DePriMon Analysis

IOB - Indicator of Behavior (198)

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Lang

en166
zh10
es10
de6
fr4

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Country

us102
cn34
br6
ce4
es4

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Actors

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Activities

Interest

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Type

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vendor

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Product

Microsoft Windows8
Joomla CMS6
WordPress4
Coppermine Photo Gallery4
Microsoft IIS4

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vulnerabilities

#VulnerabilityBaseTemp0dayTodayExpRemCTIEPSSCVE
1DZCP deV!L`z Clanportal config.php code injection7.36.6$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.780.04187CVE-2010-0966
2VeronaLabs wp-statistics Plugin API Endpoint Blind sql injection8.58.2$0-$5k$0-$5kNot DefinedOfficial Fix0.000.00954CVE-2019-13275
3OpenSSH Authentication Username information disclosure5.34.8$5k-$25k$0-$5kHighOfficial Fix0.310.49183CVE-2016-6210
4Thomas R. Pasawicz HyperBook Guestbook Password Database gbconfiguration.dat Hash information disclosure5.35.2$5k-$25kCalculatingHighWorkaround0.040.04187CVE-2007-1192
5DeDeCMS list.php sql injection7.37.3$0-$5k$0-$5kProof-of-ConceptNot Defined0.010.01139CVE-2011-5200
6CutePHP CuteNews unrestricted upload7.56.8$0-$5k$0-$5kProof-of-ConceptNot Defined0.030.35200CVE-2019-11447
7WordPress Object injection5.35.2$5k-$25k$0-$5kNot DefinedOfficial Fix0.030.01034CVE-2022-21663
8Microsoft Windows Active Directory Domain Services Privilege Escalation8.88.1$100k and more$0-$5kProof-of-ConceptOfficial Fix0.030.02288CVE-2022-26923
9QNAP QTS Media Library access control8.58.2$0-$5k$0-$5kHighOfficial Fix0.030.27000CVE-2017-13067
10WordPress sql injection6.86.7$5k-$25k$0-$5kNot DefinedOfficial Fix0.310.01034CVE-2022-21664
11Veritas NetBackup pbx_exchange Process access control8.36.9$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.030.04695CVE-2017-6407
12XenForo privileges management8.67.9$0-$5k$0-$5kNot DefinedOfficial Fix0.000.00000
13Sophos Firewall User Portal/Webadmin code injection8.58.5$0-$5k$0-$5kNot DefinedNot Defined0.060.01156CVE-2022-3236
14Proxmox Virtual Environment/Mail Gateway HTTP Request server-side request forgery8.07.9$0-$5k$0-$5kNot DefinedOfficial Fix0.050.01018CVE-2022-35508
15Dahua IPC-HDW1X2X Online Upgrade Reverse Engineering information disclosure5.35.1$0-$5k$0-$5kNot DefinedOfficial Fix0.010.00885CVE-2019-9681
16SOGo Web Calendar cross site scripting5.24.9$0-$5k$0-$5kNot DefinedOfficial Fix0.020.01136CVE-2016-6191
17OpenLDAP Backend sql injection6.36.0$0-$5k$0-$5kNot DefinedOfficial Fix0.000.15351CVE-2022-29155
18Pydio pydio-core proxy.php unrestricted upload8.58.5$0-$5k$0-$5kNot DefinedNot Defined0.000.01440CVE-2019-9642
19BlueMind Contact Application data processing7.57.2$0-$5k$0-$5kNot DefinedOfficial Fix0.010.00954CVE-2019-9563
20Sophos Firewall User Portal/Webadmin improper authentication8.58.5$0-$5k$0-$5kNot DefinedNot Defined0.030.64728CVE-2022-1040

IOC - Indicator of Compromise (9)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

