Settore Educationinfo

Timeframe: -14 days

Default Categories (58): Access Management Software, Accounting Software, Anti-Malware Software, Anti-Spam Software, Application Server Software, Backup Software, Blog Software, Calendar Software, Chat Software, Cloud Software, Communications System, Database Administration Software, Database Software, Digital Media Player, Directory Service Software, Document Management Software, Document Processing Software, Document Reader Software, Endpoint Management Software, Firewall Software, Groupware Software, Hardware Driver Software, Image Processing Software, Information Management Software, IP Phone Software, Knowledge Base Software, Learning Management Software, Library Management System Software, Log Management Software, Mail Client Software, Mail Server Software, Messaging Software, Middleware, Multimedia Player Software, Multimedia Processing Software, Network Attached Storage Software, Network Encryption Software, Network Management Software, Network Routing Software, Office Suite Software, Operating System, Presentation Software, Printing Software, Programming Language Software, Project Management Software, Remote Access Software, Reporting Software, Router Operating System, Server Management Software, Spreadsheet Software, SSH Server Software, Survey Software, Unified Communication Software, Virtualization Software, Web Browser, Web Server, Wireless LAN Software, Word Processing Software

Sequenza temporale

Fornitore

Linux136
Not Defined110
Mozilla30
QNAP24
MC Technologies8

Prodotto

Linux Kernel136
IrfanView60
QNAP QTS20
QNAP QuTS hero20
Zabbix18

Contromisure

Official Fix320
Temporary Fix0
Workaround0
Unavailable0
Not Defined68

Sfruttabilità

High2
Functional0
Proof-of-Concept20
Unproven0
Not Defined366

Accesso al vettore

Not Defined0
Physical2
Local12
Adjacent148
Network226

Autenticazione

Not Defined0
High34
Low210
None144

Interazione dell'utente

Not Defined0
Required128
None260

C3BM Index

CVSSv3 Base

≤10
≤20
≤318
≤442
≤582
≤682
≤786
≤862
≤98
≤108

CVSSv3 Temp

≤10
≤20
≤320
≤446
≤578
≤6146
≤730
≤854
≤96
≤108

VulDB

≤10
≤20
≤324
≤456
≤582
≤674
≤794
≤844
≤96
≤108

NVD

≤1360
≤20
≤30
≤40
≤54
≤610
≤70
≤814
≤90
≤100

CNA

≤1284
≤20
≤34
≤410
≤54
≤612
≤712
≤832
≤924
≤106

Fornitore

≤1388
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 giorni

<1k48
<2k42
<5k202
<10k14
<25k52
<50k28
<100k2
≥100k0

Exploiter aujourd'hui

<1k252
<2k46
<5k54
<10k32
<25k4
<50k0
<100k0
≥100k0

Sfrutta il volume del mercato

IOB - Indicator of Behavior (1000)

Sequenza temporale

Linguaggio

en876
ja50
de26
fr18
ru14

Nazione

US: USA164
CN: China164
JP: Japan84
CH: Switzerland66
DE: Germany54

Attori

Sandworm6
IcedID3
Mirai3
Cactus3
RedLine Stealer2

Attività

Interesse

Sequenza temporale

Genere

Operating System46
Project Management Software20
Web Browser20
Programming Language Software12
Network Attached Storage Software10

