Panda Analisi

IOB - Indicator of Behavior (550)

Sequenza temporale

Linguaggio

en490
zh50
de8
pl2

Nazione

us300
cn146
ir10
gb4
ch2

Attori

Attività

Interesse

Sequenza temporale

Genere

Fornitore

Prodotto

Oracle Database Server36
Microsoft Windows30
Siemens SIMATIC PCS 718
Siemens SIMATIC WinCC14
Joomla CMS10

Vulnerabilità

#VulnerabilitàBaseTemp0dayOggiSfrConCTIEPSSCVE
1Atlassian Jira Service Management Server/Data Center InsightDefaultCustomFieldConfig.jspa cross site scripting3.53.4$0-$5k$0-$5kNot DefinedOfficial Fix0.000.00054CVE-2021-43943
2DZCP deV!L`z Clanportal config.php escalazione di privilegi7.36.6$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.670.00943CVE-2010-0966
3Citrix Gateway escalazione di privilegi7.57.5$5k-$25k$5k-$25kNot DefinedNot Defined0.020.00137CVE-2020-10111
4webbuilders-group silverstripe-kapost-bridge KapostService.php getPreview sql injection7.57.4$0-$5k$0-$5kNot DefinedOfficial Fix0.030.00141CVE-2015-10077
5F5 BIG-IP Advanced WAF Appliance Mode Restrictions Privilege Escalation7.97.8$5k-$25k$0-$5kNot DefinedOfficial Fix0.000.00065CVE-2022-25946
6vsftpd deny_file vulnerabilità sconosciuta3.73.6$0-$5k$0-$5kNot DefinedOfficial Fix0.000.00312CVE-2015-1419
7OpenSSH Authentication Username rivelazione di un 'informazione5.34.8$5k-$25k$0-$5kHighOfficial Fix0.000.10737CVE-2016-6210
8Microsoft IIS cross site scripting5.24.7$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.020.00548CVE-2017-0055
9SmarterTools SmarterMail directory traversal6.46.1$0-$5k$0-$5kNot DefinedOfficial Fix0.020.00062CVE-2019-7213
10Joomla CMS sql injection7.36.9$5k-$25k$0-$5kProof-of-ConceptNot Defined0.000.00264CVE-2013-1453
11Microsoft Windows Hyper-V escalazione di privilegi8.48.2$25k-$100k$5k-$25kNot DefinedOfficial Fix0.000.00137CVE-2019-0620
12Thomson Reuters Desktop Extensions Service Port 6677 ThomsonReuters.Desktop.Service.exe directory traversal9.89.8$0-$5k$0-$5kNot DefinedNot Defined0.030.15636CVE-2019-8385
13OpenCycleCompass server-php login.php sql injection8.18.0$0-$5k$0-$5kNot DefinedOfficial Fix0.090.00132CVE-2015-10086
14luelista miniConf URL Scanning MessageView.cs denial of service4.84.8$0-$5k$0-$5kNot DefinedOfficial Fix0.030.00088CVE-2015-10025
15DBRisinajumi d2files D2filesController.php actionDownloadFile sql injection6.96.9$0-$5k$0-$5kNot DefinedOfficial Fix0.120.00144CVE-2015-10018
1682Flex WEIPDCRM cross site scripting4.44.3$0-$5k$0-$5kNot DefinedOfficial Fix0.080.00063CVE-2015-10007
17ByWater Solutions bywater-koha-xslt systempreferences.pl StringSearch sql injection5.55.5$0-$5k$0-$5kNot DefinedOfficial Fix0.060.00145CVE-2015-10091
18githuis P2Manage Database.cs Execute sql injection6.96.9$0-$5k$0-$5kNot DefinedOfficial Fix0.090.00148CVE-2015-10054
19HPI-Information-Systems ProLOD sql injection6.96.9$0-$5k$0-$5kNot DefinedOfficial Fix0.030.00148CVE-2015-10017
20OpenDNS OpenResolve API endpoints.py get cross site scripting4.14.1$0-$5k$0-$5kNot DefinedOfficial Fix0.050.00063CVE-2015-10010

IOC - Indicator of Compromise (23)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

