GeneralInformation

Hostnames	ec2-18-195-10-89.eu-central-1.compute.amazonaws.com biuro.ee www.biuro.ee biuro.lt www.biuro.lt biuro.lv www.biuro.lv
Domains	amazonaws.com biuro.ee biuro.lt biuro.lv
Cloud Provider	Amazon
Cloud Region	eu-central-1
Cloud Service	EC2
Country	Germany
City	Frankfurt am Main
Organization	A100 ROW GmbH
ISP	Amazon.com, Inc.
ASN	AS16509

WebTechnologies

Blogs

WordPress

CMS

WordPress

Databases

MySQL

JavaScript frameworks

Stimulus

JavaScript libraries

Modernizr

Programming languages

PHP

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2024(2)

CVE-2024-25117

6.8php-svg-lib is a scalable vector graphics (SVG) file parsing/rendering library. Prior to version 0.5.2, php-svg-lib fails to validate that font-family doesn't contain a PHAR url, which might leads to RCE on PHP < 8.0, and doesn't validate if external references are allowed. This might leads to bypass of restrictions or RCE on projects that are using it, if they do not strictly revalidate the fontName that is passed by php-svg-lib. The `Style::fromAttributes(`), or the `Style::parseCssStyle()` should check the content of the `font-family` and prevents it to use a PHAR url, to avoid passing an invalid and dangerous `fontName` value to other libraries. The same check as done in the `Style::fromStyleSheets` might be reused. Libraries using this library as a dependency might be vulnerable to some bypass of restrictions, or even remote code execution, if they do not double check the value of the `fontName` that is passed by php-svg-lib. Version 0.5.2 contains a fix for this issue.

CVE-2024-5458

5.3In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, due to a code logic error, filtering functions such as filter_var when validating URLs (FILTER_VALIDATE_URL) for certain types of URLs the function will result in invalid user information (username + password part of URLs) being treated as valid user information. This may lead to the downstream code accepting invalid URLs as valid and parsing them incorrectly.

2022(1)

CVE-2022-4900

6.2A vulnerability was found in PHP where setting the environment variable PHP_CLI_SERVER_WORKERS to a large value leads to a heap buffer overflow.

2013(1)

CVE-2013-2220

7.5Buffer overflow in the radius_get_vendor_attr function in the Radius extension before 1.2.7 for PHP allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large Vendor Specific Attributes (VSA) length value.

2007(1)

CVE-2007-3205

5.0The parse_str function in (1) PHP, (2) Hardened-PHP, and (3) Suhosin, when called without a second parameter, might allow remote attackers to overwrite arbitrary variables by specifying variable names and values in the string to be parsed. NOTE: it is not clear whether this is a design limitation of the function or a bug in PHP, although it is likely to be regarded as a bug in Hardened-PHP and Suhosin.

OpenPorts

80 443

80 / tcp

-2100514759 | 2025-04-11T22:21:36.369881

Hashes

hash

-638770043

http.dom_hash

1239617585

http.html_hash

-2100514759

http.server_hash

-1340961475

http.title_hash

1522695184

301 Moved Permanently

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 11 Apr 2025 22:21:35 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://www.biuro.lt/

443 / tcp

-1465561633 | 2025-04-11T22:21:40.827849

Hashes

hash

-1853507154

http.dom_hash

-80710599

http.favicon.hash

509596574

http.html_hash

-1465561633

http.robots_hash

28277904

http.server_hash

-1340961475

http.sitemap_hash

-1763542668

http.title_hash

-102550444

Laikinas ir trumpalaikis darbas

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 11 Apr 2025 22:21:40 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/7.4.33
Set-Cookie: PHPSESSID=74654058d2952d5da89be1e2de79a044; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: user_id=67f995f47bf476.26188887; expires=Sun, 11-May-2025 22:21:40 GMT; Max-Age=2592000
Set-Cookie: pll_language=lt; expires=Sat, 11-Apr-2026 22:21:40 GMT; Max-Age=31536000; path=/; secure; SameSite=Lax
Link: <https://www.biuro.lt/wp-json/>; rel="https://api.w.org/"
Link: <https://www.biuro.lt/wp-json/wp/v2/pages/14>; rel="alternate"; title="JSON"; type="application/json"
Link: <https://www.biuro.lt/>; rel=shortlink
Strict-Transport-Security: max-age=16070400; includeSubDomains
X-Content-Type-Options: nosniff
Cache-Control: no-transform

