Domains	08dxh.com
Country	Hong Kong
City	Tseung Kwan O
Organization	Posix Systems (Pty) Ltd
ISP	POWER LINE DATACENTER
ASN	AS132839

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2024(3)

CVE-2024-8305

6.5prepareUnique index may cause secondaries to crash due to incorrect enforcement of index constraints on secondaries, where in extreme cases may cause multiple secondaries crashing leading to no primaries. This issue affects MongoDB Server v6.0 versions prior to 6.0.17, MongoDB Server v7.0 versions prior to 7.0.13 and MongoDB Server v7.3 versions prior to 7.3.4

CVE-2024-7553

7.3Incorrect validation of files loaded from a local untrusted directory may allow local privilege escalation if the underlying operating systems is Windows. This may result in the application executing arbitrary behaviour determined by the contents of untrusted files. This issue affects MongoDB Server v5.0 versions prior to 5.0.27, MongoDB Server v6.0 versions prior to 6.0.16, MongoDB Server v7.0 versions prior to 7.0.12, MongoDB Server v7.3 versions prior 7.3.3, MongoDB C Driver versions prior to 1.26.2 and MongoDB PHP Driver versions prior to 1.18.1. Required Configuration: Only environments with Windows as the underlying operating system is affected by this issue

CVE-2024-6384

5.3"Hot" backup files may be downloaded by underprivileged users, if they are capable of acquiring a unique backup identifier. This issue affects MongoDB Enterprise Server v6.0 versions prior to 6.0.16, MongoDB Enterprise Server v7.0 versions prior to 7.0.11 and MongoDB Enterprise Server v7.3 versions prior to 7.3.3

2014(1)

CVE-2014-8180

5.5MongoDB on Red Hat Satellite 6 allows local users to bypass authentication by logging in with an empty password and delete information which can cause a Denial of Service.

OpenPorts

80 443 27017

80 / tcp

-85749389 | 2025-03-28T13:32:23.400950

Hashes

hash

-1288783720

http.dom_hash

1239617585

http.html_hash

-85749389

http.server_hash

-1340961475

http.title_hash

-1207101977

404 Not Found

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 28 Mar 2025 13:32:23 GMT
Content-Type: text/html
Content-Length: 138
Last-Modified: Wed, 19 Feb 2025 03:47:50 GMT
Connection: keep-alive
ETag: "67b55466-8a"
Accept-Ranges: bytes

