Dkvn Analys

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (63)

Lang

en	56
de	4
it	2
pl	2

Land

us	58
ca	4

Skådespelare

Dkvn	2

Intressera

Typ

Not Defined	14
Programming Language Software	2
Office Suite Software	2
Android App Software	2
E-Commerce Management Software	2

Säljare

Not Defined	14
Maran	2
Microsoft	2
Ecommerce Online	2
DZCP	2

Produkt

Maran PHP Shop	2
Microsoft Office	2
StashCat	2
PHPWind	2
BXCP	2

Sårbarheter

#	Sårbarhet	Base	Temp	0day	I dag	Utn	Rem	EPSS	CTI	CVE
1	Thomas R. Pasawicz HyperBook Guestbook Password Database gbconfiguration.dat Hash informationsgivning	5.3	5.2	$5k-$25k	$0-$5k	High	Workaround	0.02016	0.02	CVE-2007-1192
2	DZCP deV!L`z Clanportal config.php privilegier eskalering	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00943	0.81	CVE-2010-0966
3	magmi ajax_gettime.php cross site scripting	5.2	5.0	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00195	0.00	CVE-2017-7391
4	Audacity DLL Loader avformat-55.dll privilegier eskalering	6.5	6.5	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00110	0.00	CVE-2017-1000010
5	Ashley Brown iWeb Server Encoded URL kataloggenomgång	5.3	5.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.01582	0.03	CVE-2003-0475
6	Cisco IOS Point-to-Point Tunneling Protocol Server Memory informationsgivning	5.3	5.2	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00264	0.02	CVE-2016-6398
7	Magento GraphQL API förfalskning på begäran över webbplatsen	4.3	4.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00070	0.03	CVE-2021-21027
8	Cloudera HUE LdapBackend svag autentisering	7.3	7.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00081	0.00	CVE-2019-7319
9	Microsoft Windows CredSSP svag autentisering	6.2	5.6	$25k-$100k	$0-$5k	Proof-of-Concept	Official Fix	0.70801	0.02	CVE-2018-0886
10	Splunk Enterprise splunk-launch.conf privilegier eskalering	7.4	7.4	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00042	0.00	CVE-2017-18348
11	Spidersales viewCart.asp sql injektion	9.8	9.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00219	0.04	CVE-2004-0348
12	jforum User privilegier eskalering	5.3	5.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00289	0.06	CVE-2019-7550
13	Active Web Softwares Active Business Directory default.asp sql injektion	7.3	6.9	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00064	0.00	CVE-2008-5972
14	LogicBoard CMS away.php Redirect	6.3	6.1	$0-$5k	$0-$5k	Not Defined	Unavailable	0.00000	3.34
15	Maran PHP Shop prod.php sql injektion	7.3	7.3	$0-$5k	$0-$5k	High	Unavailable	0.00137	0.03	CVE-2008-4879
16	X-CMS PHP member_news.php sql injektion	8.5	8.5	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00153	0.00	CVE-2018-18887
17	Ecommerce Online Store Kit shop.php sql injektion	9.8	9.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.03763	0.04	CVE-2004-0300
18	StashCat Backend Database Stored Remote Code Execution	5.7	5.7	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00060	0.00	CVE-2017-11136
19	PHPWind goto.php Redirect	6.3	6.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00348	0.04	CVE-2015-4134
20	BXCP index.php sql injektion	7.3	7.0	$0-$5k	$0-$5k	High	Official Fix	0.00307	0.00	CVE-2006-0821

IOC - Indicator of Compromise (5)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	IP-adress	Hostname	Skådespelare	Identified	Typ	Förtroende
1	45.40.183.1	ip-45-40-183-1.ip.secureserver.net	Dkvn	12/04/2022	verified	Hög
2	XX.XXX.XXX.X	xxxxx.xxxxxxx.xxx	Xxxx	12/04/2022	verified	Hög
3	XXX.XX.XXX.XXX	xx.xxxxxxx.xxx.xx	Xxxx	12/04/2022	verified	Hög
4	XXX.XXX.XXX.XXX	xx-xxx-xxx-xxx-xxx.xx.xxxxxxxxxxxx.xxx	Xxxx	12/04/2022	verified	Hög
5	XXX.XXX.XXX.XXX	xxxxxx.xxx	Xxxx	12/04/2022	verified	Hög

TTP - Tactics, Techniques, Procedures (8)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	Sårbarheter	Åtkomstvektor	Typ	Förtroende
1	T1006	CWE-22	Path Traversal	predictive	Hög
2	T1059	CWE-94	Argument Injection	predictive	Hög
3	TXXXX.XXX	CWE-XX, CWE-XX	Xxxxx Xxxx Xxxxxxxxx	predictive	Hög
4	TXXXX	CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	Hög
5	TXXXX.XXX	CWE-XXX	Xxxx Xxxxxxxx	predictive	Hög
6	TXXXX	CWE-XX	Xxx Xxxxxxxxx	predictive	Hög
7	TXXXX	CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	Hög
8	TXXXX.XXX	CWE-XXX	Xxx Xxxxxxxxxx Xxxxx	predictive	Hög

IOA - Indicator of Attack (31)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	Klass	Indicator	Typ	Förtroende
1	File	$SPLUNK_HOME/etc/splunk-launch.conf	predictive	Hög
2	File	/etc/master.passwd	predictive	Hög
3	File	/etc/passwd	predictive	Medium
4	File	/forum/away.php	predictive	Hög
5	File	xxxxxx_xx.x	predictive	Medium
6	File	xxxx/xxxxxxxxxxxxxxx.xxx	predictive	Hög
7	File	xxxxxxx.xxx	predictive	Medium
8	File	xxxxxxxx.xxx	predictive	Medium
9	File	xxxx.xxx	predictive	Medium
10	File	xxx/xxxxxx.xxx	predictive	Hög
11	File	xxxxx.xxx	predictive	Medium
12	File	xxxxx-xxx-xxxxxx/xxxxx/xxx/xxxx_xxxxxxx.xxx	predictive	Hög
13	File	xxxxxx/xxxxxx_xxxx.xxx	predictive	Hög
14	File	xxxx.xxx	predictive	Medium
15	File	xxxxxxxx.xxx	predictive	Medium
16	File	xxxxxxxx/xxxxx/xxxxxxxx?xxxxxxxx	predictive	Hög
17	File	xxxx.xxx	predictive	Medium
18	File	xxxxxxxx.xxx	predictive	Medium
19	File	xxxxxxxx.xxx	predictive	Medium
20	Library	xxxxxxxx-xx.xxx	predictive	Hög
21	Argument	xxxxxx	predictive	Låg
22	Argument	xxxxxxxx	predictive	Medium
23	Argument	xxx	predictive	Låg
24	Argument	xxxxx	predictive	Låg
25	Argument	xx	predictive	Låg
26	Argument	xxxxxx	predictive	Låg
27	Argument	xxx	predictive	Låg
28	Argument	xxxx	predictive	Låg
29	Argument	xxx	predictive	Låg
30	Argument	xxxxxx	predictive	Låg
31	Input Value	%xx%xx%xx	predictive	Medium

Referenser (2)

The following list contains external sources which discuss the actor and the associated activities:

◂ TidigareÖversiktNästa ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!