DPRK Analysis

Activities

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

Lang

en	860
zh	129
ja	3
de	3
pl	2

Country

hk	999
us	1

Actors

Indexsinas	138
DPRK	4
RedEcho	3

Activities

Interest

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need you unlock this view to get access to more details of real data.

Type

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need you unlock this view to get access to more details of real data.

Vendor

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need you unlock this view to get access to more details of real data.

Product

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need you unlock this view to get access to more details of real data.

Vulnerabilities

#	Vulnerability	Base	Temp	0day	Today	Exp	Rem	CTI	CVE
1	Microsoft IIS cross site scripting	5.2	4.7	$10k-$25k	$0-$1k	Proof-of-Concept	Official Fix	0.82	CVE-2017-0055
2	Palo Alto PAN-OS GlobalProtect Portal stack-based overflow	9.8	9.6	$2k-$5k	$0-$1k	Not Defined	Official Fix	0.06	CVE-2021-3064
3	Apache Log4j Incomplete Fix CVE-2021-44228 deserialization	4.5	4.4	$10k-$25k	$2k-$5k	Not Defined	Official Fix	0.03	CVE-2021-45046
4	Microsoft App Installer Privilege Escalation	7.1	6.2	$10k-$25k	$5k-$10k	Unproven	Official Fix	0.00	CVE-2021-43890
5	Apache Log4j JMSAppender deserialization	8.8	8.4	$10k-$25k	$5k-$10k	Not Defined	Official Fix	0.10	CVE-2021-4104
6	Apache Tomcat HTTP Header request smuggling	7.3	7.3	$10k-$25k	$10k-$25k	Not Defined	Not Defined	0.00	CVE-2021-33037
7	Microsoft Exchange Server Privilege Escalation	8.8	8.1	$50k-$100k	$10k-$25k	Unproven	Official Fix	0.06	CVE-2021-42321
8	Linux Kernel Inter-Process Communication crypto.c tipc_crypto_key_rcv missing encryption	7.0	6.9	$5k-$10k	$0-$1k	Not Defined	Official Fix	0.03	CVE-2021-43267
9	Zoho ManageEngine ADSelfService Plus REST API improper authentication	7.3	7.0	$1k-$2k	$0-$1k	High	Official Fix	0.07	CVE-2021-40539
10	esigate XSLT injection	8.5	8.5	$2k-$5k	$1k-$2k	Not Defined	Not Defined	0.07	CVE-2018-1000854
11	Oracle Java SE Networking access control	3.1	3.0	$10k-$25k	$2k-$5k	Not Defined	Official Fix	0.00	CVE-2018-3139
12	Huawei HG532 Service Port 37215 input validation	7.5	7.4	$10k-$25k	$2k-$5k	Not Defined	Workaround	0.06	CVE-2017-17215
13	Google Chrome V8 type confusion	6.3	6.0	$50k-$100k	$10k-$25k	High	Official Fix	2.79	CVE-2022-1364
14	Apache Log4j Lookup infinite loop	6.4	6.1	$5k-$10k	$0-$1k	Proof-of-Concept	Official Fix	0.03	CVE-2021-45105
15	Host Web Server phpinfo.php phpinfo information disclosure	5.3	5.2	$10k-$25k	$0-$1k	Not Defined	Workaround	0.03
16	Linux Kernel Pipe Dirty Pipe Privilege Escalation	6.3	5.7	$10k-$25k	$0-$1k	Proof-of-Concept	Official Fix	0.25	CVE-2022-0847
17	Oracle MySQL Server Encryption denial of service	7.5	7.2	$5k-$10k	$0-$1k	Not Defined	Official Fix	0.08	CVE-2020-28196
18	Mitsubishi Electric MELSEC iQ-R Network Interface null pointer dereference	6.4	6.4	$0-$1k	$0-$1k	Not Defined	Not Defined	0.04	CVE-2020-5655
19	Microsoft Windows Win32k Privilege Escalation	7.2	6.5	$50k-$100k	$0-$1k	Proof-of-Concept	Official Fix	0.13	CVE-2022-21882
20	Microsoft Windows HTTP Protocol Stack Remote Code Execution	9.8	9.0	$100k and more	$2k-$5k	Proof-of-Concept	Official Fix	0.03	CVE-2022-21907

Campaigns (5)

These are the campaigns that can be associated with the actor:

