GeneralInformation

Hostnames	vshare14.ezp.net vshare14-649b23b2989fd.ezprovider.net gmlmech.ca
Domains	ezp.net ezprovider.net gmlmech.ca
Country	Canada
City	Vancouver
Organization	EZProvider Networks, Inc.
ISP	EZProvider Networks, Inc.
ASN	AS400724

WebTechnologies

JavaScript libraries

OWL Carousel

jQuery

Miscellaneous

HTTP/3

Security

reCAPTCHA

UI frameworks

Bootstrap3.3.7

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2024(1)

CVE-2024-6484

6.4A vulnerability has been identified in Bootstrap that exposes users to Cross-Site Scripting (XSS) attacks. The issue is present in the carousel component, where the data-slide and data-slide-to attributes can be exploited through the href attribute of an <a> tag due to inadequate sanitization. This vulnerability could potentially enable attackers to execute arbitrary JavaScript within the victim's browser.

2019(1)

CVE-2019-8331

6.1In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.

2018(4)

CVE-2018-20677

6.1In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property.

CVE-2018-20676

6.1In Bootstrap before 3.4.0, XSS is possible in the tooltip data-viewport attribute.

CVE-2018-14042

6.1In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip.

CVE-2018-14040

6.1In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute.

2016(1)

CVE-2016-10735

6.1In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041.

