BistroMath Análisis

IOB - Indicator of Behavior (214)

Cronología

Idioma

en174
de26
ja8
fr4
es2

País

gb148
us34
ch22
de4
fr2

Actores

Ocupaciones

Interesar

Cronología

Escribe

Proveedor

Producto

Apache HTTP Server8
Microsoft Windows6
Microsoft Office4
Apache Tomcat4
NetScout nGeniusPULSE4

Vulnerabilidad

#VulnerabilidadBaseTemp0dayHoyExpConCTIEPSSCVE
1nginx escalada de privilegios6.96.9$0-$5k$0-$5kNot DefinedNot Defined0.160.00241CVE-2020-12440
2Abacus ERP Multi Factor Authentication autenticación débil7.27.0$0-$5k$0-$5kNot DefinedOfficial Fix0.000.00266CVE-2022-1065
3Microsoft IIS cross site scripting5.24.7$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.040.00548CVE-2017-0055
4Microsoft Windows Win32k Privilege Escalation7.26.5$25k-$100k$0-$5kProof-of-ConceptOfficial Fix0.000.00137CVE-2022-21882
5Apache OFBiz Exception divulgación de información6.56.2$5k-$25k$0-$5kNot DefinedOfficial Fix0.000.00142CVE-2021-25958
6BlackBer Protect Message Broker Privilege Escalation5.55.5$0-$5k$0-$5kNot DefinedUnavailable0.000.00044CVE-2021-32023
7Oracle WebLogic Server Core Remote Code Execution9.89.6$25k-$100k$5k-$25kNot DefinedOfficial Fix0.030.00137CVE-2023-22069
8Spring Framework JSONP Cross-Domain escalada de privilegios5.75.6$0-$5k$0-$5kNot DefinedOfficial Fix0.030.00264CVE-2018-11040
9ownCloud graphapi GetPhpInfo.php divulgación de información7.67.5$0-$5k$0-$5kNot DefinedOfficial Fix0.030.89250CVE-2023-49103
10Esri ArcGIS Server sql injection8.18.0$0-$5k$0-$5kNot DefinedOfficial Fix0.030.00123CVE-2021-29114
11Moment.js directory traversal6.96.7$0-$5k$0-$5kNot DefinedOfficial Fix0.090.00330CVE-2022-24785
12Rapid4 RapidFlows Enterprise Application Builder GetFile.aspx directory traversal6.46.4$0-$5k$0-$5kNot DefinedNot Defined0.020.00071CVE-2019-11397
13Apache CXF MTOM Request XOP:Include escalada de privilegios7.67.5$5k-$25k$0-$5kNot DefinedOfficial Fix0.020.02850CVE-2022-46364
14HCL Domino Server MIME Message desbordamiento de búfer9.89.4$0-$5k$0-$5kNot DefinedOfficial Fix0.020.00491CVE-2020-14244
15sitepress-multilingual-cms Plugin class-wp-installer.php cross site request forgery6.56.2$0-$5k$0-$5kNot DefinedOfficial Fix0.020.00427CVE-2020-10568
16Dropbear SSH escalada de privilegios8.58.2$0-$5k$0-$5kNot DefinedOfficial Fix0.000.02911CVE-2016-7406
17Atlassian JIRA Server/Data Center Email Template Privilege Escalation4.74.5$0-$5k$0-$5kNot DefinedOfficial Fix0.010.00181CVE-2021-43947
18Matrix libolm Session Object olm_session_describe desbordamiento de búfer6.36.0$0-$5k$0-$5kNot DefinedOfficial Fix0.000.00685CVE-2021-44538
19Apache Tomcat UTF-8 Decoder denegación de servicio6.46.3$5k-$25k$0-$5kNot DefinedOfficial Fix0.030.01830CVE-2018-1336
20polkit pkexec escalada de privilegios8.88.1$0-$5k$0-$5kProof-of-ConceptWorkaround0.030.00046CVE-2021-4034

IOC - Indicator of Compromise (8)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

TTP - Tactics, Techniques, Procedures (18)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IOA - Indicator of Attack (41)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDClaseIndicatorEscribeConfianza
1File/app/register.phppredictiveAlto
2File/etc/cron.d/predictiveMedio
3File/rom-0predictiveBajo
4File/uncpath/predictiveMedio
5File/usr/bin/pkexecpredictiveAlto
6Filexxxxx/xxxxx.xxxpredictiveAlto
7Filex:\xxxxxxx\xxxxxxxx\xxxxxx\xxxpredictiveAlto
8Filexxx.xxxpredictiveBajo
9Filexxxxxx.xxxpredictiveMedio
10Filexxx/xxxx/xxx_xxxx.xpredictiveAlto
11Filexxxxxxx.xxxxpredictiveMedio
12Filexxxxxxxxxx.xxxpredictiveAlto
13Filexxxxxxx.xxxpredictiveMedio
14Filexxxxxxxx/xxxxx-xx-xxxxxxxxx.xxxpredictiveAlto
15Filexxxxx.xxxpredictiveMedio
16Filexxxxx/xxxxxxxx.xpredictiveAlto
17Filexxxxxxxxx/xxxxxx.xxxxx.xxxpredictiveAlto
18Filexxxxxxxx/xxxx?xxxxxx=xxpredictiveAlto
19Filexxxxx.xxxpredictiveMedio
20Filexxxxxx.xxxpredictiveMedio
21Filexxx.xxxxxpredictiveMedio
22Filexxxx-xxxxx.xxxpredictiveAlto
23Filexxxxxxxxxxxxxxxxx.xxxxpredictiveAlto
24Filexxxxxxxx/predictiveMedio
25File~/xxxxxxxxxxxxx.xxxpredictiveAlto
26ArgumentxxpredictiveBajo
27ArgumentxxxxxpredictiveBajo
28ArgumentxxpredictiveBajo
29ArgumentxxxxxxxxpredictiveMedio
30ArgumentxxxxxpredictiveBajo
31ArgumentxxxxpredictiveBajo
32ArgumentxxxxpredictiveBajo
33ArgumentxxxxxxxxxxxpredictiveMedio
34Argumentx_xxxxpredictiveBajo
35Argumentxxxxxx_xxxpredictiveMedio
36ArgumentxxxxxxxxpredictiveMedio
37ArgumentxxxxxpredictiveBajo
38Argumentxxxxx/xxxxxpredictiveMedio
39ArgumentxxxxxxpredictiveBajo
40Argumentxxxxxxxx/xxxxpredictiveAlto
41Network Portxxx xxxxxx xxxxpredictiveAlto

Referencias (3)

The following list contains external sources which discuss the actor and the associated activities:

Do you need the next level of professionalism?

Upgrade your account now!