South Sudan Unknown Analisi

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (34)

Linguaggio

en	28
de	4
es	2

Nazione

us	18
dk	2
id	2
in	2
am	2

Attori

Gabon	1

Interesse

Genere

Not Defined	16
Programming Language Software	4
Wireless LAN Software	2
Application Server Software	2
SSH Server Software	2

Fornitore

Not Defined	12
PHP Arena	2
Thomas R. Pasawicz	2
RevoWorks	2
Tecno	2

Prodotto

PHP Arena paBugs	2
Thomas R. Pasawicz HyperBook Guestbook	2
Python	2
EPrints	2
RevoWorks Browser	2

Vulnerabilità

#	Vulnerabilità	Base	Temp	0day	Oggi	Sfr	Con	CTI	EPSS	CVE
1	Thomas R. Pasawicz HyperBook Guestbook Password Database gbconfiguration.dat Hash rivelazione di un 'informazione	5.3	5.2	$5k-$25k	$0-$5k	High	Workaround	0.02	0.02016	CVE-2007-1192
2	DZCP deV!L`z Clanportal config.php escalazione di privilegi	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.32	0.00943	CVE-2010-0966
3	Oracle WebLogic Server Remote Code Execution	9.8	9.4	$25k-$100k	$0-$5k	Not Defined	Official Fix	0.00	0.96044	CVE-2020-14825
4	CodeIgniter escalazione di privilegi	8.5	8.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	0.00116	CVE-2023-32692
5	Mikrotik RouterOS SNMP rivelazione di un 'informazione	8.0	7.7	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.04	0.00307	CVE-2022-45315
6	Proxmox Virtual Environment cross site scripting	6.2	6.2	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	0.00124	CVE-2022-31358
7	Tecno 4G Portable WiFi TR118 Ping Tool goform_get_cmd_process escalazione di privilegi	7.5	7.2	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.04	0.00046	CVE-2023-6304
8	Python plistlib Module XML External Entity	7.6	7.6	$0-$5k	$0-$5k	Not Defined	Not Defined	0.02	0.00129	CVE-2022-48565
9	SourceCodester Attendance and Payroll System position_edit.php sql injection	7.5	7.2	$0-$5k	Calcolo	Proof-of-Concept	Not Defined	0.00	0.00088	CVE-2022-28020
10	Fortinet FortiOS Execute Extender Command buffer overflow	6.4	6.1	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	0.00042	CVE-2023-29182
11	Web Stories Plugin REST API Endpoint proxy escalazione di privilegi	8.0	7.8	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	0.00104	CVE-2022-3708
12	Dropbear SSH escalazione di privilegi	8.5	8.2	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	0.02911	CVE-2016-7406
13	EPrints Latex escalazione di privilegi	8.0	8.0	$0-$5k	$0-$5k	Not Defined	Not Defined	0.03	0.01321	CVE-2021-3342
14	node-latex-pdf escalazione di privilegi	8.1	8.1	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	0.00252	CVE-2020-28433
15	Zoho ManageEngine ADManager Plus Proxy Settings Privilege Escalation	5.7	5.7	$0-$5k	$0-$5k	Not Defined	Not Defined	0.02	0.00105	CVE-2022-42904
16	RevoWorks Browser Privilege Escalation	5.5	5.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	0.00306	CVE-2021-20790
17	Order Status Batch Change Plug-In cross site scripting	3.5	3.4	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	0.00083	CVE-2021-20828
18	Konnichiwa Membership Plugin Parameter subscriptions.html.php cross site scripting	5.2	5.1	$0-$5k	Calcolo	Not Defined	Official Fix	0.00	0.00068	CVE-2021-38317
19	F5 BIG-IP iControl REST Authentication bash autenticazione debole	9.8	9.3	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.02	0.97464	CVE-2022-1388
20	OpenBB read.php sql injection	7.3	7.0	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	0.00250	CVE-2005-1612