OpenPorts

443 993 2079 8887 8888

443 / tcp

-2044930558 | 2025-03-19T10:37:29.859339

Hashes

hash

862905990

http.dom_hash

-414626019

http.favicon.hash

-310758830

http.html_hash

-2044930558

http.server_hash

-133603840

http.title_hash

-1779746538

GML Mechanical

HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
last-modified: Fri, 13 Dec 2024 16:20:04 GMT
accept-ranges: bytes
content-length: 39585
date: Wed, 19 Mar 2025 10:37:29 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:a3:3b:9d:c5:22:12:8a:54:8e:80:9b:d6:f9:bd:1a:e4:36
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R11
        Validity
            Not Before: Mar 13 03:10:13 2025 GMT
            Not After : Jun 11 03:10:12 2025 GMT
        Subject: CN=*.gmlmech.ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c9:0f:e7:6a:a2:73:b4:17:a2:1a:f2:d5:dd:66:
                    0d:da:14:ef:7d:9f:28:e7:a9:e9:62:34:16:09:88:
                    fe:93:3f:d4:1e:55:c9:3f:52:4c:ec:7c:a2:92:37:
                    6d:85:86:eb:d8:50:30:00:17:5f:b5:f0:b4:b5:37:
                    16:7c:f6:01:89:67:d7:36:c4:31:d5:31:25:9b:56:
                    52:d2:c1:46:27:b6:d9:9e:9d:a1:4b:e9:49:90:ab:
                    22:21:f3:05:1b:16:df:20:1a:57:38:b2:ed:79:15:
                    86:ba:c0:85:bf:19:2b:0f:b6:1f:08:0a:44:57:6c:
                    67:b7:b5:27:36:41:10:bc:66:a6:4e:09:cf:9f:f5:
                    19:cd:f6:c3:a6:c7:e1:30:64:ef:d3:88:ad:a0:2c:
                    1b:26:3e:6c:90:bc:f4:2f:7e:9d:e6:d0:58:0a:e9:
                    0d:d8:bd:bd:8c:4a:59:39:82:8b:e7:7a:84:c2:67:
                    71:99:6b:02:34:a2:89:24:aa:89:8d:db:d3:6d:00:
                    11:1b:a5:7c:06:74:12:24:1a:1e:2c:40:bf:61:72:
                    84:3f:32:e1:cd:76:46:31:66:57:9b:d8:c7:75:4c:
                    1b:89:1f:67:7a:48:43:e4:56:b8:e2:ba:91:36:c3:
                    06:c4:34:3f:ec:fc:48:a0:99:af:91:0d:eb:5d:1e:
                    4c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                E2:26:5A:DB:DF:76:FF:59:E9:91:D0:60:A0:9D:7B:74:0B:10:9E:3B
            X509v3 Authority Key Identifier: 
                C5:CF:46:A4:EA:F4:C3:C0:7A:6C:95:C4:2D:B0:5E:92:2F:26:E3:B9
            Authority Information Access: 
                OCSP - URI:http://r11.o.lencr.org
                CA Issuers - URI:http://r11.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:*.gmlmech.ca, DNS:gmlmech.ca
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://r11.c.lencr.org/55.crl
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
                                D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
                    Timestamp : Mar 13 04:08:44.346 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:80:33:9A:0F:A7:C4:A0:74:5D:A2:62:
                                8E:3B:56:E6:79:E7:AF:D6:0E:B1:98:B7:AD:64:DB:B7:
                                96:56:C7:67:A7:02:21:00:FB:48:29:A0:22:53:51:40:
                                0B:47:E6:D8:D1:8E:AA:41:E3:83:92:2E:BB:AD:07:E8:
                                20:D7:1F:4C:AF:17:6F:F3
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
                                1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
                    Timestamp : Mar 13 04:08:44.346 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:31:1D:F8:66:97:ED:99:7C:B8:AD:AF:37:
                                A0:AC:03:9C:C5:22:BA:8A:1D:72:E9:0B:3B:31:EC:D7:
                                71:72:86:23:02:20:7B:F2:CD:FA:CA:EC:19:4F:D9:61:
                                74:91:8E:7C:F8:8D:A1:83:A2:3E:BC:75:CB:42:F2:0B:
                                FC:C1:50:06:67:EC
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        3d:97:59:60:d8:d7:41:cf:b1:41:5b:4a:9b:3c:00:bb:a8:66:
        22:bf:9f:0b:8c:50:92:ee:fd:2e:d5:7b:d6:20:86:b4:11:84:
        03:e8:ea:ba:90:86:14:e3:c5:a2:ab:86:e3:ba:e9:88:94:6e:
        dc:47:1f:40:06:23:c6:ca:db:61:20:82:9a:6a:a4:5f:ce:5b:
        65:32:6f:b1:4d:3f:a2:ca:0b:3d:40:d6:7b:79:36:7f:fa:53:
        11:9c:68:fc:11:1c:98:f4:5e:9b:26:ba:5a:54:96:a4:14:ad:
        78:79:97:bd:c0:1f:38:c3:aa:01:a0:4a:d3:4c:97:b0:11:2e:
        32:49:b1:f2:d6:c6:01:11:1c:3a:45:84:fa:85:c0:6e:eb:8e:
        a1:c1:f8:e4:ff:5e:77:e1:9e:13:32:0c:5c:3f:ca:18:ff:f9:
        64:be:af:32:3d:62:9f:02:41:3c:10:bd:41:12:49:05:d8:84:
        63:9e:bf:84:31:f8:bf:34:2a:29:81:07:7a:db:2f:a3:c3:40:
        8e:a3:49:26:88:0c:9a:69:e7:78:6b:86:ae:fc:bf:4d:e4:79:
        b1:2a:bc:f5:3c:76:c7:96:ab:71:9f:11:55:be:51:06:94:50:
        a2:b8:e6:19:1a:b6:95:ce:95:15:7c:68:04:a4:ad:52:0d:1c:
        74:ca:23:64

993 / tcp

-1132241830 | 2025-03-27T19:56:33.497198

* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE NAMESPACE LITERAL+ AUTH=PLAIN AUTH=LOGIN] Dovecot ready.
* CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE NAMESPACE LITERAL+ AUTH=PLAIN AUTH=LOGIN
A001 OK Pre-login capabilities listed, post-login capabilities have more.
* ID ("name" "Dovecot")
A002 OK ID completed.
A003 BAD Error in IMAP command received by server.
* BYE Logging out
A004 OK Logout completed.