Fornitore

Linux40
Not Defined28
Mozilla20
QNAP12
code-projects10

Prodotto

Linux Kernel40
Mozilla Firefox16
QNAP QTS10
QNAP QuTS hero10
FFmpeg6

Vulnerabilità

#VulnerabilitàBaseTemp0dayOggiSfrConEPSSCTICVE
1code-projects Farmacia visualizar-produto.php sql injection6.36.0$0-$5k$0-$5kProof-of-ConceptNot Defined0.000002.58CVE-2024-12007
2Zabbix API addRelatedObjects sql injection8.18.1$0-$5k$0-$5kNot DefinedNot Defined0.000433.42CVE-2024-42327
3code-projects Wazifa System Setting updatesettings.php cross site scripting5.75.3$0-$5k$0-$5kProof-of-ConceptNot Defined0.000000.50CVE-2024-12001
4code-projects Farmacia editar-fornecedor.php cross site scripting5.75.3$0-$5k$0-$5kProof-of-ConceptNot Defined0.000000.70CVE-2024-11996
5Linux Kernel uvcvideo buffer overflow5.55.3$5k-$25k$0-$5kNot DefinedOfficial Fix0.000001.41CVE-2024-53104
6code-projects Farmacia pagamento.php cross site scripting5.75.3$0-$5k$0-$5kProof-of-ConceptNot Defined0.000450.65CVE-2024-11995
7code-projects Farmacia vendas.php cross site scripting5.75.5$0-$5k$0-$5kProof-of-ConceptNot Defined0.000000.50CVE-2024-11997
8code-projects Farmacia visualizer-forneccedor.chp sql injection7.57.1$0-$5k$0-$5kProof-of-ConceptNot Defined0.000000.36CVE-2024-11998
9Linux Kernel hv_sock denial of service5.75.5$0-$5k$0-$5kNot DefinedOfficial Fix0.000001.01CVE-2024-53103
10D-Link DIR-605L formResetStatistic buffer overflow8.88.4$25k-$100k$0-$5kProof-of-ConceptNot Defined0.000440.71CVE-2024-11959
11FFmpeg VQA File westwood_vqa.c denial of service3.53.4$0-$5k$0-$5kNot DefinedOfficial Fix0.000450.21CVE-2024-36616
12Zabbix HttpRequest Format String8.18.0$0-$5k$0-$5kNot DefinedOfficial Fix0.000430.56CVE-2024-42330
13Snap One OvrC Cloud MAC Address autenticazione debole5.35.1$0-$5k$0-$5kNot DefinedOfficial Fix0.000000.45+CVE-2024-50380
14Snap One OvrC Cloud MAC Address autenticazione debole7.37.0$0-$5k$0-$5kNot DefinedOfficial Fix0.000000.45+CVE-2024-50381
15Zyxel ATP/USG FLEX/USG FLEX 50(W)/USG20(W)-VPN URL directory traversal6.46.4$0-$5k$0-$5kNot DefinedNot Defined0.000430.25CVE-2024-11667
16NuttTaro Video Player for WPBakery Plugin cross site scripting5.04.9$0-$5k$0-$5kNot DefinedNot Defined0.000000.56-CVE-2024-53747
17FFmpeg rkmppdec.c rkmpp_retrieve_frame buffer overflow6.36.0$0-$5k$0-$5kNot DefinedOfficial Fix0.000450.10CVE-2024-35368
18code-projects Simple Car Rental System login.php sql injection7.36.9$0-$5k$0-$5kProof-of-ConceptNot Defined0.000450.30CVE-2024-11962
19FFmpeg CAF Decoder buffer overflow6.36.0$0-$5k$0-$5kNot DefinedOfficial Fix0.000450.15CVE-2024-36617
20FFmpeg AVI Demuxer denial of service3.53.4$0-$5k$0-$5kNot DefinedOfficial Fix0.000450.15CVE-2024-36618

IOC - Indicator of Compromise (28)

These indicators of compromise highlight associated network ranges which are known to be part of research and attack activities.

IDIP rangeAttoreGenereFiducia
12.58.56.0/24RecordBreakerpredictiveAlto
223.154.177.0/24B1txor20predictiveAlto
335.153.249.0/24SliverpredictiveAlto
4XX.XXX.XXX.X/XXXxxxxxx XxxxxxxpredictiveAlto
5XX.XXX.XXX.X/XXXxxxxpredictiveAlto
6XX.XX.XXX.X/XXXxxxxxxxpredictiveAlto
7XX.XX.XX.X/XXXxxxxpredictiveAlto
8XX.XX.XX.X/XXXxxxxpredictiveAlto
9XX.XX.XX.X/XXXxxxxxxxpredictiveAlto
10XX.XXX.XXX.X/XXXxxxxx XxxxxxpredictiveAlto
11XX.XX.XX.X/XXXxxxxxxpredictiveAlto
12XX.XXX.X.X/XXXxxxxpredictiveAlto
13XXX.XXX.XXX.X/XXXxxxxxxxpredictiveAlto
14XXX.XXX.XX.X/XXXxxxpredictiveAlto
15XXX.XXX.XX.X/XXXxxxxpredictiveAlto
16XXX.XXX.X.X/XXXxxxxx XxxxxxpredictiveAlto
17XXX.XX.XXX.X/XXXxxxxx XxxxxxpredictiveAlto
18XXX.XXX.XXX.X/XXXxxxxxpredictiveAlto
19XXX.XXX.XX.X/XXXxxxxxxpredictiveAlto
20XXX.XX.XX.X/XXXxxxxxpredictiveAlto
21XXX.XX.XX.X/XXXxxxxxx XxxxxxpredictiveAlto
22XXX.XXX.XX.X/XXXxxxxxxxpredictiveAlto
23XXX.XXX.XXX.X/XXXxxxpredictiveAlto
24XXX.XXX.XXX.X/XXXxxxx XxxxxxxpredictiveAlto
25XXX.XXX.XXX.X/XXXxxxxxxxpredictiveAlto
26XXX.XXX.XXX.X/XXXxxxxxpredictiveAlto
27XXX.XX.XXX.X/XXXxxxxxpredictiveAlto
28XXX.XXX.XXX.X/XXXxxxpredictiveAlto