AppleJeus
BLINDINGCAN
Xxxxxxxxxxxx
Xxxxxxxx
Xxxxxxxx

IOC - Indicator of Compromise (135)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	IP address	Hostname	Actor	Campaigns	Confidence
1	5.62.56.160	r-160.56.62.5.ptr.avast.com	DPRK		High
2	5.62.56.161	r-161.56.62.5.ptr.avast.com	DPRK		High
3	5.62.56.162	r-162.56.62.5.ptr.avast.com	DPRK		High
4	5.62.56.163	r-163.56.62.5.ptr.avast.com	DPRK		High
5	5.62.61.64	r-64.61.62.5.ptr.avast.com	DPRK		High
6	5.62.61.65	r-65.61.62.5.ptr.avast.com	DPRK		High
7	5.62.61.66	r-66.61.62.5.ptr.avast.com	DPRK		High
8	5.62.61.67	r-67.61.62.5.ptr.avast.com	DPRK		High
9	14.140.116.172	14-140-116-172-sapient.com	DPRK	Hoplight	High
10	21.252.107.198		DPRK	HOPLIGHT	High
11	26.165.218.44		DPRK	HOPLIGHT	High
12	45.33.2.79	li956-79.members.linode.com	DPRK	AppleJeus	High
13	45.33.23.183	li977-183.members.linode.com	DPRK	AppleJeus	High
14	45.42.151.0		DPRK		High
15	45.42.151.11		DPRK		High
16	45.42.151.12		DPRK		High
17	45.42.151.13		DPRK		High
18	45.42.151.14		DPRK		High
19	45.56.79.23	li929-23.members.linode.com	DPRK	AppleJeus	High
20	45.79.19.196	li1118-196.members.linode.com	DPRK	AppleJeus	High
21	45.199.63.220		DPRK	AppleJeus	High
22	46.36.203.81		DPRK		High
23	46.36.203.82		DPRK		High
24	47.206.4.145	static-47-206-4-145.srst.fl.frontiernet.net	DPRK	HOPLIGHT	High
25	51.68.152.96	ns3122934.ip-51-68-152.eu	DPRK	BLINDINGCAN	High
26	54.241.91.49	ec2-54-241-91-49.us-west-1.compute.amazonaws.com	DPRK	BLINDINGCAN	Medium
27	57.73.224.0		DPRK		High
28	XX.XXX.XX.XXX	xxxx-xx-xxx-xx-xxx.xxx.xxxxxx.xxxxxxxxx.xxx	Xxxx	Xxxxxxxx	High
29	XX.XX.XXX.XX	xx-xxx-xx-xx.xxxxxxxxxx.xxxxxxxxxx.xxx.xx	Xxxx	Xxxxxxxx	High
30	XX.XX.XXX.XXX	xxx-xxx-xx-xx.xxxxxxxxxx.xxxxxxxxxx.xxx.xx	Xxxx	Xxxxxxxx	High
31	XX.XX.XXX.XXX	xxx.xx-xx-xxx.xxxxxxxxxx.xxx	Xxxx	Xxxxxxxx	High
32	XX.XXX.XXX.X		Xxxx		High
33	XX.XXX.XXX.XXX	xxxxx-xxx.xxxxxxx.xxxxxx.xxx	Xxxx	Xxxxxxxxx	High
34	XX.XX.XX.XXX	xxx-xxx-xxx-xxx.xxx.xxxxxxxx.xxx	Xxxx	Xxxxxxxx	High
35	XXX.XXX.XXX.XX	xxxxx-xxxxxx.xxxxxxxxxxxx.xxx	Xxxx	Xxxxxxxxx	High