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ba:f5:f9:96:e1:ce:7c:5d:54:11:68:d5:04:2d:e5:19:b5
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R10
        Validity
            Not Before: Feb 23 08:58:27 2025 GMT
            Not After : May 24 08:58:26 2025 GMT
        Subject: CN=vshare14.ezp.net
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:cd:26:17:ed:bb:02:0b:ab:a2:70:fa:64:96:06:
                    44:eb:a6:29:b7:ab:d5:cb:20:b3:1d:c0:3b:b2:81:
                    93:33:60:eb:56:53:c9:98:2f:0d:ef:27:f8:22:04:
                    22:b5:e5:48:3e:73:56:9e:da:92:71:4d:71:2c:01:
                    6d:9c:e5:db:6f:e5:41:15:d7:eb:fa:d0:d0:e1:3a:
                    82:9e:a6:69:93:e2:68:6d:0b:02:eb:2c:f1:d0:e3:
                    2a:91:fa:a7:15:e1:e7:3e:58:f4:9b:54:da:05:df:
                    c7:4f:25:12:97:d5:de:48:b9:c5:75:df:30:24:a9:
                    ae:16:a7:24:ff:08:59:b8:86:e3:29:56:42:e1:54:
                    f9:22:6c:c2:2f:12:67:87:b4:a0:28:fd:cd:c9:ef:
                    ec:8c:9c:6d:d9:1c:95:a1:59:7f:de:23:90:a3:7e:
                    0d:8d:e5:b6:aa:d1:8a:fb:06:06:9e:01:76:7c:b7:
                    17:1d:f2:06:a5:bc:9b:f4:35:38:5b:2d:e2:80:c2:
                    12:b6:00:ba:f1:73:46:83:26:0c:f2:e3:38:f0:90:
                    07:06:27:fb:67:10:85:a7:74:5f:b3:01:a7:10:79:
                    4e:8f:b1:67:a7:44:70:dc:8e:81:92:6f:d3:37:50:
                    f2:d6:81:97:f7:91:68:3f:b0:f7:27:0a:a6:d3:f3:
                    3b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                46:F0:FA:1D:39:63:E7:A0:C2:C1:D5:EA:F3:81:42:0C:62:73:FB:56
            X509v3 Authority Key Identifier: 
                BB:BC:C3:47:A5:E4:BC:A9:C6:C3:A4:72:0C:10:8D:A2:35:E1:C8:E8
            Authority Information Access: 
                OCSP - URI:http://r10.o.lencr.org
                CA Issuers - URI:http://r10.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:vshare14.ezp.net
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
                                22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
                    Timestamp : Feb 23 09:56:57.126 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:24:93:9F:7F:FA:B1:9F:75:F9:91:C8:26:
                                B6:16:CF:33:41:5D:F1:29:83:B4:53:AA:A3:18:3D:A0:
                                E6:4E:59:70:02:20:3B:E4:FB:01:7D:7E:49:62:F7:B0:
                                A1:21:C7:C0:A1:79:8B:89:7E:33:DD:29:49:40:F4:BA:
                                FD:AE:7B:1B:08:37
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
                                1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
                    Timestamp : Feb 23 09:56:57.103 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:4E:A4:F9:3C:C0:9F:F0:95:BE:83:BE:76:
                                40:2C:85:1F:DF:36:7E:F4:D6:C0:2C:FD:88:3C:2C:EC:
                                83:89:C7:7A:02:21:00:BC:2F:85:D3:C8:74:D7:F5:2A:
                                B6:46:F8:E3:72:F9:64:6D:F5:0E:20:CB:54:ED:0C:29:
                                6F:06:48:E1:46:FA:46
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        1d:e8:49:a5:37:e0:76:af:47:db:65:f5:96:aa:45:62:4f:0f:
        a5:0b:2a:95:94:2b:08:9d:45:a0:46:e9:4e:05:27:f4:d0:e8:
        6b:2b:8d:9b:75:b4:46:e6:9b:cd:1b:c4:09:f2:ee:33:30:78:
        b6:32:1b:7d:f1:58:d6:70:68:35:f5:d7:e9:9f:ad:bf:ce:ed:
        1b:55:d1:9f:c9:2a:7f:2d:5b:bc:78:3f:d4:9d:56:b1:d4:2d:
        2a:75:19:83:99:b9:79:aa:5f:fc:cc:e7:ab:d6:96:e5:aa:66:
        f0:f6:60:b1:33:75:b4:7a:c4:fb:e0:d8:6f:96:a3:7c:3a:e1:
        d1:27:b5:f2:66:fe:04:a8:be:d0:2c:4c:3c:2f:59:5d:b7:18:
        c9:21:60:ab:c7:c5:92:c9:f9:31:7a:01:12:0f:49:ac:0b:5e:
        c3:f2:84:6f:e1:b5:79:96:f7:b3:73:1a:c5:32:fc:7f:c1:cf:
        18:5c:7d:76:59:95:bb:26:db:b6:c4:fc:b2:89:1c:e9:3b:21:
        f5:18:53:ed:5b:ed:cf:5d:d7:69:53:0f:a9:a1:b7:49:75:f0:
        c6:a7:85:9b:0c:5e:14:55:7e:4d:aa:f1:0f:cf:19:67:36:4f:
        db:5c:3b:67:57:42:de:0a:39:9b:a6:94:0d:07:86:b3:0f:1d:
        96:d5:0f:87