TTP - Tactics, Techniques, Procedures (14)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IOA - Indicator of Attack (87)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDClassIndicatorTypeConfidence
1File.htaccesspredictiveMedium
2File/api/RecordingList/DownloadRecord?file=predictiveHigh
3File/netflow/jspui/editProfile.jsppredictiveHigh
4File/rapi/read_urlpredictiveHigh
5File/wp-admin/admin-post.php?es_skip=1&option_namepredictiveHigh
6Fileadmin/google_search_console/class-gsc-table.phppredictiveHigh
7Fileadministrator/components/com_media/helpers/media.phppredictiveHigh
8Filecgi-bin/qcmap_web_cgipredictiveHigh
9Fileclass/debug/debug_show.phppredictiveHigh
10Filecoders/png.cpredictiveMedium
11Filexxxxxxxxxxxxxxxxxxxxx.xxxxpredictiveHigh
12Filexxxxxxxxx.xxx.xxxpredictiveHigh
13Filexxxxx/xxxxx.xxxpredictiveHigh
14Filexxxx/xxxxxxxxxxxxxxx.xxxpredictiveHigh
15Filexxxx_xxxxx.xxxpredictiveHigh
16Filexxxxx.xxxpredictiveMedium
17Filexx/xx-xx.xpredictiveMedium
18Filexxx/xxxx_xxxx.xpredictiveHigh
19Filexxxx_xxxxxx.xpredictiveHigh
20Filexxxx_xxxxxxx.xxx.xxxpredictiveHigh
21Filexxxx/xxxxxxx.xpredictiveHigh
22Filexxx/xxxxxx.xxxpredictiveHigh
23Filexxx/xxxxxxxxxxx/xxxxxxx.xxxpredictiveHigh
24Filexxxxxxxx/xxxxx-xxxxxx-xxxx-xxxxxxx.xxxpredictiveHigh
25Filexxxxxxxx/xxxxxxx.xxxpredictiveHigh
26Filexxxxx.xxxpredictiveMedium
27Filexxxxx.xxx?xxx=xxxx&xxx=xxxxxxxxpredictiveHigh
28Filexxxxxxxxxx.xxxpredictiveHigh
29Filexxxxxx.xpredictiveMedium
30Filexxxxxxxxxx.xxxpredictiveHigh
31Filexxxxxx_xxxx_xxxxxxx.xxxpredictiveHigh
32Filexxxxxxxxx/xxxxxxx/xxxxxx/xxxxxxxxxx.xxxpredictiveHigh
33Filexxxx.xxxpredictiveMedium
34Filexx.xpredictiveLow
35Filexxxx/xxxxxxxxx/xxxxxx/xxxxxxxxxxxxxxxxxxxxx.xxxpredictiveHigh
36Filexxx/xxx.xxxpredictiveMedium
37Filexxx/xxxxxx.xpredictiveMedium
38Filexxx%xx.xxxpredictiveMedium
39Filexxxxxx.xpredictiveMedium
40Filexxxx.xxxpredictiveMedium
41Filexxxxx.xxxpredictiveMedium
42Filexxxxxx/?x=xxxxx/\xxxxx\xxx/xxxxxxxxxxxxxx&xxxxxxxx=xxxx_xxxx_xxxx_xxxxx&xxxx[x]=xxxxxx&xxxx[x][]predictiveHigh
43Filexxx.xxxpredictiveLow
44Filexxxx.xxxpredictiveMedium
45Filexxxxx/xxxxx.xxxpredictiveHigh
46Filexxxxx.xxxpredictiveMedium
47Filexxxxxxxx.xxxpredictiveMedium
48Filexxxxxxxx.xxpredictiveMedium
49FilexxxxxxxxxxpredictiveMedium
50Filexxxxxxx/xxxxx.xxxpredictiveHigh
51Filexx-xxxxxxxx/xxxxx-xx-xxxxx.xxxpredictiveHigh
52Libraryxxxxx.xxxpredictiveMedium
53Libraryxxxxxxx.xxxpredictiveMedium
54ArgumentxxxxpredictiveLow
55ArgumentxxxxxpredictiveLow
56Argumentxxxxxx_xxxxpredictiveMedium
57ArgumentxxxxxxxxpredictiveMedium
58ArgumentxxxpredictiveLow
59ArgumentxxxxxxxxxxxxxxxxxpredictiveHigh
60Argumentxxxxxxxxxxx/xxxxxxxx/xxx/xxxxxpredictiveHigh
61Argumentxxxxxx_xxpredictiveMedium
62ArgumentxxxxpredictiveLow
63ArgumentxxxxxxxxpredictiveMedium
64ArgumentxxxxxxpredictiveLow
65ArgumentxxxxpredictiveLow
66ArgumentxxxxxxxxxpredictiveMedium
67ArgumentxxpredictiveLow
68ArgumentxxxpredictiveLow
69ArgumentxxxxxxxpredictiveLow
70ArgumentxxxxxxxxpredictiveMedium
71ArgumentxxxxxxxxxxpredictiveMedium
72Argumentxxxxxxxxx/xxxpredictiveHigh
73Argumentxxxx_xxpredictiveLow
74Argumentxxxxxxxx_xxxxxxxxpredictiveHigh
75ArgumentxxxxxxxxxxxxxxxxxxxxxpredictiveHigh
76ArgumentxxxpredictiveLow
77ArgumentxxxxpredictiveLow
78ArgumentxxxxxxxxpredictiveMedium
79Argumentxxxx/xx/xxxx/xxxpredictiveHigh
80Input Value.%xx.../.%xx.../predictiveHigh
81Input Value../../../../../xxx/xxx/xxxxx/xxxx/xxxxxxxx/xxxxx/xxx.xxxpredictiveHigh
82Input ValuexxxxxxxxxxpredictiveMedium
83Network PortxxxxpredictiveLow
84Network Portxxxx xxxxpredictiveMedium
85Network Portxxx/xxxpredictiveLow
86Network Portxxx/xxxpredictiveLow
87Network Portxxx/xxxxpredictiveMedium

References (2)

The following list contains external sources which discuss the actor and the associated activities:

Do you want to use VulDB in your project?

Use the official API to access entries easily!