TTP - Tactics, Techniques, Procedures (21)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IOA - Indicator of Attack (232)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDClasseIndicatorGenereFiducia
1File/api/predictiveBasso
2File/api/adduserspredictiveAlto
3File/api/blade-log/api/listpredictiveAlto
4File/cgi-bin/editBookmarkpredictiveAlto
5File/cgi-bin/gopredictiveMedia
6File/cgi-bin/system_mgr.cgipredictiveAlto
7File/cgi-bin/webviewer_login_pagepredictiveAlto
8File/client/api/json/v2/nfareports/compareReportpredictiveAlto
9File/dede/file_manage_control.phppredictiveAlto
10File/etc/services/DEVICE.TIME.phppredictiveAlto
11File/forum/away.phppredictiveAlto
12File/horde/imp/search.phppredictiveAlto
13File/index.phppredictiveMedia
14File/netflow/jspui/selectDevice.jsppredictiveAlto
15File/public/login.htmpredictiveAlto
16File/public/login.htm?errormsg=&loginurl=%22%3E%3Csvg%20onload=prompt%28/XSS/%29%3EpredictiveAlto
17File/reports/rwservletpredictiveAlto
18File/SASWebReportStudio/logonAndRender.dopredictiveAlto
19File/search.htm?searchtext=%22%3E%3Csvg%20onload=prompt%28/XSS/%29%3EpredictiveAlto
20File/secure/admin/InsightDefaultCustomFieldConfig.jspapredictiveAlto
21File/secure/admin/ViewInstrumentation.jspapredictiveAlto
22File/spip.phppredictiveMedia
23File/tab_tariffe.phppredictiveAlto
24File/tmppredictiveBasso
25File/tmp/app/.envpredictiveAlto
26File/xxxxxxx/predictiveMedia
27File/xx/xxxxxxx/xxxx-xxxx-xxxxxx-xxx-xxxxpredictiveAlto
28File/xxxxxxxxxx_xxxxxxx.xxxpredictiveAlto
29Filexxx/xxxx_xxxx.xxxpredictiveAlto
30Filexxxxxxx.xxxpredictiveMedia
31Filexxx_xxxxxxxx.xxxpredictiveAlto
32Filexxxxx/xxxxxx/xxxxx-xxxxxx-xxxxxxxx.xxxpredictiveAlto
33Filexxxxx/xxxxxxxxxxxxxxxxx.xxpredictiveAlto
34Filexxxxxxx.xxx?xxx=xxx/xx=xxxx/xxxxx=xxxxpredictiveAlto
35Filexxxxxxxxxxxxx/xxxxxxxxxx/xxx_xxxxx/xxxxxxx/xxxxx.xxxpredictiveAlto
36Filexxxx/xxxxxxx.xxxpredictiveAlto
37Filexxxxx_xxxxxx.xxxpredictiveAlto
38Filexxxx/xxxxx.xxxpredictiveAlto
39Filexxx/xxxxx/xxxxxxxxxx/xxxxxxxxxxxxxxx.xxxpredictiveAlto
40Filexxx/xxxxxxxx/xxxx/xxxxxxxxxxxxxxxxx.xxxxpredictiveAlto
41Filexxx/xxx/xxxx/xxxx/xxx/xxxxxxx/xxxxxxxxx/xxxxxxxxxx.xxxxpredictiveAlto
42Filexxx/xxxxx/xxxxxxxxx/_xxxxxxxx.xxxx.xxxpredictiveAlto
43Filexxx\xxxx_xxxxxxxxx\xxxx_xxxxxxxxx_xxxx.xxxpredictiveAlto
44Filexxx_xxxx/xxxxxxxx/xxxxxxxxxxx.xxpredictiveAlto
45Filexxxx.xxx.xxxpredictiveMedia
46Filexxxxxxx.xxpredictiveMedia
47Filexxxxxxxx_xxxxxxx.xxxpredictiveAlto
48Filexxx-xxx/xxxxxxxxxx.xxpredictiveAlto
49Filexxxxxxx/xxxxx-xxx-xxxxxxxx.xxxpredictiveAlto
