Domain forsag.keenetic.link
Russia
-
Vulnerable HiSilicon family DVR
This vulnerability (with proof of concept (PoC) code) affects DVR/NVR devices built using the HiSilicon hi3520d and similar system on a chip (SoC).
Exploiting the vulnerabilities lead to unauthorized remote code execution (RCE) using only the web interface, causing full takeover of the exploited device
First seen 2023-12-07 13:30-
Severity: high
Fingerprint: 321975614123c6c05f83e99bb5d8a893dc54e908dc54e908dc54e908dc54e908Found HiSiliconDVR firmware: Hardware: General NBD7024H-P Vulnerable to multiple issues : LFI, possibly RCE
Found on 2023-12-07 13:30
-
-
Open service 95.213.212.50:80 · forsag.keenetic.link
2024-06-11 15:10
HTTP/1.1 403 Forbidden Server: Web server Date: Tue, 11 Jun 2024 15:10:37 GMT Content-Type: text/html Content-Length: 553 Connection: close X-Detail: 0x1211, insufficient security level Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>Web server</center> </body> </html> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page -->
Found 2024-06-11 by HttpPluginCreate report
-
Open service 95.213.212.50:443 · forsag.keenetic.link
2024-06-11 15:10
HTTP/1.1 403 Forbidden Server: Web server Date: Tue, 11 Jun 2024 15:10:32 GMT Content-Type: text/html Content-Length: 553 Connection: close X-Detail: 0x1284, no service Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>Web server</center> </body> </html> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page -->
Found 2024-06-11 by HttpPluginCreate report
-
Open service 185.162.93.96:443 · forsag.keenetic.link
2024-06-11 15:10
HTTP/1.1 403 Forbidden Server: Web server Date: Tue, 11 Jun 2024 15:10:30 GMT Content-Type: text/html Content-Length: 553 Connection: close X-Detail: 0x1284, no service Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>Web server</center> </body> </html> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page -->
Found 2024-06-11 by HttpPluginCreate report
-
Open service 185.162.93.96:8443 · forsag.keenetic.link
2024-06-11 15:10
HTTP/1.1 403 Forbidden Server: NDM NDNS Date: Tue, 11 Jun 2024 15:10:31 GMT Content-Type: text/html Content-Length: 975 Cache-Control: no-store, no-cache, max-age=0, private X-Detail: Access Denied (0x14) Set-Cookie: X-Detail=403 20; max-age=300 Connection: close Page title: Error <!DOCTYPE html> <html lang="en"> <head> <base href="https://static.keenetic.net/kdns201/"/> <link rel="shortcut icon" href="favicon.ico" /> <link rel="stylesheet" href="style.css" /> <link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Roboto+Condensed:400,700&subset=cyrillic" /> <meta charset="utf-8" /> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /> <meta http-equiv="Referrer-Policy" content="origin-when-cross-origin" /> <meta http-equiv="Content-Security-Policy" content=" default-src 'self' https://static.keenetic.net/kdns201/ ; style-src 'self' 'unsafe-inline' https: ; font-src 'self' https: ; img-src 'self' data: 'unsafe-eval' 'unsafe-inline' https: ; script-src 'self' https://static.keenetic.net/kdns201/ ; " /> <script defer src="script.js"></script> <title>Error</title> </head> <body> <noscript>403</noscript> <main class="template" /> </body> </html>
Found 2024-06-11 by HttpPluginCreate report
-
Open service 185.162.93.96:80 · forsag.keenetic.link
2024-06-11 15:10
HTTP/1.1 403 Forbidden Server: Web server Date: Tue, 11 Jun 2024 15:10:35 GMT Content-Type: text/html Content-Length: 553 Connection: close X-Detail: 0x1211, insufficient security level Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>Web server</center> </body> </html> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page -->
Found 2024-06-11 by HttpPluginCreate report