IOC - Indicator of Compromise (69)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	indirizzo IP	Hostname	Attore	Identified	Genere	Fiducia
1	38.43.72.0		South Sudan Unknown	26/05/2023	verified	Alto
2	41.79.24.0		South Sudan Unknown	11/01/2023	verified	Alto
3	41.79.120.0		South Sudan Unknown	11/01/2023	verified	Alto
4	41.84.208.0		South Sudan Unknown	26/05/2023	verified	Alto
5	41.84.212.0		South Sudan Unknown	26/05/2023	verified	Alto
6	41.138.240.0		South Sudan Unknown	26/05/2023	verified	Alto
7	41.138.244.0		South Sudan Unknown	26/05/2023	verified	Alto
8	41.222.72.0		South Sudan Unknown	11/01/2023	verified	Alto
9	45.12.70.209	choir.globalhilive.com	South Sudan Unknown	11/01/2023	verified	Alto
10	45.12.71.209		South Sudan Unknown	11/01/2023	verified	Alto
11	45.148.27.0		South Sudan Unknown	26/05/2023	verified	Alto
12	46.36.203.151		South Sudan Unknown	11/01/2023	verified	Alto
13	46.36.203.152		South Sudan Unknown	11/01/2023	verified	Alto
14	46.36.203.160		South Sudan Unknown	11/01/2023	verified	Alto
15	XX.XX.XXX.X		Xxxxx Xxxxx Xxxxxxx	26/05/2023	verified	Alto
16	XX.XX.XXX.X		Xxxxx Xxxxx Xxxxxxx	26/05/2023	verified	Alto
17	XX.XX.XXX.X		Xxxxx Xxxxx Xxxxxxx	21/03/2023	verified	Alto
18	XX.XX.XXX.X		Xxxxx Xxxxx Xxxxxxx	21/03/2023	verified	Alto
19	XX.XX.XXX.XX		Xxxxx Xxxxx Xxxxxxx	11/01/2023	verified	Alto
20	XX.XX.XXX.X		Xxxxx Xxxxx Xxxxxxx	21/03/2023	verified	Alto
21	XX.XX.XX.X	xx.xx.xx.x.xxxxxxx.xxx	Xxxxx Xxxxx Xxxxxxx	21/03/2023	verified	Alto
22	XX.XX.XX.X	xx.xx.xx.x.xxxxxxx.xxx	Xxxxx Xxxxx Xxxxxxx	21/03/2023	verified	Alto
23	XX.XX.XX.XX	xx.xx.xx.xx.xxxxxxx.xxx	Xxxxx Xxxxx Xxxxxxx	26/05/2023	verified	Alto
24	XX.XX.XX.XX	xx.xx.xx.xx.xxxxxxx.xxx	Xxxxx Xxxxx Xxxxxxx	26/05/2023	verified	Alto
25	XX.XX.XX.XX	xx.xx.xx.xx.xxxxxxx.xxx	Xxxxx Xxxxx Xxxxxxx	26/05/2023	verified	Alto
26	XX.XX.XX.XX	xx.xx.xx.xx.xxxxxxx.xxx	Xxxxx Xxxxx Xxxxxxx	26/05/2023	verified	Alto
27	XX.XX.XX.XXX	xx.xx.xx.xxx.xxxxxxx.xxx	Xxxxx Xxxxx Xxxxxxx	26/05/2023	verified	Alto
28	XX.XXX.XX.X		Xxxxx Xxxxx Xxxxxxx	26/05/2023	verified	Alto
29	XX.XXX.XX.X		Xxxxx Xxxxx Xxxxxxx	26/05/2023	verified	Alto
30	XX.XXX.XX.X	xx.xxx.xx.x.xxxxxxx.xxx	Xxxxx Xxxxx Xxxxxxx	21/03/2023	verified	Alto
31	XX.XXX.XXX.XX	xxxx-xx.xxx.xxx.xx.xxxxxxxx.xx-xxx.xxx	Xxxxx Xxxxx Xxxxxxx	26/05/2023	verified	Alto
32	XX.XXX.XX.X	xx-xxx-xx-x.xx.xxxxxxxxxxx.xxx	Xxxxx Xxxxx Xxxxxxx	21/03/2023	verified	Alto