50Filexxxx/xxxxxxx/xxxxxxxxxxxxx.xxxpredictiveAlto
51Filexxx/xxxxxxxxx/xxxxxx/xxxxxxxxxxxxx.xxxxpredictiveAlto
52Filexxx\xxxxxxxx\xxxxx\xxxxxx\xxx\xxxxxxxxxx.xxxxpredictiveAlto
53Filexxxxxxxxx.xxxxpredictiveAlto
54Filexxxxxxxxxx/xxxx/xxxxxxxxxxxxxx.xxxpredictiveAlto
55Filexxxxxxxxxxx/xxxxxxxxxxxxxxxxx.xxxpredictiveAlto
56Filexxxxxxxxxxx/xxxx.xxxpredictiveAlto
57Filexxxxxxxxxx.xxxpredictiveAlto
58Filexxxxxxxxxxxxx.xxxpredictiveAlto
59Filexxxxxx/xx_xxx.xpredictiveAlto
60Filexxxxxx/xxxxxxx.xxpredictiveAlto
61Filexxxx/xxxxxxxxxxxxxxx.xxxpredictiveAlto
62Filexxxx/xxxxx.xxpredictiveAlto
63Filexxx_xxxxxx_xxxx_xxxxxx.xpredictiveAlto
64Filexxx_xxxxxxxxxxxx.xxxpredictiveAlto
65FilexxxxxxxxpredictiveMedia
66Filexx_xxxxxxx.xxxpredictiveAlto
67Filexxxx/xxxxxxxxxx/xxxxxx-xxx_xxxx_xxx.xpredictiveAlto
68Filexx_xxxxxxx.xxxpredictiveAlto
69Filexxxxx-xxxxxx/xxxxxxxx/xxxx-xxxx.xxpredictiveAlto
70Filexxxxxxxxx/xxxxx/xxxxxxxxxxxx/xxxxxxxxx.xxxpredictiveAlto
71Filexxxxxxxx.xxxpredictiveMedia
72Filexxxxxxxxxxxxxxxx.xxxxpredictiveAlto
73Filexxxxxxxxx.xxxpredictiveAlto
74Filexxxxxxxxx/xxxx.xxxpredictiveAlto
75Filexxxxx_xxxxxxxx.xxxpredictiveAlto
76Filexxxxxxxxxxxxxxxxxxxxx.xxxpredictiveAlto
77Filexxxxxx/xxxxxpredictiveMedia
78Filexxx/xxxxx.xxxxxxxxxxx.xxxpredictiveAlto
79Filexxx/xxxxxx.xxxpredictiveAlto
80Filexxx/xxxxx.xxxpredictiveAlto
81Filexxxxxxxx/xxxxx-xxxxxxxxxx-xxxx.xxxpredictiveAlto
82Filexxxxxxxx/xxxxxx-xxxxxxx.xxxpredictiveAlto
83Filexxxxxxxx/xxx_xxxxxxxxx_xxxxxxxxx_xxxxxxx.xxxpredictiveAlto
84Filexxxxx.xxxpredictiveMedia
85Filexxxxx.xxxxpredictiveMedia
86Filexxxxx.xxxpredictiveMedia
87Filexxxxxx-xxxxx-xxxxxx.xxxpredictiveAlto
88Filexxxxxxxxx/xxxxxxxxxxxxxxxx/xxxxxxxxxxxx/predictiveAlto
89Filexx/xxxxxx.xxxpredictiveAlto
90Filexx/xxxxxxxx.xxpredictiveAlto
91Filexxx/xxx/xxxxxx.xxpredictiveAlto
92Filexxxxxxxxxxx/xxxxxxxxxxx.xpredictiveAlto
93Filexxxxx/xxx/xxxxxxxxx/xx_xxxxxx_xxx.xpredictiveAlto
94Filexxxxx.xxpredictiveMedia
95Filexxxxx.xxxpredictiveMedia
96Filexxxxxxxx.xxxpredictiveMedia
97Filexxxxxxxxx.xpredictiveMedia
98Filexxxxxxxx/xxxxxxxxxxx.xxpredictiveAlto
99Filexxxx/xxxxx.xxxpredictiveAlto
100Filexxx_xxxxx.xxxpredictiveAlto
101Filexxxxx_xxxx.xxxpredictiveAlto
102Filexxx/xxx/xxx.xpredictiveAlto
103Filexxxx.xxxpredictiveMedia
104Filexxxxxxxxx.xxxpredictiveAlto
105Filexxxxxxxxxxx.xxpredictiveAlto
106Filexxxxxx_xxxxxxx_xxxxx.xxxpredictiveAlto
107Filexxxx.xxxpredictiveMedia
108Filexxxxx-xxx.xpredictiveMedia
109Filexxxxxxx.xxx?xxxxx=xxx_xxxxxxxxpredictiveAlto
110Filexxxxx.xxxpredictiveMedia
