部门 Chemical

Timeframe: -28 days

Default Categories (89): Access Management Software, Accounting Software, Anti-Malware Software, Anti-Spam Software, Application Server Software, Atlassian Confluence Plugin, Atlassian Jira App Software, Automation Software, Backup Software, Big Data Software, Billing Software, Bug Tracking Software, Business Process Management Software, Calendar Software, Chat Software, Chip Software, Cloud Software, Communications System, Connectivity Software, Continuous Integration Software, Customer Relationship Management System, Data Loss Prevention Software, Database Administration Software, Database Software, Directory Service Software, Document Management Software, Document Processing Software, Document Reader Software, Domain Name Software, Endpoint Management Software, Enterprise Resource Planning Software, File Compression Software, File Transfer Software, Firewall Software, Firmware Software, Groupware Software, Hardware Driver Software, Health Information Software, Human Capital Management Software, Image Processing Software, Information Management Software, IP Phone Software, Knowledge Base Software, Log Management Software, Mail Client Software, Mail Server Software, Medical Device Software, Middleware, Multimedia Player Software, Network Attached Storage Software, Network Authentication Software, Network Encryption Software, Network Management Software, Network Routing Software, Network Utility Software, Office Suite Software, Operating System, Policy Management Software, Presentation Software, Printing Software, Product Lifecycle Management Software, Programming Language Software, Project Management Software, Remote Access Software, Reporting Software, Risk Management System, Router Operating System, SCADA Software, Security Testing Software, Server Management Software, Service Management Software, Software Library, Software Management Software, Solution Stack Software, Spreadsheet Software, SSH Server Software, Supplier Relationship Management Software, Supply Chain Management Software, Testing Software, Ticket Tracking Software, Unified Communication Software, Video Surveillance Software, Virtualization Software, Warehouse Management System Software, Web Browser, Web Server, Windowing System Software, Wireless LAN Software, Word Processing Software

时间轴

供应商

Linux	384
Microsoft	134
Oracle	70
Juniper	36
Not Defined	34

产品

Linux Kernel	384
Microsoft Windows	96
Juniper Junos OS	32
Oracle MySQL Server	30
Microsoft SQL Server	26

修正

Official Fix	802
Temporary Fix	0
Workaround	4
Unavailable	0
Not Defined	140

易受攻击性

High	10
Functional	0
Proof-of-Concept	14
Unproven	122
Not Defined	800

访问向量

Not Defined	0
Physical	10
Local	122
Adjacent	438
Network	376

身份验证

Not Defined	0
High	102
Low	584
None	260

用户交互

Not Defined	0
Required	158
None	788

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	26
≤4	64
≤5	210
≤6	304
≤7	126
≤8	152
≤9	60
≤10	4

CVSSv3 Temp

≤1	0
≤2	0
≤3	26
≤4	66
≤5	218
≤6	360
≤7	132
≤8	120
≤9	20
≤10	4

VulDB

≤1	0
≤2	0
≤3	32
≤4	80
≤5	210
≤6	288
≤7	128
≤8	152
≤9	50
≤10	6

NVD

≤1	946
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

CNA

≤1	666
≤2	0
≤3	6
≤4	6
≤5	58
≤6	66
≤7	30
≤8	82
≤9	24
≤10	8

供应商

≤1	816
≤2	0
≤3	0
≤4	0
≤5	2
≤6	10
≤7	32
≤8	48
≤9	38
≤10	0

零日攻击

<1k	26
<2k	170
<5k	54
<10k	438
<25k	134
<50k	104
<100k	20
≥100k	0

本日攻击

<1k	340
<2k	224
<5k	192
<10k	94
<25k	86
<50k	10
<100k	0
≥100k	0

攻击市场容量

IOB - Indicator of Behavior (1000)

时间轴

语言

en	646
de	86
ja	66
ru	52
fr	50

国家/地区

us	182
de	94
gb	82
ru	74
fr	64

演员

Cobalt Strike	4
BumbleBee	3
Sandworm	3
Mirai	2
Socks5 Systemz	1

活动

利益

时间轴

类型

Operating System	114
Web Browser	20
Cloud Software	16
Programming Language Software	12
Firewall Software	12

供应商

Linux	98
Oracle	28
Microsoft	24
Not Defined	22
Google	16

产品

Linux Kernel	98
Microsoft Windows	16
Google Chrome	14
Oracle VM VirtualBox	10
Oracle MySQL Server	6

