GeneralInformation

Hostnames	ec2-54-164-119-26.compute-1.amazonaws.com
Domains	amazonaws.com
Cloud Provider	Amazon
Cloud Region	us-east-1
Cloud Service	EC2
Country	United States
City	Ashburn
Organization	Amazon Technologies Inc.
ISP	Amazon.com, Inc.
ASN	AS14618

WebTechnologies

JavaScript frameworks

AngularJS1.6.5

JavaScript libraries

jQuery1.7.1

jQuery UI

Bootbox.js

Select2

UI frameworks

Bootstrap

SecurityContact

Contact

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2024(3)

CVE-2024-21490

7.5This affects versions of the package angular from 1.3.0. A regular expression used to split the value of the ng-srcset directive is vulnerable to super-linear runtime due to backtracking. With large carefully-crafted input, this can result in catastrophic backtracking and cause a denial of service. **Note:** This package is EOL and will not receive any updates to address this issue. Users should migrate to [@angular/core](https://www.npmjs.com/package/@angular/core).

CVE-2024-8373

4.8Improper sanitization of the value of the [srcset] attribute in <source> HTML elements in AngularJS allows attackers to bypass common image source restrictions, which can also lead to a form of Content Spoofing https://owasp.org/www-community/attacks/Content_Spoofing . This issue affects all versions of AngularJS. Note: The AngularJS project is End-of-Life and will not receive any updates to address this issue. For more information see here https://docs.angularjs.org/misc/version-support-status .

CVE-2024-8372

4.8Improper sanitization of the value of the '[srcset]' attribute in AngularJS allows attackers to bypass common image source restrictions, which can also lead to a form of Content Spoofing https://owasp.org/www-community/attacks/Content_Spoofing . This issue affects AngularJS versions 1.3.0-rc.4 and greater. Note: The AngularJS project is End-of-Life and will not receive any updates to address this issue. For more information see here https://docs.angularjs.org/misc/version-support-status .

2020(4)

CVE-2020-11023

6.9In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

CVE-2020-11022

6.9In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

CVE-2020-7676

5.4angular.js prior to 1.8.0 allows cross site scripting. The regex-based input HTML replacement may turn sanitized code into unsanitized one. Wrapping "<option>" elements in "<select>" ones changes parsing behavior, leading to possibly unsanitizing code.

CVE-2020-7656

6.1jquery prior to 1.9.0 allows Cross-site Scripting attacks via the load method. The load method fails to recognize and remove "<script>" HTML tags that contain a whitespace character, i.e: "</script >", which results in the enclosed script logic to be executed.

2019(2)

CVE-2019-11358

6.1jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.

CVE-2019-10768

7.5In AngularJS before 1.7.9 the function `merge()` could be tricked into adding or modifying properties of `Object.prototype` using a `__proto__` payload.

2015(1)

CVE-2015-9251

6.1jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.

2012(1)

CVE-2012-6708

6.1jQuery before 1.9.0 is vulnerable to Cross-site Scripting (XSS) attacks. The jQuery(strInput) function does not differentiate selectors from HTML in a reliable fashion. In vulnerable versions, jQuery determined whether the input was HTML by looking for the '<' character anywhere in the string, giving attackers more flexibility when attempting to construct a malicious payload. In fixed versions, jQuery only deems the input to be HTML if it explicitly starts with the '<' character, limiting exploitability only to attackers who can control the beginning of a string, which is far less common.

OpenPorts

987 1962 3093 8086 8194 21515 35002 36222

987 / udp

-1702755199 | 2025-03-17T20:41:54.261012

Access Forbidden\r\n

1962 / tcp

2091157212 | 2025-03-17T19:35:12.121360

Hashes

hash

-1146634981

http.dom_hash

-1745482142

http.favicon.hash

-1216248324

http.html_hash

2091157212

http.server_hash

-1340961475

http.title_hash

-616882979

HTTP/1.1 200 OK
Date: Mon, 17 Mar 2025 19:35:12 GMT
Server: nginx
Content-Length: 21781
Content-Type: text/html

Vulnerabilities

2 3

3093 / tcp

-766336104 | 2025-03-17T20:33:03.690757

Hashes

hash

773345196

http.dom_hash

-1443625668

http.html_hash

-766336104

http.title_hash

-344133093

Ivanti Connect Secure

HTTP/1.1 200 OK
Date: Mon, 17 Mar 2025 20:33:03 GMT
Content-Length: 4680
Content-Type: text/html

