Bondnet Analysis

IOB - Indicator of Behavior (34)

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Lang

en18
zh14
fr2

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Country

cn24
us8
fr2

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Actors

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Activities

Interest

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Type

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vendor

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Product

Cognos Powerplay Web Edition2
TP-LINK TL-WR841N2
Thomas R. Pasawicz HyperBook Guestbook2
HP LoadRunner2
AWStats2

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vulnerabilities

#VulnerabilityBaseTemp0dayTodayExpRemCTIEPSSCVE
1Kubernetes kubelet pprof information disclosure7.37.2$0-$5k$0-$5kNot DefinedOfficial Fix0.050.66259CVE-2019-11248
2AWStats Config awstats.pl cross site scripting4.34.1$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.020.00587CVE-2006-3681
3Hikvision Intercom Broadcasting System ping.php os command injection7.57.3$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.020.00080CVE-2023-6895
4Weaver E-Office File Upload utility_all.php command injection7.16.9$0-$5k$0-$5kProof-of-ConceptNot Defined0.040.00058CVE-2023-2647
5Weaver OA downfile.php absolute path traversal4.33.9$0-$5k$0-$5kProof-of-ConceptNot Defined0.020.00121CVE-2023-2765
6Hikvision LocalServiceComponents Messages Remote Code Execution7.37.3$0-$5k$0-$5kNot DefinedNot Defined0.060.00048CVE-2023-28813
7Hikvision Intercom Broadcasting System exportrecord.php path traversal5.45.2$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.000.00064CVE-2023-6893
8DataGear pagingQueryData sql injection7.57.3$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.560.00063CVE-2023-1571
9kalcaddle KodExplorer cross-site request forgery5.85.7$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.050.00108CVE-2022-4944
10node-sqlite3 dynamically-managed code resources7.87.8$0-$5k$0-$5kNot DefinedOfficial Fix0.020.00160CVE-2022-43441
11Web2py Sample Web Application session.connect hard-coded credentials8.58.4$0-$5k$0-$5kNot DefinedOfficial Fix0.040.02059CVE-2016-3953
12Gxlcms TplAction.class.php add information disclosure7.57.5$0-$5k$0-$5kNot DefinedNot Defined0.050.01201CVE-2018-14685
13O2OA invoke Privilege Escalation6.35.7$0-$5k$0-$5kProof-of-ConceptNot Defined0.050.00497CVE-2022-22916
14Cognos Powerplay Web Edition ppdscgi.exe information disclosure5.35.3$0-$5k$0-$5kNot DefinedNot Defined0.020.00000
15Strapi Admin Panel authorization5.65.3$0-$5k$0-$5kProof-of-ConceptNot Defined0.040.00112CVE-2021-28128
16DZCP deV!L`z Clanportal config.php code injection7.36.6$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.790.00954CVE-2010-0966
17Schneider Electric EcoStruxure Control Expert/Unity Pro write-what-where condition7.07.0$0-$5k$0-$5kNot DefinedNot Defined0.000.00072CVE-2020-7560
18Portainer access control8.08.0$0-$5k$0-$5kNot DefinedNot Defined0.020.01246CVE-2020-24264
19CMS Made Simple Watermark class.showtime2_image.php unrestricted upload6.56.2$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.040.42701CVE-2019-9692
20CMS Made Simple Login Cache information disclosure9.89.4$0-$5k$0-$5kNot DefinedOfficial Fix0.000.00157CVE-2017-17734

IOC - Indicator of Compromise (27)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

TTP - Tactics, Techniques, Procedures (10)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IOA - Indicator of Attack (25)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDClassIndicatorTypeConfidence
1File/analysisProject/pagingQueryDatapredictiveHigh
2File/debug/pprofpredictiveMedium
3File/E-mobile/App/System/File/downfile.phppredictiveHigh
4File/php/exportrecord.phppredictiveHigh
5File/xxx/xxxx.xxxpredictiveHigh
6File/xxxxxxx/xxx/xxxxxxx_xxx.xxxpredictiveHigh
7File/x_xxxxxxx_xxxxxx/xxxxx/xxxxxxpredictiveHigh
8Filexxxxxxx.xxpredictiveMedium
9Filexxxxx.xxxxxxxxx_xxxxx.xxxpredictiveHigh
10Filexxxx/xxxxxxxxxxxxxxx.xxxpredictiveHigh
11Filexxx/xxxxxx.xxxpredictiveHigh
12Filexxxxxxxx.xxxpredictiveMedium
13Filexxxxxxx.xxxpredictiveMedium
14Filexxx_xxxxxx.xpredictiveMedium
15Filexxx_xxxxxx.xxpredictiveHigh
16Libraryxxx/xxx/xxx/xxxxxx/xxxxx/xxxxxxxxx.xxxxx.xxxpredictiveHigh
17ArgumentxxxxxxxxpredictiveMedium
18ArgumentxxxxxxpredictiveLow
19ArgumentxxxxxxxxpredictiveMedium
20ArgumentxxpredictiveLow
21Argumentxxxxxxxx[xx]predictiveMedium
22ArgumentxxxxxxxxxxpredictiveMedium
23ArgumentxxxpredictiveLow
24Input Valuex:\xxxxx\xxxx\xxx\xxx\xxxxxxxxxx.xxxpredictiveHigh
25Input Valuexxxxxxx -xxxpredictiveMedium

References (2)

The following list contains external sources which discuss the actor and the associated activities:

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!