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:6a:19:08:27:20:64:24:f4:0b:8a:db:4e:65:db:1f:77:dd
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R11
        Validity
            Not Before: Mar 23 10:02:59 2025 GMT
            Not After : Jun 21 10:02:58 2025 GMT
        Subject: CN=biuro.ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Modulus:
                    00:cb:02:37:9d:e6:a5:c5:9c:15:fe:da:6b:fd:16:
                    be:df:ab:bc:4d:29:d0:ef:e8:41:40:a8:d3:3f:a2:
                    55:3d:61:d9:e4:44:bb:6d:c7:5c:8b:58:2f:fc:93:
                    55:4b:3a:37:9c:ed:0a:55:bc:01:6b:31:d9:3b:2d:
                    d9:dd:e7:e3:1a:10:4d:37:cd:8a:fc:8a:1a:9b:f5:
                    da:e7:c7:99:11:c6:03:11:8a:e5:47:4f:15:9f:f6:
                    de:1a:db:3d:ae:b8:ee:40:75:22:a9:38:14:72:2e:
                    1f:f5:2a:0e:05:70:1d:2f:4e:c1:dd:37:f0:b4:fc:
                    6b:90:7d:e0:dd:f6:b8:61:a1:e6:57:d7:82:6a:38:
                    9f:35:c0:b1:1a:73:6f:60:fd:de:77:da:ba:10:a9:
                    ef:b2:cf:26:0b:7d:ef:96:ba:d7:ec:2e:a4:37:f3:
                    9a:42:ba:3d:70:64:52:16:c6:19:09:ff:95:4f:9b:
                    d5:45:9c:fb:9c:25:d8:99:7f:cb:46:8b:cf:8e:09:
                    8c:02:85:5f:3f:ca:06:b6:f5:76:81:a1:28:b8:58:
                    ac:87:64:4e:d1:da:3b:08:00:ed:f6:26:32:48:40:
                    55:5d:37:4a:eb:1e:d5:bf:83:bc:e1:b3:8e:67:53:
                    2c:f3:3b:0b:9c:05:60:f8:c9:ec:f9:c3:f4:2b:38:
                    91:9f:90:30:1d:ea:f2:ef:a5:7a:84:c9:75:e9:60:
                    bf:b2:11:86:c0:b8:c4:a8:3e:7d:88:76:5c:77:3b:
                    6d:34:af:1a:14:6c:2f:1e:9a:f3:d7:eb:06:8b:e9:
                    6b:80:fc:bb:94:ac:86:32:db:4b:05:b0:fb:44:64:
                    52:82:02:d0:d8:df:76:59:b8:38:e4:e5:15:b3:43:
                    35:ba:91:8b:f6:04:68:69:eb:0f:b1:40:11:ab:23:
                    a9:36:9d:cf:ca:c1:b0:65:03:03:ac:ce:32:34:a4:
                    63:63:dd:1a:ad:7f:54:5f:d2:7c:98:d2:f1:5f:5f:
                    8e:f8:56:e9:69:ee:16:fa:bb:82:08:39:81:9e:4a:
                    bc:6c:3f:f6:6c:11:07:4f:7b:6f:44:08:18:7c:e2:
                    59:fd:29:40:68:e1:74:3c:00:c0:90:c5:18:cf:b7:
                    b9:91:47:41:c3:2a:d5:1f:67:4f:66:27:f2:f8:d5:
                    fb:06:40:46:43:06:7a:38:2d:8b:59:5d:06:07:63:
                    8c:1e:8b:6d:4f:f2:51:18:12:57:d2:01:17:df:12:
                    b7:f5:e7:64:ba:75:a5:d1:c1:b3:d2:ef:72:41:b2:
                    19:34:f0:59:df:4f:b4:ac:cf:2e:f5:30:86:a8:7d:
                    4e:eb:33:d4:82:97:93:3a:11:6a:4e:7f:0e:c5:ca:
                    bf:0f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                45:92:60:60:DF:25:DE:F7:6F:F1:BD:20:53:D1:DF:10:AD:02:EB:41
            X509v3 Authority Key Identifier: 
                C5:CF:46:A4:EA:F4:C3:C0:7A:6C:95:C4:2D:B0:5E:92:2F:26:E3:B9
            Authority Information Access: 
                OCSP - URI:http://r11.o.lencr.org
