Vollgar 解析

IOB - Indicator of Behavior (56)

タイムライン

言語

en50
zh6

国・地域

us40
cn14
gb2

アクター

アクティビティ

関心

タイムライン

タイプ

ベンダー

製品

Trend Micro Apex One6
Alt-N MDaemon4
Mazda Vehicle2
Nissan/Kia/Hyundai Vehicle2
WP-Polls Plugin2

脆弱性

#脆弱性BaseTemp0day本日修復EPSSCTICVE
1All in One SEO Best WordPress SEO Plugin Import/Export 特権昇格5.55.3$0-$5k$0-$5kNot DefinedOfficial Fix0.000920.04CVE-2021-24307
2Odoo Database Anonymization Privilege Escalation5.65.3$0-$5k$0-$5kProof-of-ConceptNot Defined0.002140.05CVE-2017-10803
3Libbitcoin Explorer Milk Sad 弱い暗号化5.35.3$0-$5k$0-$5kHighNot Defined0.001160.04CVE-2023-39910
4tagDiv Composer Plugin Facebook Login 弱い認証7.77.6$0-$5k$0-$5kNot DefinedOfficial Fix0.003730.01CVE-2022-3477
5Trend Micro Apex One 情報の漏洩7.67.5$5k-$25k$0-$5kNot DefinedOfficial Fix0.000450.00CVE-2022-44649
6Sophos Mobile Managed On-Premises XML 特権昇格8.58.5$0-$5k$0-$5kNot DefinedNot Defined0.412830.00CVE-2022-3980
7iPXE TLS tls.c tls_new_ciphertext 情報の漏洩3.23.1$0-$5k$0-$5kNot DefinedOfficial Fix0.000480.09CVE-2022-4087
8Dolibarr SQLインジェクション7.87.8$0-$5k$0-$5kNot DefinedOfficial Fix0.001370.03CVE-2022-4093
9nginx 特権昇格6.96.9$0-$5k$0-$5kNot DefinedNot Defined0.002413.50CVE-2020-12440
10Insyde Kernel UEFI Variable メモリ破損7.87.8$0-$5k$0-$5kNot DefinedNot Defined0.000650.00CVE-2022-35897
11Trend Micro Apex One Change Prevention Service メモリ破損7.67.5$5k-$25k$0-$5kNot DefinedOfficial Fix0.000450.00CVE-2022-44650
12Atlassian Bitbucket Server and Data Center Environment Variable 特権昇格7.47.4$0-$5k$0-$5kNot DefinedNot Defined0.610940.02CVE-2022-43781
13Trend Micro Apex One Security Agent 競合状態7.57.2$5k-$25k$0-$5kNot DefinedOfficial Fix0.000450.00CVE-2022-44651
14LG SmartShare 特権昇格7.07.0$5k-$25k$5k-$25kNot DefinedNot Defined0.000540.04CVE-2022-45422
15WP-Polls Plugin HTTP Header 特権昇格6.36.0$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.000600.04CVE-2022-1581
16Apple watchOS ImageIO 情報の漏洩5.45.3$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.007540.03CVE-2016-3619
17D-Link G integrated Access Device4 Web Interface login.asp 特権昇格5.75.7$5k-$25k$5k-$25kNot DefinedNot Defined0.001240.02CVE-2022-36785
18Trend Micro Apex One 特権昇格8.38.1$5k-$25k$0-$5kNot DefinedOfficial Fix0.000450.00CVE-2022-44652
19Trend Micro Apex One Security Agent ディレクトリトラバーサル8.38.1$5k-$25k$0-$5kNot DefinedOfficial Fix0.000480.00CVE-2022-44653
20Apple tvOS ImageIO 情報の漏洩5.45.3$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.007540.00CVE-2016-3619

IOC - Indicator of Compromise (21)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

TTP - Tactics, Techniques, Procedures (12)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IOA - Indicator of Attack (25)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDクラスIndicatorタイプ信頼度
1File/rest/api/2/user/pickerpredictive
2File/wp-content/plugins/emag-marketplace-connector/templates/order/awb-meta-box.phppredictive
3Fileafr.phppredictive
4Filedata/gbconfiguration.datpredictive
5Filexxxx.xxxpredictive
6Filexxx/xxxxxx.xxxpredictive
7Filexxxxx.xxx/xxxx/xxxxx/xxxx/xxxx.xxxpredictive
8Filexxx/xxx.xpredictive
9Filexxxxx.xxxpredictive
10Filexxx.xxxpredictive
11Filexxx/xxx/xxx.xpredictive
12Filexxxxxx.xxxpredictive
13Libraryxxx/xx.xxxpredictive
14Libraryxxxxxxx/xxxxxxx/xxxxxx/xxx/xxxxx.xxxxxxx.xxxpredictive
15Argumentxxxxxxxxpredictive
16Argumentxxxxxpredictive
17Argumentxxxxxpredictive
18Argumentxxpredictive
19Argumentxxx_xxxpredictive
20Argumentxxxxpredictive
21Argumentxxxxxx_xxxxpredictive
22Argumentxxxxpredictive
23Argumentxxxpredictive
24Argumentxxxpredictive
25Argumentxxxxxxxxpredictive

参考 (4)

The following list contains external sources which discuss the actor and the associated activities:

Want to stay up to date on a daily basis?

Enable the mail alert feature now!