TTP - Tactics, Techniques, Procedures (16)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IDTechniqueClasseVulnerabilitàAccesso al vettoreGenereFiducia
1T1006CAPEC-126CWE-22, CWE-35Path TraversalpredictiveAlto
2T1055CAPEC-10CWE-74Improper Neutralization of Data within XPath ExpressionspredictiveAlto
3T1059CAPEC-242CWE-94, CWE-1321Argument InjectionpredictiveAlto
4T1059.007CAPEC-209CWE-79Basic Cross Site ScriptingpredictiveAlto
5TXXXXCAPEC-XXCWE-XXXXxxxxxxxx Xxxx Xxxxxxxxxxx XxxxxxxxxxpredictiveAlto
6TXXXXCAPEC-XXXCWE-XX, CWE-XXXxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx XxxxxxxxxpredictiveAlto
7TXXXXCAPEC-XCWE-XXXXxxxxxxxxx XxxxxxpredictiveAlto
8TXXXXCAPEC-XXXCWE-XXXxx XxxxxxxxxpredictiveAlto
9TXXXX.XXXCAPEC-XCWE-XXXXxxxxxxx XxxxxxxxxxxxxpredictiveAlto
10TXXXXCWE-XXXXxxxxxxxxxx XxxxxxxxxxpredictiveAlto
11TXXXXCAPEC-XXCWE-XXXXxxxxxxxx Xxxxxxx Xx Xxxxxxxxx XxxxxxxxxxxpredictiveAlto
12TXXXX.XXXCAPEC-XXXCWE-XXXXxxxxxx Xxxxxxxxxx Xxx Xxxxxxxx Xxxxxxx Xx Xx-xxxx Xxxxxx XxxxxxxxpredictiveAlto
13TXXXX.XXXCAPEC-XXXCWE-XXXXxxxxxxxxxxxpredictiveAlto
14TXXXXCAPEC-XXXCWE-XXX, CWE-XXX, CWE-XXXXxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx XxxxxxxxxxxpredictiveAlto
15TXXXX.XXXCAPEC-XXXCWE-XXXXxx Xxxxxxxxxx XxxxxpredictiveAlto
16TXXXX.XXXCAPEC-XCWE-XXXXxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx XxxxxxxxxpredictiveAlto

