Innfirat Analys

IOB - Indicator of Behavior (27)

Tidslinje

Lang

en20
fr8

Land

us26
ru2

Skådespelare

Aktiviteter

Intressera

Tidslinje

Typ

Säljare

Produkt

HP OpenVMS2
MGB OpenSource Guestbook2
MediaTek MT52212
MediaTek MT76032
MediaTek MT76132

Sårbarheter

#SårbarhetBaseTemp0dayI dagUtnRemEPSSCTICVE
1Thomas R. Pasawicz HyperBook Guestbook Password Database gbconfiguration.dat Hash informationsgivning5.35.2$5k-$25k$0-$5kHighWorkaround0.020160.02CVE-2007-1192
2Serendipity exit.php privilegier eskalering6.36.0$0-$5k$0-$5kProof-of-ConceptNot Defined0.000000.53
3phpPgAds adclick.php okänd sårbarhet5.35.3$0-$5k$0-$5kNot DefinedNot Defined0.003171.58CVE-2005-3791
4vBulletin redirector.php Redirect6.66.6$0-$5k$0-$5kNot DefinedNot Defined0.001220.07CVE-2018-6200
5vu Mass Mailer Login Page redir.asp sql injektion7.36.9$0-$5k$0-$5kProof-of-ConceptNot Defined0.001810.05CVE-2007-6138
6MGB OpenSource Guestbook email.php sql injektion7.37.3$0-$5k$0-$5kHighUnavailable0.013021.68CVE-2007-0354
7Moodle Start Page Preference privilegier eskalering7.27.1$5k-$25k$0-$5kNot DefinedOfficial Fix0.002290.04CVE-2023-23923
8MediaTek MT8788 Wi-Fi Driver Local Privilege Escalation5.45.3$0-$5k$0-$5kNot DefinedOfficial Fix0.000420.00CVE-2022-32656
9HP OpenVMS TCP/IP Services Format String5.95.4$25k-$100k$0-$5kProof-of-ConceptUnavailable0.000670.00CVE-2008-3940
10DZCP deV!L`z Clanportal browser.php informationsgivning5.35.0$0-$5k$0-$5kProof-of-ConceptNot Defined0.027331.39CVE-2007-1167
11LogicBoard CMS away.php Redirect6.36.1$0-$5k$0-$5kNot DefinedUnavailable0.000003.17
12FLDS redir.php sql injektion7.37.3$0-$5k$0-$5kHighUnavailable0.002030.43CVE-2008-5928
13PHPWind goto.php cross site scripting4.34.3$0-$5k$0-$5kNot DefinedNot Defined0.002540.05CVE-2015-4135
14DZCP deV!L`z Clanportal config.php privilegier eskalering7.36.6$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.009431.34CVE-2010-0966
15Esoftpro Online Guestbook Pro ogp_show.php sql injektion7.36.9$0-$5k$0-$5kProof-of-ConceptNot Defined0.001080.53CVE-2009-4935

IOC - Indicator of Compromise (1)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

IDIP-adressHostnameSkådespelareKampanjerIdentifiedTypFörtroende
162.210.142.21962-210-142-219.rev.poneytelecom.euInnfirat13/09/2019verifiedHög

TTP - Tactics, Techniques, Procedures (7)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IOA - Indicator of Attack (18)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDKlassIndicatorTypFörtroende
1File/forum/away.phppredictiveHög
2Fileadclick.phppredictiveMedium
3Filedata/gbconfiguration.datpredictiveHög
4Filexxxxx.xxxpredictiveMedium
5Filexxxx.xxxpredictiveMedium
6Filexxxx.xxxpredictiveMedium
7Filexxx/xxxxxx.xxxpredictiveHög
8Filexxx/xxxxxxxxxxx/xxxxxxx.xxxpredictiveHög
9Filexxx_xxxx.xxxpredictiveMedium
10Filexxxxx.xxxpredictiveMedium
11Filexxxxx.xxxpredictiveMedium
12Filexxxxxxxxxx.xxxpredictiveHög
13ArgumentxxxxxxxxpredictiveMedium
14ArgumentxxxxxxxpredictiveLåg
15ArgumentxxxxpredictiveLåg
16ArgumentxxpredictiveLåg
17ArgumentxxxxxxxxpredictiveMedium
18ArgumentxxxpredictiveLåg

Referenser (2)

The following list contains external sources which discuss the actor and the associated activities:

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!