                CA Issuers - URI:http://r11.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:biuro.ee, DNS:biuro.lt, DNS:biuro.lv, DNS:www.biuro.ee, DNS:www.biuro.lt, DNS:www.biuro.lv
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://r11.c.lencr.org/94.crl
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
                                D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
                    Timestamp : Mar 23 11:01:29.954 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:EF:91:E3:9C:00:67:E8:E2:71:08:B9:
                                B0:2F:98:F0:D7:39:2F:A8:8F:C6:7E:9D:EC:3F:30:AB:
                                A6:5C:31:3A:CA:02:21:00:9E:56:E0:B6:2D:40:44:A8:
                                59:A0:01:87:24:78:BA:D6:2C:4E:74:78:A3:03:17:51:
                                9E:18:1E:CE:F8:CD:87:24
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E0:92:B3:FC:0C:1D:C8:E7:68:36:1F:DE:61:B9:96:4D:
                                0A:52:78:19:8A:72:D6:72:C4:B0:4D:A5:6D:6F:54:04
                    Timestamp : Mar 23 11:01:30.373 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:E9:D7:1A:B4:34:26:AE:BB:23:B5:39:
                                AC:C8:DB:29:71:E0:91:B7:7E:99:10:DB:BB:98:4C:E0:
                                76:00:EB:8D:BB:02:21:00:94:7B:01:93:D6:04:FB:2E:
                                B7:C9:A2:17:35:4D:02:62:6F:85:60:A7:23:9A:61:87:
                                50:C5:5C:45:FD:3B:B7:A9
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        16:4f:34:2b:c9:7c:e9:15:c6:ed:e2:17:2c:8e:b9:cb:dc:ca:
        83:28:95:db:00:6c:53:3a:63:f0:65:9a:62:4a:0f:32:59:b9:
        4f:fe:38:be:85:11:ea:42:b8:e9:a7:c8:7a:5f:c3:21:d3:a9:
        85:4a:19:42:8e:5f:c1:2d:01:38:65:e9:31:dd:07:72:24:d7:
        a9:5a:33:9b:a5:01:35:7d:b8:37:8c:59:6e:c2:89:c6:c3:26:
        56:6f:bc:06:d8:5f:cd:2f:75:28:12:bb:54:15:1f:3f:80:2f:
        e1:60:59:b6:ab:34:e8:34:7c:72:32:cb:e5:91:30:27:2f:b2:
        bd:99:e9:60:6b:d2:5f:4a:34:b4:fe:19:d8:e8:b4:4a:26:e5:
        25:ce:9a:49:d5:1a:67:cb:e5:b1:54:49:86:aa:27:eb:13:43:
        95:37:a7:30:8e:0e:3e:85:dc:ab:1d:1f:55:c7:fa:fc:18:a5:
        a4:1c:fb:b6:13:2b:2f:8f:c5:6f:7b:2d:0f:93:80:0b:46:89:
        45:03:fd:a8:d0:8a:c5:4c:7a:0c:fc:b9:c1:12:3b:3d:5c:f5:
        0b:e4:cd:c8:22:91:0d:58:27:f7:f5:94:0a:dd:51:51:fd:63:
        ed:3a:ff:51:0a:70:dc:9a:76:46:5c:c9:83:ff:72:a9:91:1a:
        2f:a1:91:ef

Vulnerabilities

1 4

18.195.10.89

Last Seen: 2025-04-11

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

80 / tcp

-2100514759 | 2025-04-11T22:21:36.369881

Hashes

nginx

443 / tcp

-1465561633 | 2025-04-11T22:21:40.827849

Hashes

nginx

Products

Pricing

Contact Us

18.195.10.89

Last Seen: 2025-04-11

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities All ports Port 443 Latest CVSS

OpenPorts

80 / tcp -2100514759 | 2025-04-11T22:21:36.369881

Hashes

nginx

443 / tcp -1465561633 | 2025-04-11T22:21:40.827849

Hashes

nginx

Products

Pricing

Contact Us

Vulnerabilities

80 / tcp

-2100514759 | 2025-04-11T22:21:36.369881

443 / tcp

-1465561633 | 2025-04-11T22:21:40.827849