36	XXX.XXX.XX.XXX		Xxxx	Xxxxxxxxx	High
37	XXX.XXX.XX.XX	xxxx.xxxxxxxx.xx.xx	Xxxx	Xxxxxxxx	High
38	XXX.XXX.XXX.XXX		Xxxx	Xxxxxxxx	High
39	XXX.XXX.XXX.X		Xxxx	Xxxxxxxx	High
40	XXX.XX.XXX.XXX		Xxxx	Xxxxxxxx	High
41	XXX.XXX.XXX.XXX	xxxx-xxxx-xxx.xxxx.xxx.xxx	Xxxx	Xxxxxxxx	High
42	XXX.XXX.XXX.XXX		Xxxx	Xxxxxxxx	High
43	XXX.XXX.XXX.XX		Xxxx	Xxxxxxxxx	High
44	XXX.XXX.XX.XXX	xxx-xxxxxxx.xxxxxxx.xxx	Xxxx	Xxxxxxxxx	High
45	XXX.X.XXX.XX	xx.xxxxxxxxxxx.xx	Xxxx		High
46	XXX.XX.X.X		Xxxx		High
47	XXX.XX.XX.XXX		Xxxx		High
48	XXX.XX.XX.XXX		Xxxx	Xxxxxxxxx	High
49	XXX.XX.XXX.X		Xxxx		High
50	XXX.XX.XXX.X		Xxxx		High
51	XXX.XX.XXX.X		Xxxx		High
52	XXX.XX.XXX.X		Xxxx		High
53	XXX.XX.XXX.XX		Xxxx		High
54	XXX.XX.XXX.XX		Xxxx		High
55	XXX.XX.XXX.XX		Xxxx		High
56	XXX.XX.XXX.XX	xxx.xxxx.xx	Xxxx		High
57	XXX.XX.XXX.XX	xxx.xxxx.xx	Xxxx		High
58	XXX.XX.XXX.XX		Xxxx		High
59	XXX.XX.XXX.XX	xxxxxxx.xxx.xx	Xxxx		High
60	XXX.XX.XXX.XX		Xxxx		High
61	XXX.XX.XXX.XX		Xxxx		High
62	XXX.XX.XXX.XX		Xxxx		High
63	XXX.XX.XXX.XX		Xxxx		High
64	XXX.XX.XXX.XX		Xxxx		High
65	XXX.XX.XXX.XX		Xxxx		High
66	XXX.XX.XXX.XX		Xxxx		High
67	XXX.XX.XXX.XX		Xxxx		High
68	XXX.XX.XXX.XX		Xxxx		High
69	XXX.XX.XXX.XX		Xxxx		High
70	XXX.XX.XXX.XX		Xxxx		High
71	XXX.XX.XXX.XX		Xxxx		High
72	XXX.XX.XXX.XX		Xxxx		High
73	XXX.XX.XXX.XX		Xxxx		High
74	XXX.XX.XXX.X		Xxxx		High
75	XXX.XX.XXX.XX		Xxxx		High
76	XXX.XX.XXX.XX		Xxxx		High
77	XXX.XX.XXX.XX		Xxxx		High
78	XXX.XX.XXX.XXX		Xxxx		High
79	XXX.XX.XXX.X		Xxxx		High
80	XXX.XX.XXX.X		Xxxx		High
81	XXX.XX.XXX.XX	xxxx.xxxx-xx.xxx.xx	Xxxx		High
82	XXX.XX.XXX.XX		Xxxx		High
83	XXX.XX.XXX.XXX		Xxxx		High
84	XXX.XX.XXX.X		Xxxx		High
85	XXX.XX.XXX.XX		Xxxx		High
86	XXX.XX.XXX.XX		Xxxx		High
87	XXX.XX.XXX.XX	xxxx.xxxx.xxx.xx	Xxxx		High
88	XXX.XX.XXX.XX	xxx.xxxx.xxx.xx	Xxxx		High
89	XXX.XX.XXX.XXX		Xxxx		High
90	XXX.XX.XXX.XXX		Xxxx	Xxxxxxxx	High
91	XXX.XXX.XXX.XX	xx-xxx-xxx-xxx-xx.xx.xxxxxxxxxxxx.xxx	Xxxx	Xxxxxxxxx	High
92	XXX.XXX.XXX.XX	xx-xxx-xxx-xxx-xx.xx.xxxxxxxxxxxx.xxx	Xxxx	Xxxxxxxxx	High
