Bondnet Analysis

IOB - Indicator of Behavior (23)

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Lang

en22
zh2

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Country

cn14
us10

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Actors

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Activities

Interest

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Type

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vendor

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Product

Web2py2
D-Link DIR-6202
CMS Made Simple2
PHP Arena paFileDB2
Gxlcms2

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vulnerabilities

#VulnerabilityBaseTemp0dayTodayExpRemCTIEPSSCVE
1AWStats Config awstats.pl cross site scripting4.34.1$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.280.01319CVE-2006-3681
2Web2py Sample Web Application session.connect hard-coded credentials8.58.2$0-$5kCalculatingNot DefinedOfficial Fix0.050.05785CVE-2016-3953
3Gxlcms TplAction.class.php add information disclosure7.57.5$0-$5k$0-$5kNot DefinedNot Defined0.020.01055CVE-2018-14685
4O2OA invoke Privilege Escalation6.35.7$0-$5k$0-$5kProof-of-ConceptNot Defined0.030.23850CVE-2022-22916
5Cognos Powerplay Web Edition ppdscgi.exe information disclosure5.35.3$0-$5k$0-$5kNot DefinedNot Defined0.070.00000
6Strapi Admin Panel authorization5.65.3$0-$5k$0-$5kProof-of-ConceptNot Defined0.000.00890CVE-2021-28128
7DZCP deV!L`z Clanportal config.php code injection7.36.6$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.420.04187CVE-2010-0966
8Schneider Electric EcoStruxure Control Expert/Unity Pro write-what-where condition7.07.0$0-$5k$0-$5kNot DefinedNot Defined0.020.01036CVE-2020-7560
9Portainer access control8.08.0$0-$5k$0-$5kNot DefinedNot Defined0.020.01156CVE-2020-24264
10CMS Made Simple Watermark class.showtime2_image.php unrestricted upload6.55.9$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.000.64281CVE-2019-9692
11CMS Made Simple Login Cache information disclosure9.89.4$0-$5k$0-$5kNot DefinedOfficial Fix0.040.00885CVE-2017-17734
12Spring Framework RFD privileges management7.67.6$0-$5k$0-$5kNot DefinedNot Defined0.030.01547CVE-2020-5421
13Thomas R. Pasawicz HyperBook Guestbook Password Database gbconfiguration.dat Hash information disclosure5.35.2$5k-$25kCalculatingHighWorkaround0.040.04187CVE-2007-1192
14PHP Arena paFileDB pafiledb.php cross site scripting4.34.1$0-$5k$0-$5kNot DefinedOfficial Fix0.010.01213CVE-2004-1975
15HP LoadRunner memory corruption7.37.3$5k-$25k$0-$5kNot DefinedNot Defined0.020.19175CVE-2015-2110
16Google Android sdp_server.cc process_service_search_attr_req out-of-bounds write8.07.7$25k-$100k$5k-$25kNot DefinedOfficial Fix0.050.02067CVE-2017-13256
17Google Android sdp_server.c process_service_attr_req out-of-bounds write8.07.7$25k-$100k$5k-$25kNot DefinedOfficial Fix0.030.02067CVE-2017-13255
18Windriver VxWorks Hardcoded Credentials credentials management7.57.5$0-$5k$0-$5kNot DefinedNot Defined0.030.01055CVE-2010-2966
19D-Link DIR-620 Telnet Service hard-coded credentials8.58.3$5k-$25k$0-$5kNot DefinedWorkaround0.040.01055CVE-2018-6210
20TP-LINK TL-WR841N traceroute command injection7.57.5$0-$5k$0-$5kNot DefinedNot Defined0.010.02055CVE-2018-12577

IOC - Indicator of Compromise (27)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

TTP - Tactics, Techniques, Procedures (8)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IOA - Indicator of Attack (13)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDClassIndicatorTypeConfidence
1File/x_program_center/jaxrs/invokepredictiveHigh
2Fileawstats.plpredictiveMedium
3Filexxxxx.xxxxxxxxx_xxxxx.xxxpredictiveHigh
4Filexxxx/xxxxxxxxxxxxxxx.xxxpredictiveHigh
5Filexxx/xxxxxx.xxxpredictiveHigh
6Filexxxxxxxx.xxxpredictiveMedium
7Filexxxxxxx.xxxpredictiveMedium
8Filexxx_xxxxxx.xpredictiveMedium
9Filexxx_xxxxxx.xxpredictiveHigh
10Libraryxxx/xxx/xxx/xxxxxx/xxxxx/xxxxxxxxx.xxxxx.xxxpredictiveHigh
11ArgumentxxxxxxxxpredictiveMedium
12ArgumentxxxxxxpredictiveLow
13ArgumentxxpredictiveLow

References (2)

The following list contains external sources which discuss the actor and the associated activities:

Interested in the pricing of exploits?

See the underground prices here!