111Filexxxxxxxxxx/xxxxxxxx.xxpredictiveAlto
112Filexxxx.xxxpredictiveMedia
113Filexxxxxxxxxxxxxx/xxxxx.xxpredictiveAlto
114Filexxxxx.xxxpredictiveMedia
115Filexxxxxxxxxxxx.xxxpredictiveAlto
116Filexxxxxxxx.xxxpredictiveMedia
117Filexxxx-xxxxxxx-xxx.xxpredictiveAlto
118Filexxxxxxxxxxx/xxxxxxxxx.xxpredictiveAlto
119Filexxxx.xxxpredictiveMedia
120Filexxxx-xxx.xxxpredictiveMedia
121Filexxx_xxxx.xpredictiveMedia
122Filexxxxxxx_xxxxxx_xxxxxxxxxx.xxxpredictiveAlto
123Filexxxxxx.xxxpredictiveMedia
124Filexxxxxx/xxxxx.xxxpredictiveAlto
125Filexxxx_xxxxxx.xxxpredictiveAlto
126Filexxxxxxxxxxxxxxx.xxxxx.xxxpredictiveAlto
127Filexxxx.xxxpredictiveMedia
128Filexxxx_xxxxxxx_xxxxxxxx.xxxpredictiveAlto
129Filexxxx_xxxxxx_xxxxxx.xxxpredictiveAlto
130Filexxxxxx.xxxpredictiveMedia
131Filexxxxxxxxx/xxxxxxxxx.xxxxx.xxxpredictiveAlto
132Filexxxx/xxxxxxxxxx.xxxpredictiveAlto
133Filexxx/xxxxxxxx.xxpredictiveAlto
134Filexxx/xxxxxx.xpredictiveMedia
135Filexxx/_xxxxx.xxpredictiveAlto
136Filexxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxx.xxpredictiveAlto
137Filexxxxxx.xxxpredictiveMedia
138Filexxx/xxxxx/xxxxx/xxxxx.xxxpredictiveAlto
139Filexxx_xxxxxxx.xxxpredictiveAlto
140Filexxxxxxxxxxxxxx.xxxxxxx.xxxxxxx.xxxpredictiveAlto
141Filexxxxxxxxx/xx_xxxxxxxxx.xxxpredictiveAlto
142Filexxxxx/xxxx.xxpredictiveAlto
143Filexxxxxxx/xxxxxx/xxxxx/xxxxxxx/xxx/xxx.xxxpredictiveAlto
144Filexxxxxxxxxxxx-xxxxxxxx.xxxpredictiveAlto
145Filexx-xxxxxxxx/xxxxx-xx-xxxxx.xxxpredictiveAlto
146Filexx-xxxxx-xxxxxxx.xxxpredictiveAlto
147Libraryxxxxxxxx/xxxxx.xpredictiveAlto
148Libraryxxxxxxx/xxxxxxxx.xxxpredictiveAlto
149Libraryxxx/xxxxxxx.xxxxxx.xxx/xxx/xxxxxxxxxxxxx.xxpredictiveAlto
150Libraryxxxxxx.xxxpredictiveMedia
151Argument$xxxxxxpredictiveBasso
152ArgumentxxxxxxpredictiveBasso
153ArgumentxxxxpredictiveBasso
154Argumentxxx_xxxpredictiveBasso
155Argumentxxx/xxxxpredictiveMedia
156Argumentxxxx_xxxx_xxpredictiveMedia
157ArgumentxxxxxxxxpredictiveMedia
158ArgumentxxpredictiveBasso
159Argumentxxx_xxpredictiveBasso
160ArgumentxxxxxxpredictiveBasso
161ArgumentxxxxxpredictiveBasso
162ArgumentxxxxpredictiveBasso
163ArgumentxxxxxxpredictiveBasso
164ArgumentxxxxxxxxpredictiveMedia
165Argumentxxxxxxxxx->xxxxxxxxxpredictiveAlto
166ArgumentxxxxpredictiveBasso
167ArgumentxxxxxxxpredictiveBasso
168ArgumentxxxxxxxxpredictiveMedia
169ArgumentxxxxxxxxpredictiveMedia
170ArgumentxxxxxxxxpredictiveMedia
171Argumentxxxxxxxxxx_xxxx_xxxxxxpredictiveAlto
172ArgumentxxxxpredictiveBasso
173ArgumentxxxxxxxxxpredictiveMedia