93	XXX.XX.XXX.XXX		Xxxx		High
94	XXX.XXX.XXX.XXX		Xxxx	Xxxxxxxxx	High
95	XXX.XXX.XXX.XX	xxxxx.xxxx.xxx	Xxxx	Xxxxxxxxx	High
96	XXX.XXX.X.XXX		Xxxx	Xxxxxxxx	High
97	XXX.XX.XX.XX	xxxxxxxx.xx-xxx-xx-xx.xxx	Xxxx	Xxxxxxxxxxx	High
98	XXX.XXX.XXX.XX		Xxxx	Xxxxxxxx	High
99	XXX.XXX.XXX.XX	xxx-xx-xxx.xxx.xx.xx	Xxxx	Xxxxxxxx	High
100	XXX.XX.XXX.XXX		Xxxx	Xxxxxxxxx	High
101	XXX.XX.XXX.XXX		Xxxx	Xxxxxxxxx	High
102	XXX.XX.XXX.XXX		Xxxx	Xxxxxxxxx	High
103	XXX.XX.XXX.XXX		Xxxx	Xxxxxxxxx	High
104	XXX.XX.XXX.XXX	xxxxx-xxx.xxxxxxx.xxxxxx.xxx	Xxxx	Xxxxxxxxx	High
105	XXX.XXX.XX.XX	xxxxxxxxx-x.xxx-xxxxxxx.xxx	Xxxx	Xxxxxxxxx	High
106	XXX.XXX.XX.XX		Xxxx	Xxxxxxxxx	High
107	XXX.XX.XX.XX	xxx.xx.xx-xx.xxxxxxxxxxxxxxxxxxxx.xxx	Xxxx	Xxxxxxxxxxx	High
108	XXX.XX.XXX.XX		Xxxx	Xxxxxxxxx	High
109	XXX.XX.XX.XX	xxx-xx-xx-xx.xxx.xxxxxxxxxxx.xxx	Xxxx	Xxxxxxxxx	High
110	XXX.XX.XXX.X		Xxxx		High
111	XXX.XXX.XXX.XXX		Xxxx	Xxxxxxxxxxxx	High
112	XXX.XXX.XXX.XXX		Xxxx	Xxxxxxxxxxxx	High
113	XXX.XXX.XXX.XXX		Xxxx	Xxxxxxxxxxxx	High
114	XXX.XXX.XXX.XXX		Xxxx	Xxxxxxxxxxxx	High
115	XXX.XXX.XXX.XXX		Xxxx	Xxxxxxxxxxxx	High
116	XXX.XXX.XXX.XXX		Xxxx	Xxxxxxxxxxxx	High
117	XXX.XXX.XXX.XXX		Xxxx	Xxxxxxxxxxxx	High
118	XXX.XXX.XXX.XXX		Xxxx	Xxxxxxxxxxxx	High
119	XXX.XXX.XXX.XXX		Xxxx	Xxxxxxxxxxxx	High
120	XXX.XXX.XXX.XXX		Xxxx	Xxxxxxxxxxxx	High
121	XXX.XXX.XXX.XXX		Xxxx	Xxxxxxxxxxxx	High
122	XXX.XXX.XXX.XXX		Xxxx	Xxxxxxxxxxxx	High
123	XXX.XXX.XXX.XXX		Xxxx	Xxxxxxxxxxxx	High
124	XXX.XXX.XXX.XXX		Xxxx	Xxxxxxxxxxxx	High
125	XXX.XXX.XXX.XXX		Xxxx	Xxxxxxxxxxxx	High
126	XXX.XXX.XXX.XXX		Xxxx	Xxxxxxxxxxxx	High
127	XXX.XXX.XXX.XXX		Xxxx	Xxxxxxxxxxxx	High
128	XXX.XXX.XXX.XXX		Xxxx	Xxxxxxxxxxxx	High
129	XXX.XXX.XXX.XXX		Xxxx	Xxxxxxxxxxxx	High
130	XXX.XXX.XXX.XXX		Xxxx	Xxxxxxxxxxxx	High
131	XXX.XXX.XXX.XXX		Xxxx	Xxxxxxxxxxxx	High
132	XXX.XXX.X.XX		Xxxx	Xxxxxxxx	High
133	XXX.XXX.X.XXX		Xxxx	Xxxxxxxx	High
134	XXX.XXX.XX.XXX	xxxxxx.xxxxxxx.xxx.xxx.xx	Xxxx	Xxxxxxxx	High
135	XXX.XXX.XX.XXX		Xxxx	Xxxxxxxx	High