8086 / tcp

-1292582184 | 2025-03-17T19:59:16.706984

Hashes

hash

1399305910

http.dom_hash

-2068915898

http.favicon.hash

-1216248324

http.html_hash

-1292582184

http.server_hash

869690771

http.title_hash

-24400641

KACE Systems Management Appliance Service Center

HTTP/1.1 200 OK
Date: Mon, 17 Mar 2025 19:59:16 GMT
Server: Apache
Expires: Mon, 17 Mar 2025 19:59:16 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: kboxid=kx4b02kbkvurmkkauc2miqtg1k4nvlil; path=/; secure; HttpOnly; SameSite=Lax
X-Content-Type-Options: nosniff
X-Frame-Options: sameorigin
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Access-Control-Allow-Headers: x-kace-auth-timestamp, x-kace-auth-key, x-kace-auth-signature, accept, origin, content-type
Access-Control-Allow-Methods: PUT, DELETE, POST, GET, OPTIONS
X-Kace-Appliance: K1000
X-Kace-Version: 6.0.1
X-Ua-Compatible: IE=9,EDGE
Content-Length: 8986
Content-Type: text/html

8194 / tcp

200399300 | 2025-03-17T20:30:10.696131

Hashes

hash

116421049

http.dom_hash

2049479642

http.favicon.hash

-1216248324

http.html_hash

200399300

http.server_hash

-1340961475

http.title_hash

-524333479

Remote Support Portal

HTTP/1.1 200 OK
Date: Mon, 17 Mar 2025 20:30:10 GMT
Server: nginx
Content-Length: 2162
Content-Type: text/html

21515 / tcp

1048725659 | 2025-03-17T20:03:39.028813

Hashes

hash

1806345202

http.dom_hash

-2038828874

http.html_hash

1048725659

http.server_hash

-1340961475

http.title_hash

1373692907

Mirth Connect Administrator

HTTP/1.1 200 OK
Date: Mon, 17 Mar 2025 20:03:38 GMT
Server: nginx
Content-Security-Policy: frame-ancestors 'none'
X-Frame-Options: DENY
Content-Language: en-US
Expires: Mon, 17 Mar 2025 20:03:38 GMT
Content-Type: text/html;charset=iso-8859-1
Content-Length: 3676

Vulnerabilities

35002 / tcp

2131640331 | 2025-03-17T20:32:17.751581

Hashes

hash

-1266432117

http.dom_hash

1572200610

http.favicon.hash

-1216248324

http.html_hash

2131640331

http.server_hash

-1340961475

http.title_hash

2102466759

ServiceNow

HTTP/1.1 200 OK
Date: Mon, 17 Mar 2025 20:32:43 GMT
Server: nginx
Content-Length: 46782
Content-Type: text/html

36222 / tcp

-2027312840 | 2025-03-17T19:55:20.683126

Hashes

hash

-1009747917

http.dom_hash

-1830446565

http.favicon.hash

-1216248324

http.html_hash

-2027312840

http.robots_hash

-754458835

http.securitytxt_hash

-2110327583

http.server_hash

1081824176

http.sitemap_hash

1598609682

HTTP/1.1 200 OK
Date: Mon, 17 Mar 2025 19:55:20 GMT
Server: openresty
Content-Type: text/html; charset=utf-8
Connection: keep-alive
Expires: Mon, 17 Mar 2025 19:55:20 GMT
Last-Modified: Mon, 17 Mar 2025 19:55:20 GMT
Cache-Control: no-store, no-cache, must-revalidate
Accept-Ranges: none
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=7884000
Content-Length: 84