IOA - Indicator of Attack (85)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDClasseIndicatorGenereFiducia
1File/add.phppredictiveMedia
2File/admin/about-us.phppredictiveAlto
3File/admin/add-customer.phppredictiveAlto
4File/admin/add-services.phppredictiveAlto
5File/admin/edit-services.phppredictiveAlto
6File/admin/search-appointment.phppredictiveAlto
7File/admin/view-appointment.phppredictiveAlto
8File/api/dev-console/proxy/internetpredictiveAlto
9File/book_car.phppredictiveAlto
10File/controllers/updatesettings.phppredictiveAlto
11File/xxxxxx-xxxxxxxxxx.xxxpredictiveAlto
12File/xxxxxx_xxxxxxxx_xxxxxxx.xxxpredictiveAlto
13File/xxxxxx_xxxxxxxx_xxxxxxx.xxxpredictiveAlto
14File/xxxxxx/xxxxxxxxxxxxxxxxxxpredictiveAlto
15File/xxxxxx/xxxxxxxxxxxxxpredictiveAlto
16File/x/xxxxpredictiveBasso
17File/xxxxx.xxxpredictiveMedia
18File/xxxxxx/xxxxxxxx/xxxxxpredictiveAlto
19File/xxxxxxxxx.xxxpredictiveAlto
20File/xx/xx/xxxxxxxxxpredictiveAlto
21File/xxxxxxxx.xxxpredictiveAlto
22File/xxxxxx.xxxpredictiveMedia
23File/xxxxxxxxxx-xxxxxxx.xxxpredictiveAlto
24File/xxxxxxxxxx-xxxxxxxxxxx.xxxpredictiveAlto
25Filexxxxxxx/xxxxxxxx.xpredictiveAlto
26Filexxxxxxx.xpredictiveMedia
27Filexxxxxx/xxxxxxxxxxxx/predictiveAlto
28Filexxxxxxx/xxx/xxxx/xxx-xxxxxx.xpredictiveAlto
29Filexxxxxxx/xxxx/xxxx_xxxx.xpredictiveAlto
30Filexxxxxxx/xxxxx/xxx/xxxx/xxxx_xxx.xpredictiveAlto
31Filexxxxxxx/xxx/xxx-xxx-xxxx.xpredictiveAlto
32Filexxxxxxx/xxxxxxx/xxxxx/xxxxxx/xxxxxx_xx.xpredictiveAlto
33Filexxxxx-xxxx.xxpredictiveAlto
34Filexx/xxxxx/xxxxxxxx.xpredictiveAlto
35Filexxxxxxx/xxxxx/xxxx_xxxxx.xpredictiveAlto
36Filexxxxxx/xxxxxxx/xxxxx.xpredictiveAlto
37Filexxxxxxxxxx/xxx/xxxxxx_xxxxxxx.xpredictiveAlto
38Filexxxxxxxxxx/xxxxxxxx.xpredictiveAlto
39Filexxx/xxxx/xxx.xpredictiveAlto
40Filexxx/xxxx/xx_xxxx.xpredictiveAlto
41Filexxx/xxxx/xx_xxxxxx.xpredictiveAlto
42Filexxx/xxxxx/xxxxx.xpredictiveAlto
43Filexxxxxxx/xxxxxxxxxx/xxxxxxx.xxpredictiveAlto
44Filexxxxx.xxxpredictiveMedia
45Filexxxxxxx.xxxpredictiveMedia
46Filexxxxxxxxx.xxxpredictiveAlto
47Filexxxxxx.xpredictiveMedia
48Filexxxxxxx.xxxpredictiveMedia
49Filexxxxxx.xxxpredictiveMedia
50Library/xxxxxxxxxxx/xxxxxxxx_xxx.xpredictiveAlto
51Libraryxxx/xxxxxxx_xxxxx_xxxxxx.xpredictiveAlto
52Libraryxxx/xxxxxxxx.xpredictiveAlto
53Libraryxxx/xxxx_xxxxx.xpredictiveAlto
54Libraryxxx/xxxx/xxxxxxxx/xxxxxxx.xpredictiveAlto
55Libraryxxx/xxxx/xxxxxxxx/xxxxx.xpredictiveAlto
56ArgumentxxxxpredictiveBasso
57ArgumentxxxxxxpredictiveBasso
58ArgumentxxxxxxxpredictiveBasso
59ArgumentxxxxxxxxpredictiveMedia
60ArgumentxxxxxxxxpredictiveMedia
61ArgumentxxxxxxxxxpredictiveMedia
62Argumentxxxxx/xx_xx/xxxxxx/xxxxx/xxxxx/xxxxxxxxpredictiveAlto
63Argumentxxx_xxx/xxxxx_xxxpredictiveAlto
64ArgumentxxpredictiveBasso
65Argumentxx_xxxpredictiveBasso
66ArgumentxxxxpredictiveBasso
67ArgumentxxxxxxxxxxpredictiveMedia
68ArgumentxxxxxxxpredictiveBasso
69Argumentxxxx_xxx_xxxxxpredictiveAlto
70ArgumentxxxxpredictiveBasso
71ArgumentxxxxxxxxpredictiveMedia
72ArgumentxxxxxxxxxpredictiveMedia
73ArgumentxxxxxpredictiveBasso
74ArgumentxxxxxxxxpredictiveMedia
75ArgumentxxxxxxxxxxpredictiveMedia
76ArgumentxxxxxxxpredictiveBasso
77ArgumentxxxxxxxxxxxxxxxxxxpredictiveAlto
78ArgumentxxxxxxpredictiveBasso
79ArgumentxxxxxpredictiveBasso
80ArgumentxxxxxpredictiveBasso
81ArgumentxxxpredictiveBasso
82ArgumentxxxxxxxxpredictiveMedia
83Argumentxxx_xxxpredictiveBasso
84ArgumentxxxxxxpredictiveBasso
85Argumentxxx_xxxxxxxpredictiveMedia
◂ PrecedenteVisione D'insiemeIl prossimo ▸

This view requires CTI permissions

Just purchase a CTI license today!