TTP - Tactics, Techniques, Procedures (12)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	Vulnerabilities	Access Vector	Confidence
1	T1008	CWE-757	Algorithm Downgrade	High
2	T1059.007	CWE-79, CWE-80	Cross Site Scripting	High
3	T1068	CWE-250, CWE-264, CWE-284	Execution with Unnecessary Privileges	High
4	TXXXX.XXX	CWE-XXX, CWE-XXX	Xxxxxxxx Xxxxxxxxxxx Xx Xxxxxxxxx Xxxxxxxxxxxxxx Xxxxxxxx	High
5	TXXXX	CWE-XXX	7xx Xxxxxxxx Xxxxxxxx	High
6	TXXXX	CWE-XXX	Xxxxxxxxxx Xxxxxx	High
7	TXXXX	CWE-XXX	Xxxxxxxx Xx Xxxx Xxxxxxx Xxxxxxxxx Xxxxx	High
8	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xxxxxxxxxxxxx	High
9	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxxx Xxxxxxx Xx Xxxxxxxxxxx	High
10	TXXXX	CWE-XXX	Xxxxxxxxx Xxxxxxx Xx Xxxxxxxxx Xxxxxxxxxxx	High
11	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xxxxxxxxxxx Xxxxxxxxxx	High
12	TXXXX	CWE-XXX, CWE-XXX	Xxxxxxxxxxxxx Xxxxxx	High

