Bublik Analyse

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (7)

Langue

en	8

De campagne

us	4
ne	4

Acteurs

Bublik	1

Intérêt

Taper

Groupware Software	2
Not Defined	2
Operating System	2

Fournisseur

Synacor	2
Saifor	2
Microsoft	2

Produit

Synacor Zimbra Collaboration Suite	2
Saifor CVMS HUB	2
Microsoft Windows	2

Vulnérabilités

#	Vulnérabilité	Base	Temp	0day	Aujourd'hui	Exp	Con	EPSS	CTI	CVE
1	Saifor CVMS HUB HTTP Parameter secciones.xhtml sql injection	7.5	7.5	$0-$5k	Calculateur	Not Defined	Not Defined	0.00087	0.00	CVE-2018-6792
2	Synacor Zimbra Collaboration Suite Header ProxyServlet.java elévation de privilèges	5.5	5.3	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00732	0.02	CVE-2021-35209
3	Synacor Zimbra Collaboration Suite Calendar Invite ZmMailMsgView.js cross site scripting	3.5	3.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00155	0.03	CVE-2021-35208
4	Dropbear svr-auth.c recv_msg_userauth_request User divulgation de l'information	5.3	5.2	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00302	0.04	CVE-2018-15599
5	ProFTPD mod_sftp/mod_sftp_pam kbdint.c resp_count dénie de service	7.5	7.1	$0-$5k	$0-$5k	Proof-of-Concept	Unavailable	0.01980	0.02	CVE-2013-4359
6	Microsoft Windows Token Security Feature elévation de privilèges	7.1	6.8	$25k-$100k	$0-$5k	Not Defined	Official Fix	0.00046	0.00	CVE-2020-0981

IOC - Indicator of Compromise (9)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	adresse IP	Hostname	Acteur	Identified	Taper	Confiance
1	66.23.234.229	host.double-six.net	Bublik	28/06/2023	verified	Élevé
2	66.128.53.179		Bublik	22/07/2021	verified	Élevé
3	XX.XX.XX.XXX	xxxx.xxxxxx.xxx	Xxxxxx	28/06/2023	verified	Élevé
4	XXX.XX.XX.XXX		Xxxxxx	22/07/2021	verified	Élevé
5	XXX.XXX.XX.XX		Xxxxxx	05/05/2022	verified	Élevé
6	XXX.XXX.X.XX	xxxx-xxxx-xxxx-xxx-xx-xxxx.xxxxxxxx.xxx	Xxxxxx	22/07/2021	verified	Élevé
7	XXX.XXX.XXX.XX		Xxxxxx	28/04/2022	verified	Élevé
8	XXX.XX.XXX.XX	xxxxx.xx	Xxxxxx	22/07/2021	verified	Élevé
9	XXX.XX.XXX.XXX	x-xxxx.x-xxxxxx.xxx	Xxxxxx	05/05/2022	verified	Élevé

TTP - Tactics, Techniques, Procedures (5)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	Vulnérabilités	Vecteur d'accès	Taper	Confiance
1	T1055	CWE-74	Improper Neutralization of Data within XPath Expressions	predictive	Élevé
2	TXXXX.XXX	CWE-XX	Xxxxx Xxxx Xxxxxxxxx	predictive	Élevé
3	TXXXX	CWE-XXX	Xxxxxxxxx Xxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	Élevé
4	TXXXX	CWE-XX	Xxx Xxxxxxxxx	predictive	Élevé
5	TXXXX	CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	Élevé

IOA - Indicator of Attack (6)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	Classe	Indicator	Taper	Confiance
1	File	/cvms-hub/privado/seccionesmib/secciones.xhtml	predictive	Élevé
2	File	kbdint.c	predictive	Moyen
3	File	xxxxxxxxxxxx.xxxx	predictive	Élevé
4	File	xxx-xxxx.x	predictive	Moyen
5	File	xxxxxxxxxxxxx.xx	predictive	Élevé
6	Argument	x-xxxx	predictive	Faible

Références (6)

The following list contains external sources which discuss the actor and the associated activities:

◂ PrécédentAperçuSuivant ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!