Cape Verde Unknown 解析

IOB - Indicator of Behavior (32)

タイムライン

言語

en20
pt10
es2

国・地域

アクター

アクティビティ

関心

タイムライン

タイプ

ベンダー

製品

Fortinet FortiOS4
WordPress4
JIRA2
Apache HTTP Server2
phpMyAdmin2

脆弱性

#脆弱性BaseTemp0day本日修復EPSSCTICVE
1Redhat Nagios XI Core nagios.upgrade_to_v3.sh 特権昇格6.86.8$0-$5k$0-$5kNot DefinedNot Defined0.000420.00CVE-2013-2029
2Fortinet FortiOS Restore Command 特権昇格3.83.7$0-$5k$0-$5kHighOfficial Fix0.001460.05CVE-2021-44168
3OpenSSH ssh-add Privilege Escalation7.67.5$5k-$25k$0-$5kNot DefinedOfficial Fix0.001060.00CVE-2023-28531
4Wiki.js Storage Module ディレクトリトラバーサル6.46.3$0-$5k$0-$5kNot DefinedOfficial Fix0.001260.04CVE-2021-43800
5Wiki.js SVG File クロスサイトスクリプティング4.44.4$0-$5k$0-$5kNot DefinedOfficial Fix0.000530.00CVE-2021-25993
6lighttpd mod_extforward Plugin mod_extforward_Forwarded メモリ破損6.36.3$0-$5k$0-$5kNot DefinedNot Defined0.022510.02CVE-2022-22707
7Simple College Website file_put_contents 特権昇格8.58.5$0-$5k$0-$5kNot DefinedNot Defined0.004660.00CVE-2022-40087
8CMSUno central.php file_put_contents 特権昇格5.55.5$0-$5k$0-$5kNot DefinedNot Defined0.007180.03CVE-2021-40889
9Xiaomi Redmi Note 9T/Redmi Note 11 write メモリ破損5.75.7$0-$5k$0-$5kNot DefinedNot Defined0.000890.05CVE-2020-14125
10WSO2 API Manager/IS as Key Manager/Identity Server File Based Service Provider Creation XML External Entity5.55.3$0-$5k$0-$5kNot DefinedOfficial Fix0.021230.07CVE-2021-42646
11Zoho ManageEngine ManageEngine OpManager getmailserversettings SQLインジェクション6.46.4$0-$5k$0-$5kNot DefinedNot Defined0.002740.00CVE-2017-11559
12Yoast SEO Plugin REST Endpoint posts 情報の漏洩3.53.4$0-$5k$0-$5kNot DefinedOfficial Fix0.001230.09CVE-2021-25118
13WordPress wp_die 情報の漏洩4.54.4$5k-$25k$0-$5kNot DefinedOfficial Fix0.000930.06CVE-2021-39200
14WordPress SQLインジェクション6.86.7$5k-$25k$0-$5kNot DefinedOfficial Fix0.004670.05CVE-2022-21664
15pac-resolver PAC File Remote Code Execution5.65.4$0-$5k$0-$5kNot DefinedOfficial Fix0.004330.05CVE-2021-23406
16Oracle Blockchain Platform BCS Console 特権昇格7.37.1$5k-$25k$0-$5kNot DefinedOfficial Fix0.003310.00CVE-2019-10086
17GitLab Community Edition/Enterprise Edition OmniAuth 弱い認証8.28.0$0-$5k$0-$5kNot DefinedOfficial Fix0.244550.00CVE-2022-1162
18Fortinet FortiOS TFTP Client メモリ破損7.06.8$0-$5k計算中Not DefinedOfficial Fix0.000420.09CVE-2021-42757
19Apache Directory Studio SASL Authentication 弱い暗号化3.13.1$0-$5k$5k-$25kNot DefinedNot Defined0.000550.00CVE-2021-33900
20JIRA picker Username 特権昇格5.35.2$0-$5k$0-$5kNot DefinedOfficial Fix0.003790.03CVE-2019-3403

IOC - Indicator of Compromise (19)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

TTP - Tactics, Techniques, Procedures (11)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IOA - Indicator of Attack (12)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDクラスIndicatorタイプ信頼度
1File.htaccesspredictive
2File/api/json/admin/getmailserversettingspredictive
3File/xxxx/xxx/x/xxxx/xxxxxxpredictive
4Filexxxxxx.xxxxxxx_xx_xx.xxpredictive
5Filexxxx/xxxxxpredictive
6Filexx/xx/xxxxxpredictive
7File{xxxxxxx}/xxx/xxxxxxx.xxxpredictive
8Argumentxxxxxxpredictive
9Argumentxxxxpredictive
10Argumentxxxxxxpredictive
11Pattern|xx xx xx xx|predictive
12Network Portxxx/xx (xxxxxx)predictive

参考 (2)

The following list contains external sources which discuss the actor and the associated activities:

Want to stay up to date on a daily basis?

Enable the mail alert feature now!