174Argumentxxxx_xxxxxxpredictiveMedia
175ArgumentxxpredictiveBasso
176Argumentxxx/xxxpredictiveBasso
177ArgumentxxxpredictiveBasso
178ArgumentxxxxxpredictiveBasso
179ArgumentxxxxxxxxxxpredictiveMedia
180ArgumentxxxxpredictiveBasso
181Argumentxxxxx/xxxxx_xxxxxxxx/xxxxpredictiveAlto
182ArgumentxxxpredictiveBasso
183Argumentxxxxxxxxx_xxxxxxxx_xxxxpredictiveAlto
184Argumentxxxxxxx/xxxxxxxxpredictiveAlto
185ArgumentxxxxxpredictiveBasso
186ArgumentxxxxpredictiveBasso
187Argumentxxxxxx/xxxxxxx/xxxx_xxxx/xxxxxxx/xxxxpredictiveAlto
188ArgumentxxxxxxxxxxxpredictiveMedia
189Argumentxxx_xxxxxxxpredictiveMedia
190Argumentxxxxxx xxxxxxpredictiveAlto
191ArgumentxxxxxxxxxxxpredictiveMedia
192ArgumentxxxxpredictiveBasso
193Argumentxxxxx/xxxxxpredictiveMedia
194ArgumentxxxxxxxxpredictiveMedia
195ArgumentxxxxxxxxpredictiveMedia
196Argumentxxxxx_xxxx_xxxxpredictiveAlto
197ArgumentxxxxxxpredictiveBasso
198ArgumentxxxpredictiveBasso
199ArgumentxxxxxxxxxpredictiveMedia
200Argumentx_xxpredictiveBasso
201ArgumentxxxxpredictiveBasso
202ArgumentxxxxxxpredictiveBasso
203ArgumentxxxxxxxxxxpredictiveMedia
204ArgumentxxxxpredictiveBasso
205ArgumentxxpredictiveBasso
206Argumentxxxxxx_xxxxxxx_xxxxxxxxx_xxxx/xxxxxx_xxxxxxx_xxxxxxx_xxxxpredictiveAlto
207Argumentxxxxxx/xxxxxpredictiveMedia
208ArgumentxxxxxxxxxxxxpredictiveMedia
209ArgumentxxxxxxxxpredictiveMedia
210ArgumentxxxxxxpredictiveBasso
211ArgumentxxxxxxxxxxxxxpredictiveAlto
212Argumentxxxx.xxx.xxxx/xxxxx.xxxx/xxxx.xxxxxxxx.xxxx/xxxx.xxxxpredictiveAlto
213ArgumentxxxpredictiveBasso
214ArgumentxxxpredictiveBasso
215ArgumentxxxxpredictiveBasso
216ArgumentxxxxpredictiveBasso
217ArgumentxxxxpredictiveBasso
218ArgumentxxxpredictiveBasso
219ArgumentxxxxxxxpredictiveBasso
220ArgumentxxxxpredictiveBasso
221Argumentxxxxxxxx/xxxxxxxxpredictiveAlto
222Argumentxxxxxxxx/xxxxxxxx/xxxxx_xxxx/xxxx_xxxx/xxxxxxx/xxxxxpredictiveAlto
223Argumentxxxxxxx_xxxpredictiveMedia
224Argumentx-xxxxxxxxx-xxxpredictiveAlto
225Input Value../../../../../xxx/xxx/xxxxx/xxxx/xxxxxxxx/xxxxx/xxx.xxxpredictiveAlto
226Input Value/xxx/xxxxxxpredictiveMedia
227Input Value/xxx/xxxxxxpredictiveMedia
228Input ValuexxxxxxxxxxxxxxxxpredictiveAlto
229Input Value</xxxxxx><xxxxxx>xxxxx(x)</xxxxxx>predictiveAlto
230Input ValuexxxxxxpredictiveBasso
231Input Value…/.predictiveBasso
232Network Portxxx/xx (xxx xxxxxxxx)predictiveAlto

Referenze (4)

The following list contains external sources which discuss the actor and the associated activities:

Interested in the pricing of exploits?

See the underground prices here!