IOA - Indicator of Attack (288)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	Class	Indicator	Confidence
1	File	.htaccess	Medium
2	File	/09/business/upgrade/upcfgAction.php?download=true	High
3	File	/admin-panel1.php	High
4	File	/admin/academic/studenview_left.php	High
5	File	/ad_js.php	Medium
6	File	/alerts/alertConfigField.php	High
7	File	/api/email_accounts	High
8	File	/API/system/admins/session	High
9	File	/cgi-bin/ExportALLSettings.sh	High
10	File	/config/config.php	High
11	File	/context/%2e/WEB-INF/web.xml	High
12	File	/customers/index.php	High
13	File	/DataHandler/AM/AM_Handler.ashx	High
14	File	/DataHandler/HandlerAlarmGroup.ashx	High
15	File	/DataHandler/HandlerEnergyType.ashx	High
16	File	/DataHandler/Handler_CFG.ashx	High
17	File	/ECT_Provider/	High
18	File	/fuel/index.php/fuel/logs/items	High
19	File	/fuel/index.php/fuel/pages/items	High
20	File	/goform/openSchedWifi	High
21	File	/goform/SetNetControlList	High
22	File	/image_zoom.php	High
23	File	/include/config.cache.php	High
24	File	/json/profile/removeStarAjax.do	High
25	File	/oauth/token/request	High
26	File	/plugin/ajax.php	High
27	File	/plugins/servlet/branchreview	High
28	File	/proc/ioports	High
29	File	/proc/self/exe	High
30	File	/public/plugins/	High
31	File	/rest/api/2/search	High
32	File	/rest/api/latest/groupuserpicker	High
33	File	/rest/api/latest/projectvalidate/key	High
34	File	/rom-0	Low
35	File	/tmp	Low
36	File	/xxx/xxxxxxxx.xxx	High
37	File	/xxxxxxx/	Medium
38	File	/xxxxxxx/xxxx	High
39	File	/xxxxx/xxxxxxxxxxxxxx	High
40	File	xxxxx.xxx/xxxxx-x.x.xxx/xxxxxxx.xxx/xxxx.xxx	High
41	File	xxxxxxx/xxxx.xxx	High
42	File	xxxxx.xxx	Medium
43	File	xxxxx/xxxxxxxxx.xxx	High
44	File	xx.xxx	Low
45	File	xxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxx.xxx	High
46	File	xxx_xxxxxxx.xxx	High
47	File	xxxxxx.xxx	Medium
48	File	xxx_xxxxxxx.xxx	High
49	File	xxxx.xxx	Medium
50	File	xxxxx/xxx.x	Medium
51	File	xxxxxxxxxxxxxxxxxxx.xxxx	High
52	File	xxx_xxxx_xxxx.x	High
53	File	xxx.xxx	Low
54	File	xxx-xxxx.xxx	Medium
55	File	xxxxxxxxx.x	Medium
56	File	xxx/xxxxxxx.xx	High
57	File	xxxxx/xxxxxxx.xxx	High
58	File	xxxxxxx.xxx	Medium
59	File	xxxxxx_xxxxxxxx.x	High
60	File	xxx.xxx	Low
61	File	xxx.xxx	Low
62	File	xxxxxx_xxxxx.xx	High
63	File	xxxxxxxxxx/xxxxxxxxxxx/xxxxx.xxxxxxxxxxx.xxx	High
64	File	xxxxxx.xxx	Medium
65	File	xxxxxx.xxx	Medium
66	File	xxxxxxx.x	Medium
67	File	xxxxxxxxxx	Medium
68	File	xxxxxxx/xxxx.xxx	High
69	File	xxxxxx.x	Medium
70	File	xxxxxxx/xxx/x_xxx.x	High
71	File	xxxxxxx/xxx/xxx_xxxxxxx.x	High
72	File	xxxxxxx/xxx/xx/xx.x	High
73	File	xxxx/xxxxxxxxxx/xxxx/xxx/xxxxxx-xxx-xxxxxxxx.x	High
74	File	xxx/xxxx/xxxx.x	High
75	File	xx/xxxx/xxxxxx.x	High
76	File	xxxx/xxxxxxx/xxxx/xxxxxxxxxxx/xxxxx.xxx	High
77	File	xxxxxx/xxxxx/xxxx.xxxxxxxx.xxx	High
78	File	xxxxxx/xxxxx/xxxx.xxxxx.xxx	High
79	File	xxxx_xxxxxxx.xxx.xxx	High
80	File	xxxxxxxxx/xxxxxxxxx.xxx	High
81	File	xxxx/x.x	Medium
82	File	xx/xxx/xxxxx.x	High
83	File	x/x	Low
84	File	xxxxx.xxx	Medium
85	File	xxxxx.xxx/xxxxxxx/xxxxx/xxxxx	High
86	File	xxxxx.xxx/xxxxxxx/xxxxx/xxxxxxxxx	High
87	File	xxxxx.xxx/xxxxxxx/xxxx/xxxxxxxxxxx	High
88	File	xxxxx.xxx/xxxxxxx/xxxx/xxxxx	High
89	File	xxxxx.xxx?x=xxxx&x=xxxxxxx&x=xxx	High
90	File	xxxxx.xxx?x=/xxxx/xxxxxxxxxxxx/xxxxxxx	High