443 / tcp

595181873 | 2025-03-20T20:18:53.872346

Hashes

hash

948276808

http.dom_hash

1783729154

http.favicon.hash

-614262549

http.html_hash

595181873

http.robots_hash

1330548294

http.server_hash

-1340961475

http.sitemap_hash

802687648

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 20 Mar 2025 20:18:53 GMT
Content-Type: text/html;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:e1:af:6a:2f:a6:e3:f2:1e:e3:8f:77:ef:1f:21:0b:5a:77
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R10
        Validity
            Not Before: Mar 12 12:46:24 2025 GMT
            Not After : Jun 10 12:46:23 2025 GMT
        Subject: CN=08dxh.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a6:8e:2b:94:1d:c6:8d:c2:34:d1:39:1c:b9:64:
                    3c:22:6a:c7:ff:9b:35:fe:c7:5e:ea:92:ec:78:0b:
                    4d:37:60:d4:75:27:f0:b1:d0:74:58:0c:66:9a:9f:
                    0e:ea:2d:c4:f0:7c:68:60:ca:b6:0e:3b:c3:66:a8:
                    0c:b9:60:c9:73:12:3c:d2:9f:e8:d6:5b:01:ce:37:
                    eb:d7:f6:a0:bc:93:c0:50:c5:de:12:d4:0f:4e:ab:
                    3c:fe:7f:b6:5c:06:18:32:2b:d6:ce:96:3e:35:5f:
                    c8:7b:88:95:51:8d:24:6d:4e:25:ef:15:ec:a0:fb:
                    1d:09:d3:68:85:b9:de:a2:07:28:73:b9:2f:2a:a9:
                    3a:a9:3a:ed:3c:7f:3f:5f:bb:04:2f:90:89:ba:da:
                    53:33:66:41:d3:4c:6d:71:16:dc:bc:3d:64:44:a1:
                    84:d2:07:c2:21:a5:b9:0a:1c:65:4d:ae:9e:e1:fd:
                    a2:f6:c5:f6:4e:e8:90:80:46:8b:23:4d:fb:c3:68:
                    06:e1:dd:93:e4:e5:c9:b5:b9:91:dc:4a:d4:b2:a0:
                    bb:bb:1e:ef:2e:bc:39:27:91:22:76:5c:e3:cb:f4:
                    e9:38:f9:7f:4e:67:4b:e9:cd:4b:17:9e:fc:a7:7e:
                    8c:d5:1c:e2:a2:8f:d6:44:3b:31:23:18:06:65:7b:
                    19:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                E3:91:D3:EE:99:36:25:0E:94:C0:64:87:2B:6A:9D:8A:07:CE:B7:47
            X509v3 Authority Key Identifier: 
                BB:BC:C3:47:A5:E4:BC:A9:C6:C3:A4:72:0C:10:8D:A2:35:E1:C8:E8
            Authority Information Access: 
                OCSP - URI:http://r10.o.lencr.org
                CA Issuers - URI:http://r10.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:08dxh.com, DNS:www.08dxh.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
                                1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
                    Timestamp : Mar 12 13:44:55.116 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:4E:C2:B0:03:A4:78:19:4A:6B:FB:D3:5E:
                                25:33:4F:44:CA:C3:D2:04:A3:08:D0:B7:B7:90:11:AD:
                                0C:B7:75:B8:02:21:00:B8:6B:C4:3D:4C:AC:C6:D9:93:
                                BB:D0:75:DF:27:3E:8D:4F:F9:F0:38:40:EE:AF:54:E4:
                                57:1A:8C:AA:A5:2C:EC
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DE:85:81:D7:50:24:7C:6B:CD:CB:AF:56:37:C5:E7:81:
                                C6:4C:E4:6E:D6:17:63:9F:8F:34:A7:26:C9:E2:BD:37
                    Timestamp : Mar 12 13:44:55.080 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:33:DF:43:BD:6D:0C:8E:98:24:EF:68:13:
                                A7:18:67:B7:35:6B:23:A0:57:67:F5:06:7A:BD:83:AF:
                                72:24:59:71:02:20:2A:20:95:B4:36:CB:7F:6C:A1:19:
                                F6:A0:15:77:9F:BD:3F:F2:EF:09:44:7F:21:BB:AB:57:
                                29:F7:2D:C3:B0:80
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        cf:27:d0:ed:df:ef:1d:fb:79:97:d6:84:c5:f5:62:88:05:92:
        1f:00:37:3f:43:e0:03:79:24:60:a6:9c:2e:ad:ec:bd:f0:9b:
        ba:3d:c0:9a:56:35:6b:84:8a:55:43:fd:9d:e5:62:0c:6c:5d:
        5e:f3:e0:30:a7:9c:29:8b:1f:65:f6:bb:1f:d6:59:8e:07:59:
        1d:f0:f3:73:08:85:8c:93:56:36:8e:cd:f0:c2:ee:2c:a2:25:
        9d:2d:ee:9e:6e:79:5f:37:c3:4b:48:6e:00:73:26:f7:85:36:
        ff:ae:4a:8c:36:4a:fd:49:ed:c3:5d:41:c2:44:9b:78:ff:24:
        74:97:f3:1e:e8:46:05:66:3a:25:f4:13:71:4f:13:64:9b:18:
        15:5f:2e:f2:e8:16:0f:d1:21:92:15:bc:1d:17:bb:4d:fb:5e:
        e5:7e:bf:97:5d:4c:f3:fd:80:8a:51:3b:c4:d9:8e:6d:77:91:
        1e:93:7a:9b:a6:74:d8:91:1a:ee:88:ec:b1:83:9b:6e:c5:c5:
        4c:2d:f5:9d:7d:0d:f7:6f:63:3c:1b:bd:04:62:52:08:cd:ad:
        7a:ee:a7:ee:05:e7:dd:aa:88:84:b9:ce:6d:27:be:ec:b6:88:
        e9:46:c6:81:e0:8f:de:c9:e6:99:28:77:93:8c:a4:b2:b7:2a:
        f5:f7:eb:d7