33	XXX.XX.XXX.X		Xxxxx Xxxxx Xxxxxxx	21/03/2023	verified	Alto
34	XXX.XX.XX.X		Xxxxx Xxxxx Xxxxxxx	21/03/2023	verified	Alto
35	XXX.XX.XXX.X		Xxxxx Xxxxx Xxxxxxx	21/03/2023	verified	Alto
36	XXX.XX.X.X		Xxxxx Xxxxx Xxxxxxx	21/03/2023	verified	Alto
37	XXX.XX.XX.X		Xxxxx Xxxxx Xxxxxxx	21/03/2023	verified	Alto
38	XXX.XX.XX.X		Xxxxx Xxxxx Xxxxxxx	21/03/2023	verified	Alto
39	XXX.XX.XXX.X		Xxxxx Xxxxx Xxxxxxx	21/03/2023	verified	Alto
40	XXX.XXX.XX.X		Xxxxx Xxxxx Xxxxxxx	26/05/2023	verified	Alto
41	XXX.XXX.XX.X	xxx.xxx.xxx.xx.x.xxxxxxxxxxxxx.xxx	Xxxxx Xxxxx Xxxxxxx	26/05/2023	verified	Alto
42	XXX.XXX.XXX.X		Xxxxx Xxxxx Xxxxxxx	26/05/2023	verified	Alto
43	XXX.XXX.XXX.X		Xxxxx Xxxxx Xxxxxxx	26/05/2023	verified	Alto
44	XXX.XXX.XX.X		Xxxxx Xxxxx Xxxxxxx	21/03/2023	verified	Alto
45	XXX.XXX.XX.X		Xxxxx Xxxxx Xxxxxxx	26/05/2023	verified	Alto
46	XXX.XXX.XX.X		Xxxxx Xxxxx Xxxxxxx	21/03/2023	verified	Alto
47	XXX.XXX.XX.X		Xxxxx Xxxxx Xxxxxxx	21/03/2023	verified	Alto
48	XXX.XXX.XXX.X		Xxxxx Xxxxx Xxxxxxx	11/01/2023	verified	Alto
49	XXX.XXX.XXX.X		Xxxxx Xxxxx Xxxxxxx	26/05/2023	verified	Alto
50	XXX.XX.XX.X		Xxxxx Xxxxx Xxxxxxx	11/01/2023	verified	Alto
51	XXX.XX.XX.X		Xxxxx Xxxxx Xxxxxxx	11/01/2023	verified	Alto
52	XXX.XX.XX.X		Xxxxx Xxxxx Xxxxxxx	11/01/2023	verified	Alto
53	XXX.XX.XXX.X		Xxxxx Xxxxx Xxxxxxx	11/01/2023	verified	Alto
54	XXX.XX.XX.X		Xxxxx Xxxxx Xxxxxxx	11/01/2023	verified	Alto
55	XXX.XXX.XX.X		Xxxxx Xxxxx Xxxxxxx	11/01/2023	verified	Alto
56	XXX.XXX.XXX.X		Xxxxx Xxxxx Xxxxxxx	21/03/2023	verified	Alto
57	XXX.XXX.XXX.X		Xxxxx Xxxxx Xxxxxxx	11/01/2023	verified	Alto
58	XXX.XXX.XXX.X		Xxxxx Xxxxx Xxxxxxx	11/01/2023	verified	Alto
59	XXX.XXX.XXX.X		Xxxxx Xxxxx Xxxxxxx	21/03/2023	verified	Alto
60	XXX.XX.XX.XXX		Xxxxx Xxxxx Xxxxxxx	11/01/2023	verified	Alto
61	XXX.XX.XX.X		Xxxxx Xxxxx Xxxxxxx	26/05/2023	verified	Alto
62	XXX.XXX.XXX.X		Xxxxx Xxxxx Xxxxxxx	21/03/2023	verified	Alto
63	XXX.XXX.XXX.X		Xxxxx Xxxxx Xxxxxxx	11/01/2023	verified	Alto
64	XXX.XXX.XXX.X		Xxxxx Xxxxx Xxxxxxx	26/05/2023	verified	Alto
65	XXX.XXX.X.X		Xxxxx Xxxxx Xxxxxxx	11/01/2023	verified	Alto
66	XXX.XXX.XXX.X		Xxxxx Xxxxx Xxxxxxx	11/01/2023	verified	Alto
67	XXX.XXX.XX.X		Xxxxx Xxxxx Xxxxxxx	11/01/2023	verified	Alto
68	XXX.XXX.XX.X		Xxxxx Xxxxx Xxxxxxx	26/05/2023	verified	Alto
69	XXX.XXX.XXX.X	xxx-xxx-xxx-x.xx.xxxxxxxxxxx.xxx	Xxxxx Xxxxx Xxxxxxx	21/03/2023	verified	Alto