91	File	xxxxx.xxx?x=/xxxx/xxxxxxxxxxxx/xxxxxxxx	High
92	File	xxxxx.x	Low
93	File	xxxxxxx.xxx	Medium
94	File	xxxxxx.x	Medium
95	File	xxxx_xxxxx.xxx	High
96	File	xxx.x/xxxxxx.x	High
97	File	xxxxxxxxxxx/xxxxxxxxxxxx.xxx	High
98	File	xxxxxxxxx/xxxxxxx/xxxxxxxxxxx/xxxxx/xxxxxxxxxxxxxxxxxxxxx.xxx	High
99	File	xxxxxxxxx/xxxxxxx/xxxxxx/xxxxxxxxxx.xxx	High
100	File	xxxxxxx/xxx_xxx.x	High
101	File	xxxxx.xxx	Medium
102	File	xxxxx.xxx	Medium
103	File	xxxxxxxx.xx	Medium
104	File	xxxx.xxx	Medium
105	File	xxxxxxxxxx.xxx	High
106	File	xxx-xxxxxxxx/xxxx.xxx	High
107	File	xxxxxxxx_xxxx.xxx	High
108	File	xxxxxxxx.xx	Medium
109	File	xxxxxx/xxxxxxxxxxxxx.xxx	High
110	File	xxx/xxxx/xxxxxx.x	High
111	File	xxxx.xxxxxx.xx	High
112	File	xxxxxxxxxxx.xxx	High
113	File	xxx_xxxxxxx.x	High
114	File	xxx_xxxx.x	Medium
115	File	xx_xxx.x	Medium
116	File	xxxxxxxx.xxx	Medium
117	File	xxx/xxxxxxxxxxxxxxx.xxx	High
118	File	xxxxxxxxxxx-xxxx.xx	High
119	File	xx/xxxx	Low
120	File	xxxxxxxx/xxxxxx-xxxxx/xxxxxxxxxxx/xxxx.xx	High
121	File	xxxx_xxxxx.xxx	High
122	File	xxx.x	Low
123	File	xxxxxxx.xxx	Medium
124	File	xxxxxxx/xxxxx/xxxxx-xxxxxxxxx.x	High
125	File	xxxx/xxxxxx.xxx	High
126	File	xxxxx/xxxxxxx.x	High
127	File	xxxx\xxxxxxx\xxxxxxx\xxxxxxxx_xxxxxx.xxx	High
128	File	xxx.xxx	Low
129	File	xxxxxxxxxxxxxxxxxxxx	High
130	File	xxxxxxxxxx.xx	High
131	File	xxxxxx.xxx	Medium
132	File	xxx.xxxxx/xxxxxxx/xxxxxx_xxxxx.xxx	High
133	File	xxxxxxx/xxxxxxx/xxxxxxxx.xxxx	High
134	File	xxxxxxx.x	Medium
135	File	xxx.x	Low
136	File	xxxxxx.xxx	Medium
137	File	xxxxxx.x	Medium
138	File	xxxxxxx.x	Medium
139	File	xxxx/xxxxxx.xxx	High
140	File	xxxx.xx.xx	Medium
141	File	xxxxxxx.xxx	Medium
142	File	xxx-xxxxxx/xxxxxx.x	High
143	File	xxxxxxxxxx.x	Medium
144	File	xxxx-xxxxxx.xxx	High
145	File	xxxxx/xxxxxxx_xxxx_xxxxxxxxxxxxxx_xxxxxxxxxxxxx.xxx	High
146	File	xxx_xxxx.x	Medium
147	File	xxxxxxxx/xxxx.xxxxxxxxxxxx	High
148	File	xxxxxx.x	Medium
149	File	xxxxxxxxx.xxx	High
150	File	xxxxxx.xxx	Medium
151	File	xxxxxxx.x	Medium
152	File	xxxxxxxxxx.xxxx	High
153	File	xxxxxxxxx.xxx	High
154	File	xxxxxxxxxxxx.xxx	High
155	File	xxx.xxx	Low
156	File	xxx-xxx	Low
157	File	xxx/xxxxx/xxxxx.xxx	High
158	File	xxxxxxxx.xxx	Medium
159	File	xxxxxxx.xxx.xxx	High
160	File	xxxxxxxxx.x	Medium
161	File	xxxxx/xxxxxxxx	High
162	File	xx-xxxxx/xxxxx-xxxxxx.xxx	High
163	File	xx-xxxxx.xxx	Medium
164	File	\xxxxxxxx.xxx	High
165	File	~/xxxxx-xxxxx.xxx	High
166	File	~/xxxxx-xxxxxxxx.xxx	High
167	File	~/xxxxxx-xxxxx.xxx	High
168	File	~/xxx/xxxxxxxxx/xxxx/xxxx/xxxxxx.xxx	High
169	File	~/xxxxxxxx/xxxxx-xxx-xxxxxx-xxxxxxxxxxxx.xxx	High
170	File	~/xxxxxxxxxxxxx-xxxxxxxxxxxxxx.xxx	High
171	File	~/xxx/xxxxxxxxx/xxxxxxxxxxxx.xxx	High
172	File	~/xxxxxxx-xxxxxxx-xxxxxx.xxx	High
173	File	~/xxxx-xxxxxxxxxx-xxxxx.xxx	High
174	File	~/xxxx/xxxxxxxxxx.xxx	High
175	File	~/xxxxx/xxxxxxxxxxxxx.xxxx.xxx	High
176	Library	xxxxxx.xxx	Medium
177	Library	xx/xxx/xxxxxx/xxx_xxxxx.x	High
178	Library	xxxxx.xxx	Medium
179	Library	xxxxxx.xxx	Medium
180	Library	xx_xxx.xxx	Medium
181	Library	xxxxxxxx.xxx	Medium
182	Library	xxx/xxxxxxx/xxxxxxxxx.xxx	High
183	Library	xxx/xxxxxx/xxxxx_xxxx.xx	High
184	Library	xxx/xxx/xxxxx.xx	High
185	Library	xxxxxx.xxx	Medium
186	Argument	$xxxxxxx['xxx_xxxx']	High
