Cape Verde Unknown 分析

IOB - Indicator of Behavior (32)

时间轴

语言

en22
pt10

国家/地区

pt24
cv6
br2

演员

活动

利益

时间轴

类型

供应商

产品

Wiki.js4
Mobatek MobaXterm2
WordPress2
Oracle Blockchain Platform2
GitLab Community Edition2

漏洞

#漏洞BaseTemp0day今天修正EPSSCTICVE
1Redhat Nagios XI Core nagios.upgrade_to_v3.sh 权限升级6.86.8$0-$5k$0-$5kNot DefinedNot Defined0.000420.00CVE-2013-2029
2Fortinet FortiOS Restore Command 权限升级3.83.7$0-$5k$0-$5kHighOfficial Fix0.001460.05CVE-2021-44168
3OpenSSH ssh-add Privilege Escalation7.67.5$5k-$25k$0-$5kNot DefinedOfficial Fix0.001060.04CVE-2023-28531
4Wiki.js Storage Module 目录遍历6.46.3$0-$5k$0-$5kNot DefinedOfficial Fix0.001260.04CVE-2021-43800
5Wiki.js SVG File 跨网站脚本4.44.4$0-$5k$0-$5kNot DefinedOfficial Fix0.000530.00CVE-2021-25993
6lighttpd mod_extforward Plugin mod_extforward_Forwarded 内存损坏6.36.3$0-$5k$0-$5kNot DefinedNot Defined0.022510.02CVE-2022-22707
7Simple College Website file_put_contents 权限升级8.58.5$0-$5k$0-$5kNot DefinedNot Defined0.002950.00CVE-2022-40087
8CMSUno central.php file_put_contents 权限升级5.55.5$0-$5k$0-$5kNot DefinedNot Defined0.005810.03CVE-2021-40889
9Xiaomi Redmi Note 9T/Redmi Note 11 write 内存损坏5.75.7$0-$5k$0-$5kNot DefinedNot Defined0.000890.04CVE-2020-14125
10WSO2 API Manager/IS as Key Manager/Identity Server File Based Service Provider Creation XML External Entity5.55.3$0-$5k$0-$5kNot DefinedOfficial Fix0.021230.07CVE-2021-42646
11Zoho ManageEngine ManageEngine OpManager getmailserversettings SQL注入6.46.4$0-$5k$0-$5kNot DefinedNot Defined0.003230.00CVE-2017-11559
12Yoast SEO Plugin REST Endpoint posts 信息公开3.53.4$0-$5k$0-$5kNot DefinedOfficial Fix0.001230.04CVE-2021-25118
13WordPress wp_die 信息公开4.54.4$5k-$25k$0-$5kNot DefinedOfficial Fix0.000930.04CVE-2021-39200
14WordPress SQL注入6.86.7$5k-$25k$0-$5kNot DefinedOfficial Fix0.004670.08CVE-2022-21664
15pac-resolver PAC File Remote Code Execution5.65.4$0-$5k$0-$5kNot DefinedOfficial Fix0.003930.05CVE-2021-23406
16Oracle Blockchain Platform BCS Console 权限升级7.37.1$5k-$25k$0-$5kNot DefinedOfficial Fix0.003310.00CVE-2019-10086
17GitLab Community Edition/Enterprise Edition OmniAuth 弱身份验证8.28.0$0-$5k$0-$5kNot DefinedOfficial Fix0.244550.02CVE-2022-1162
18Fortinet FortiOS TFTP Client 内存损坏7.06.8$0-$5k$0-$5kNot DefinedOfficial Fix0.000420.03CVE-2021-42757
19Apache Directory Studio SASL Authentication 弱加密3.13.1$0-$5k$5k-$25kNot DefinedNot Defined0.000550.00CVE-2021-33900
20JIRA picker Username 权限升级5.35.2$0-$5k$0-$5kNot DefinedOfficial Fix0.003790.05CVE-2019-3403

IOC - Indicator of Compromise (19)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

TTP - Tactics, Techniques, Procedures (11)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IOA - Indicator of Attack (12)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID分类Indicator类型可信度
1File.htaccesspredictive
2File/api/json/admin/getmailserversettingspredictive
3File/xxxx/xxx/x/xxxx/xxxxxxpredictive
4Filexxxxxx.xxxxxxx_xx_xx.xxpredictive
5Filexxxx/xxxxxpredictive
6Filexx/xx/xxxxxpredictive
7File{xxxxxxx}/xxx/xxxxxxx.xxxpredictive
8Argumentxxxxxxpredictive
9Argumentxxxxpredictive
10Argumentxxxxxxpredictive
11Pattern|xx xx xx xx|predictive
12Network Portxxx/xx (xxxxxx)predictive

参考 (2)

The following list contains external sources which discuss the actor and the associated activities:

Want to stay up to date on a daily basis?

Enable the mail alert feature now!