TTP - Tactics, Techniques, Procedures (6)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	Vulnerabilità	Accesso al vettore	Genere	Fiducia
1	T1059	CWE-94	Argument Injection	predictive	Alto
2	T1059.007	CWE-79, CWE-80	Cross Site Scripting	predictive	Alto
3	TXXXX	CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	Alto
4	TXXXX	CWE-XX, CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	Alto
5	TXXXX	CWE-XX	Xxx Xxxxxxxxx	predictive	Alto
6	TXXXX	CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	Alto

IOA - Indicator of Attack (27)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	Classe	Indicator	Genere	Fiducia
1	File	/admin/admapi.php	predictive	Alto
2	File	/api2/html/	predictive	Media
3	File	/goform/goform_get_cmd_process	predictive	Alto
4	File	/mgmt/tm/util/bash	predictive	Alto
5	File	/xxxxxxx/xxxxxxxxxxxx_xxxxxxxxx/xxxxxxx_xxxxxxxx.xxx	predictive	Alto
6	File	/xx/xxxxxxx/xxxxx	predictive	Alto
7	File	xxxxx.xxx	predictive	Media
8	File	xxxxxxxxx.x	predictive	Media
9	File	xxx/xxxxxxxxx?xxxxx	predictive	Alto
10	File	xxxxx.xxxxx.xxx	predictive	Alto
11	File	xxxx/xxxxxxxxxxxxxxx.xxx	predictive	Alto
12	File	xxx/xxxxxx.xxx	predictive	Alto
13	File	xxxxxxxxx.xxx	predictive	Alto
14	File	xxxx.xxx	predictive	Media
15	File	xxxx/xxx/xxxx-xxxxx.xxx	predictive	Alto
16	File	xxxxxxxxxxxx.xxx	predictive	Alto
17	File	\xxxxx\xxxxxxxx_xxxx.xxx	predictive	Alto
18	File	~/xxxxx/xxxxxxxxxxxxx.xxxx.xxx	predictive	Alto
19	Library	xxxxx.xxx	predictive	Media
20	Argument	xxxxxxxx	predictive	Media
21	Argument	xxxxxxx	predictive	Basso
22	Argument	xxxx_xxxxxx/xxxx_xxx/xxxxxxx/xxxx_xxxxxx/xxxx_x/xxxx_x	predictive	Alto
23	Argument	xxxx_xx_xx_xxx	predictive	Alto
24	Argument	xxxx_xx	predictive	Basso
25	Argument	xxx	predictive	Basso
26	Argument	xxx	predictive	Basso
27	Argument	xxxxxxxx/xxxx	predictive	Alto

Referenze (4)

The following list contains external sources which discuss the actor and the associated activities:

◂ PrecedenteVisione D'insiemeIl prossimo ▸

Might our Artificial Intelligence support you?

Check our Alexa App!