187	Argument	$_xxxxxx["xxx_xxxx"]	High
188	Argument	-x	Low
189	Argument	/xx=	Low
190	Argument	xxxxxx:/xxxxxxxx:/xxxxxxxxxxxxxx:	High
191	Argument	xxxx	Low
192	Argument	xxx_xxx	Low
193	Argument	xxxxxxxxxx_xxxxx=x%xx	High
194	Argument	xxxxxxx	Low
195	Argument	xxxxxx	Low
196	Argument	xxxxxxxx_xxxx	High
197	Argument	xxx	Low
198	Argument	xxxxxxxx	Medium
199	Argument	xxx	Low
200	Argument	xxxxxxx	Low
201	Argument	xxxxxx	Low
202	Argument	xxxxxxx-xxxxxx	High
203	Argument	xxxx/xxxx	Medium
204	Argument	xxxx	Low
205	Argument	xx xxxx	Low
206	Argument	xxxxxxxxxxxx	Medium
207	Argument	xxxxx	Low
208	Argument	xxxxxxxx_xxx_xxx/xxxx_xxxxxxxx_xxx_xxx	High
209	Argument	xxxxxxxxx	Medium
210	Argument	xxxxxxxxxxxxxxx	High
211	Argument	xxxxx	Low
212	Argument	xx_xxxxx_xx	Medium
213	Argument	xxxxx	Low
214	Argument	xxxxxxx	Low
215	Argument	xxxxx_xxxx_xxxx	High
216	Argument	xxxxxxxx	Medium
217	Argument	xxxxxxxx	Medium
218	Argument	xxxxx	Low
219	Argument	xxxxx xxxx/xxxx xxxx	High
220	Argument	xxxxxxxxxxxxxxxxxxx	High
221	Argument	xxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxx/xxxxxxx/xxxxxxxxxxx/xxxxxxxxxxx	High
222	Argument	xx/xxxxxxxxx/xxxxxxxxxx	High
223	Argument	xxxx_xxxx	Medium
224	Argument	xxxx	Low
225	Argument	xxxx	Low
226	Argument	xx	Low
227	Argument	xx/xxxxxxxxxxx	High
228	Argument	xxxxxx_xxx_xxxx	High
229	Argument	xxxxxxx_xxx	Medium
230	Argument	xxx	Low
231	Argument	xxxx	Low
232	Argument	xxxxxxx	Low
233	Argument	xx_xxxxxxx	Medium
234	Argument	xxxx	Low
235	Argument	xxxx_xxxxxx	Medium
236	Argument	xxxx_xxxx	Medium
237	Argument	xxxx	Low
238	Argument	xxxxxxxxxxx	Medium
239	Argument	xxxxxxx	Low
240	Argument	xxxx	Low
241	Argument	xxxxxxxx	Medium
242	Argument	xxxxxx	Low
243	Argument	xxxx_xx	Low
244	Argument	xxx_xx_xxxx/xxx_xx_xxxxxxxx	High
245	Argument	xxx_xxxxxxxx	Medium
246	Argument	xxxxxxx	Low
247	Argument	xxxxxxxxxx	Medium
248	Argument	xxxxxxxxxxxxxx	High
249	Argument	xxxxxxxxxxxxxx/xxxxxxxxxxxx	High
250	Argument	xxxxxx	Low
251	Argument	xxxxxx_xxxx_xxxx	High
252	Argument	xxxxxx_xxxx	Medium
253	Argument	xxxxxxxx_xxxx	High
254	Argument	xxxxxxxxxx	Medium
255	Argument	xxxxxxxxxxxx	Medium
256	Argument	xxxx	Low
257	Argument	xxxxxx	Low
258	Argument	xxxxxxxxx	Medium
259	Argument	xxxxxx_xxxx_xxx	High
260	Argument	xxxxx	Low
261	Argument	xxxxx	Low
262	Argument	xxxxxxxx-xxxxxxxx	High
263	Argument	xxxx	Low
264	Argument	xxx-xxx	Low
265	Argument	xxx	Low
266	Argument	xxx	Low
267	Argument	xxxx	Low
268	Argument	xxxxxx/xxxxxx	High
269	Argument	xxxxxxxx	Medium
270	Argument	xxxxxxxxxxx	Medium
271	Argument	xxxx_xxxxxxxxx	High
272	Argument	xxxx	Low
273	Argument	xxx	Low
274	Argument	_xxxxxxxx	Medium
275	Input Value	...	Low
276	Input Value	../	Low
277	Input Value	/../	Low
278	Input Value	/xx=/xx=xxx.xxx/xx=xxx.xxx.	High
279	Input Value	x%xx	Low
280	Input Value	xxxxxx	Low
281	Pattern	xxxx	Low
282	Pattern	\|xx\|xx\|xx\|	Medium
283	Pattern	\|xx xx xx xx\|	High
284	Network Port	xxxxx	Low
285	Network Port	xxxxx xxx-xxx, xxx	High
286	Network Port	xxx/xx (xxx)	Medium
287	Network Port	xxx/xxxxx	Medium
288	Network Port	xxx xxxxxx xxxx	High

References (12)

The following list contains external sources which discuss the actor and the associated activities:

◂ PreviousOverviewNext ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!