27017 / tcp

-228368960 | 2025-03-25T23:20:07.562453

MongoDB Server Information
Authentication partially enabled
{
    "storageEngines": [
        "devnull", 
        "wiredTiger"
    ], 
    "buildEnvironment": {
        "distarch": "x86_64", 
        "cc": "/opt/mongodbtoolchain/v4/bin/gcc: gcc (GCC) 11.3.0", 
        "cppdefines": "SAFEINT_USE_INTRINSICS 0 PCRE2_STATIC NDEBUG _XOPEN_SOURCE 700 _GNU_SOURCE _FORTIFY_SOURCE 2 ABSL_FORCE_ALIGNED_ACCESS BOOST_ENABLE_ASSERT_DEBUG_HANDLER BOOST_FILESYSTEM_NO_CXX20_ATOMIC_REF BOOST_LOG_NO_SHORTHAND_NAMES BOOST_LOG_USE_NATIVE_SYSLOG BOOST_LOG_WITHOUT_THREAD_ATTR BOOST_MATH_NO_LONG_DOUBLE_MATH_FUNCTIONS BOOST_SYSTEM_NO_DEPRECATED BOOST_THREAD_USES_DATETIME BOOST_THREAD_VERSION 5", 
        "cxxflags": "-Woverloaded-virtual -Wpessimizing-move -Wno-maybe-uninitialized -fsized-deallocation -Wno-deprecated -std=c++20", 
        "linkflags": "-Wl,--fatal-warnings -B/opt/mongodbtoolchain/v4/bin -gdwarf-5 -pthread -Wl,-z,now -fuse-ld=lld -fstack-protector-strong -gdwarf64 -Wl,--build-id -Wl,--hash-style=gnu -Wl,-z,noexecstack -Wl,--warn-execstack -Wl,-z,relro -Wl,--compress-debug-sections=none -Wl,-z,origin -Wl,--enable-new-dtags", 
        "ccflags": "-Werror -include mongo/platform/basic.h -ffp-contract=off -fasynchronous-unwind-tables -g2 -Wall -Wsign-compare -Wno-unknown-pragmas -Winvalid-pch -gdwarf-5 -fno-omit-frame-pointer -fno-strict-aliasing -O2 -march=sandybridge -mtune=generic -mprefer-vector-width=128 -Wno-unused-local-typedefs -Wno-unused-function -Wno-deprecated-declarations -Wno-unused-const-variable -Wno-unused-but-set-variable -Wno-missing-braces -fstack-protector-strong -gdwarf64 -Wa,--nocompress-debug-sections -fno-builtin-memcmp -Wimplicit-fallthrough=5", 
        "target_arch": "x86_64", 
        "distmod": "rhel70", 
        "target_os": "linux", 
        "cxx": "/opt/mongodbtoolchain/v4/bin/g++: g++ (GCC) 11.3.0"
    }, 
    "ok": 1.0, 
    "sysInfo": "deprecated", 
    "modules": [], 
    "openssl": {
        "compiled": "OpenSSL 1.0.1e-fips 11 Feb 2013", 
        "running": "OpenSSL 1.0.1e-fips 11 Feb 2013"
    }, 
    "javascriptEngine": "mozjs", 
    "version": "7.0.8", 
    "allocator": "tcmalloc", 
    "versionArray": [
        7, 
        0, 
        8, 
        0
    ], 
    "debug": false, 
    "maxBsonObjectSize": 16777216, 
    "bits": 64, 
    "gitVersion": "c5d33e55ba38d98e2f48765ec4e55338d67a4a64"
}

Vulnerabilities

1 3

160.124.6.146

Last Seen: 2025-03-28

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

80 / tcp

-85749389 | 2025-03-28T13:32:23.400950

Hashes

nginx

443 / tcp

595181873 | 2025-03-20T20:18:53.872346

Hashes

nginx

27017 / tcp

-228368960 | 2025-03-25T23:20:07.562453

MongoDB7.0.8

Products

Pricing

Contact Us

160.124.6.146

Last Seen: 2025-03-28

Tags:

GeneralInformation

Vulnerabilities All ports Port 27017 Latest CVSS

OpenPorts

80 / tcp -85749389 | 2025-03-28T13:32:23.400950

Hashes

nginx

443 / tcp 595181873 | 2025-03-20T20:18:53.872346

Hashes

nginx

27017 / tcp -228368960 | 2025-03-25T23:20:07.562453

MongoDB7.0.8

Products

Pricing

Contact Us

Vulnerabilities

80 / tcp

-85749389 | 2025-03-28T13:32:23.400950

443 / tcp

595181873 | 2025-03-20T20:18:53.872346

27017 / tcp

-228368960 | 2025-03-25T23:20:07.562453