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:9f:ac:24:bf:a5:3b:dc:cd:32:17:2e:f1:83:e0:a8:ff:bd:23:d1
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=R11, O=Let's Encrypt, C=US
        Validity
            Not Before: Mar 17 19:54:53 2024 GMT
            Not After : Mar 17 19:54:53 2026 GMT
        Subject: CN=*.inspection.cityrailway.ua
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c6:70:eb:39:ab:ab:fd:55:7b:8a:80:e8:68:dd:
                    e3:bd:75:1e:44:0b:b9:4c:f0:23:d0:9c:8a:0c:3c:
                    7c:26:2e:60:64:3f:b2:f6:51:c1:3b:b4:78:29:f2:
                    5b:03:3c:d9:f3:71:4c:11:2d:39:11:a6:de:05:fa:
                    4b:e4:8b:91:0d:67:b8:d1:06:86:50:98:ff:42:dd:
                    cc:38:41:9c:f0:40:ae:3d:11:51:c8:60:ca:f3:6f:
                    88:06:c1:b8:cc:46:34:0f:be:91:ca:eb:2c:18:8b:
                    88:b1:a8:d5:a5:c7:18:59:97:68:ad:5c:32:3b:db:
                    dc:88:58:7b:b1:39:e4:25:b1:2d:e7:f0:60:f7:2c:
                    2e:0a:63:27:dc:b6:80:8b:7b:da:d5:72:43:a2:5b:
                    59:6e:e0:a9:01:4a:9b:c1:db:31:2d:2b:13:b4:5b:
                    81:54:a0:fb:e7:28:55:39:9f:7b:73:67:9b:db:94:
                    08:37:73:e6:d1:8b:02:df:d7:c3:4f:2e:eb:72:d8:
                    bc:23:ec:fd:68:bd:f4:3c:ac:f0:c1:a4:d2:bb:ac:
                    98:ab:1a:44:b2:95:30:23:b0:bd:64:e4:24:27:ec:
                    95:a1:6a:f6:53:24:1d:a6:f7:2a:01:60:84:c4:08:
                    93:8e:45:19:d4:cf:78:b7:6f:64:de:35:3c:b1:f2:
                    43:1d
                Exponent: 65537 (0x10001)
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        5e:50:06:a3:a5:8b:b3:06:10:ec:2d:56:8e:27:82:c5:6c:5a:
        ef:f5:86:50:ce:97:af:75:67:7b:34:0a:e8:fe:a1:66:eb:70:
        81:01:13:7e:2e:4c:72:5c:0c:de:f9:95:27:03:1a:55:ff:c7:
        47:75:57:ef:fc:a2:a2:62:65:f9:29:a5:ef:78:bc:e0:db:12:
        dd:70:c5:29:00:c5:7a:06:35:31:b9:5a:d2:8f:24:6b:45:a7:
        57:cf:b5:fb:a9:7d:29:7e:eb:53:80:fd:0c:91:bc:32:b2:bf:
        70:60:0c:7c:4d:00:2b:db:6d:d2:45:d7:0b:47:7a:3a:df:cd:
        88:95:b1:7f:69:16:ee:31:ba:4c:b8:8b:92:df:83:f2:5e:66:
        e9:14:eb:fd:34:d1:1e:79:94:07:3d:e8:a2:7b:95:07:fd:1d:
        dc:e2:9a:10:fe:6b:d1:98:5a:66:ae:f9:ba:57:af:c5:84:6c:
        a8:f7:e8:d7:fe:c7:57:e5:50:07:c6:e7:6a:b9:c3:73:b3:93:
        09:f0:78:54:33:a7:de:f9:70:d1:fe:79:7e:71:20:99:5c:d3:
        58:f6:cd:67:19:39:17:26:9d:f7:1c:9a:c9:06:db:87:95:69:
        66:ad:96:07:fe:f7:6f:78:c7:3b:2b:0a:47:93:77:ec:be:56:
        43:0b:10:39

54.164.119.26

Last Seen: 2025-03-17

Tags:

GeneralInformation

WebTechnologies

SecurityContact

Vulnerabilities

OpenPorts

987 / udp

-1702755199 | 2025-03-17T20:41:54.261012

1962 / tcp

2091157212 | 2025-03-17T19:35:12.121360

Hashes

nginx

3093 / tcp

-766336104 | 2025-03-17T20:33:03.690757

Hashes

8086 / tcp

-1292582184 | 2025-03-17T19:59:16.706984

Hashes

8194 / tcp

200399300 | 2025-03-17T20:30:10.696131

Hashes

nginx

21515 / tcp

1048725659 | 2025-03-17T20:03:39.028813

Hashes

nginx

35002 / tcp

2131640331 | 2025-03-17T20:32:17.751581

Hashes

nginx

36222 / tcp

-2027312840 | 2025-03-17T19:55:20.683126

Hashes

Products

Pricing

Contact Us

54.164.119.26

Last Seen: 2025-03-17

Tags:

GeneralInformation

WebTechnologies

SecurityContact

Vulnerabilities All ports Port 1962 Port 21515 Latest CVSS

OpenPorts

987 / udp -1702755199 | 2025-03-17T20:41:54.261012

1962 / tcp 2091157212 | 2025-03-17T19:35:12.121360

Hashes

nginx

3093 / tcp -766336104 | 2025-03-17T20:33:03.690757

Hashes

8086 / tcp -1292582184 | 2025-03-17T19:59:16.706984

Hashes

8194 / tcp 200399300 | 2025-03-17T20:30:10.696131

Hashes

nginx

21515 / tcp 1048725659 | 2025-03-17T20:03:39.028813

Hashes

nginx

35002 / tcp 2131640331 | 2025-03-17T20:32:17.751581

Hashes

nginx

36222 / tcp -2027312840 | 2025-03-17T19:55:20.683126

Hashes

Products

Pricing

Contact Us

Vulnerabilities

987 / udp

-1702755199 | 2025-03-17T20:41:54.261012

1962 / tcp

2091157212 | 2025-03-17T19:35:12.121360

3093 / tcp

-766336104 | 2025-03-17T20:33:03.690757

8086 / tcp

-1292582184 | 2025-03-17T19:59:16.706984

8194 / tcp

200399300 | 2025-03-17T20:30:10.696131

21515 / tcp

1048725659 | 2025-03-17T20:03:39.028813

35002 / tcp

2131640331 | 2025-03-17T20:32:17.751581

36222 / tcp

-2027312840 | 2025-03-17T19:55:20.683126