2079 / tcp

0 | 2025-03-09T18:18:25.324930

Hashes

hash

-1630311892

http.dom_hash

http.html_hash

http.server_hash

-184643217

HTTP/1.1 302 Moved
Date: Sun, 09 Mar 2025 18:18:48 GMT
Server: cPanel
Persistent-Auth: false
Host: 209.54.114.204:2079
Connection: close
Location: https://vshare14.ezp.net:2080/
X-Redirect-Reason: requiressl

8887 / tcp

0 | 2025-03-19T10:37:27.668629

Hashes

hash

-414943184

http.dom_hash

http.html_hash

http.server_hash

-133603840

HTTP/1.0 301 Moved Permanently
Location: https://209.54.114.204/
Cache-Control: private, no-cache, max-age=0
Pragma: no-cache
Server:LiteSpeed
Content-Length: 0
Connection: Close

8888 / tcp

-98385183 | 2025-03-26T15:34:27.638162

Hashes

hash

209295654

http.dom_hash

109581494

http.html_hash

-98385183

http.server_hash

-133603840

http.title_hash

-1305275760

Unauthorized Access

HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html; charset=UTF-8
transfer-encoding: chunked
date: Wed, 26 Mar 2025 15:34:27 GMT
server: LiteSpeed

Vulnerabilities

209.54.114.204

Last Seen: 2025-03-27

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

443 / tcp

-2044930558 | 2025-03-19T10:37:29.859339

Hashes

993 / tcp

-1132241830 | 2025-03-27T19:56:33.497198

2079 / tcp

0 | 2025-03-09T18:18:25.324930

Hashes

8887 / tcp

0 | 2025-03-19T10:37:27.668629

Hashes

8888 / tcp

-98385183 | 2025-03-26T15:34:27.638162

Hashes

Products

Pricing

Contact Us

209.54.114.204

Last Seen: 2025-03-27

GeneralInformation

WebTechnologies

Vulnerabilities All ports Port 8888 Latest CVSS

OpenPorts

443 / tcp -2044930558 | 2025-03-19T10:37:29.859339

Hashes

993 / tcp -1132241830 | 2025-03-27T19:56:33.497198

2079 / tcp 0 | 2025-03-09T18:18:25.324930

Hashes

8887 / tcp 0 | 2025-03-19T10:37:27.668629

Hashes

8888 / tcp -98385183 | 2025-03-26T15:34:27.638162

Hashes

Products

Pricing

Contact Us

Vulnerabilities

443 / tcp

-2044930558 | 2025-03-19T10:37:29.859339

993 / tcp

-1132241830 | 2025-03-27T19:56:33.497198

2079 / tcp

0 | 2025-03-09T18:18:25.324930

8887 / tcp

0 | 2025-03-19T10:37:27.668629

8888 / tcp

-98385183 | 2025-03-26T15:34:27.638162