漏洞

#	漏洞	Base	Temp	0day	今天	易	修正	EPSS	CTI	CVE
1	Contemporary Controls BASrouter BACnet BASRT-B Device-Communication-Control Service 拒绝服务	6.5	5.9	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00045	1.06	CVE-2024-4292
2	Google Chrome Picture In Picture 内存损坏	6.3	6.0	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.00043	0.53	CVE-2024-4331
3	Apache ActiveMQ Jolokia/REST API 弱身份验证	7.3	7.0	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00000	0.98	CVE-2024-32114
4	Netgear DG834Gv5 Web Management Interface 弱加密	2.7	2.5	$5k-$25k	$0-$5k	Proof-of-Concept	Not Defined	0.00045	0.57	CVE-2024-4235
5	Google Chrome Dawn 内存损坏	6.3	6.0	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.00043	0.61	CVE-2024-4368
6	Nagios XI Dashlet Privilege Escalation	6.3	5.7	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00043	0.16	CVE-2024-33775
7	Microsoft Windows SmartScreen Prompt 权限升级	8.8	8.2	$25k-$100k	$5k-$25k	High	Official Fix	0.00875	0.45	CVE-2024-29988
8	QNAP QTS/QuTS hero/QuTScloud 权限升级	9.9	9.7	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00043	0.20	CVE-2024-32766
9	Apollo Router 权限升级	8.5	8.3	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00045	0.04	CVE-2024-32971
10	cym1102 nginxWebUI upload 权限升级	4.3	3.9	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00045	0.24	CVE-2024-3736
11	Vesystem Cloud Desktop fileupload.php 权限升级	6.3	5.7	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00045	0.25	CVE-2024-3803
12	Google Chrome ANGLE 权限升级	6.3	6.0	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.00043	0.24	CVE-2024-4058
13	PuTTY ECDSA Nonce Generation 信息公开	3.7	3.6	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00046	0.24	CVE-2024-31497
14	cym1102 nginxWebUI upload 权限升级	6.3	5.7	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00046	0.04	CVE-2024-3739
15	Adobe Acrobat Reader File 信息公开	7.0	6.9	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00000	0.57-	CVE-2024-30306
16	Vesystem Cloud Desktop fileupload2.php 权限升级	6.3	5.7	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00045	0.24	CVE-2024-3804
17	The R Project RDS 权限升级	7.5	7.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00045	0.16	CVE-2024-27322
18	cym1102 nginxWebUI addOver findCountByQuery 目录遍历	6.3	5.7	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00045	0.04	CVE-2024-3737
19	Xiamen Four-Faith RMP Router Management Platform SQL注入	6.3	5.7	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00045	0.12	CVE-2024-3688
20	Adobe Acrobat Reader 内存损坏	7.0	6.9	$5k-$25k	$5k-$25k	Not Defined	Official Fix	0.00000	0.49-	CVE-2024-30305

IOC - Indicator of Compromise (27)

These indicators of compromise highlight associated network ranges which are known to be part of research and attack activities.

ID	IP range	参与者	类型	可信度
1	2.58.95.0/24	Bashlite	predictive	高
2	14.161.30.0/24	Mirai	predictive	高
3	18.159.45.0/24	FakeMBAM	predictive	高
4	XX.XXX.XX.X/XX	Xxx Xxxxx	predictive	高
5	XX.XXX.XXX.X/XX	Xxxxxxxx	predictive	高
6	XX.XXX.XX.X/XX	Xxxxxx Xxxxxxx	predictive	高
7	XX.XXX.XXX.X/XX	Xxxxxxx	predictive	高
8	XX.XX.XXX.X/XX	Xxxxxxxx	predictive	高
9	XX.XX.XXX.X/XX	Xxxxxxxx	predictive	高
10	XX.XX.XXX.X/XX	Xxxxxxx Xxxxxx	predictive	高
11	XXX.XXX.XXX.X/XX	Xxxxxx	predictive	高
12	XXX.XXX.XXX.X/XX	Xxxxxxxx	predictive	高
13	XXX.XXX.XXX.X/XX	Xxxxxx Xxxxxx	predictive	高
14	XXX.XXX.X.X/XX	Xxxxxxx	predictive	高
15	XXX.XXX.X.X/XX	Xxxxxx Xxxxxx	predictive	高
16	XXX.XXX.XX.X/XX	Xxxxx	predictive	高
17	XXX.XXX.XX.X/XX	Xxxxxx	predictive	高
18	XXX.XX.XXX.X/XX	Xxxxxxxx Xxx	predictive	高
19	XXX.XX.XX.X/XX	Xxxxx	predictive	高
20	XXX.XX.XX.X/XX	Xxxxxxx Xxxxxx	predictive	高
21	XXX.XXX.XXX.X/XX	Xxxxx	predictive	高
22	XXX.XXX.XXX.X/XX	Xxxxxx	predictive	高
23	XXX.XXX.XXX.X/XX	Xxxxxxxx	predictive	高
24	XXX.XX.XX.X/XX	Xxxxxx_xxx	predictive	高
25	XXX.XX.XXX.X/XX	Xxxxxx Xxxxxx	predictive	高
26	XXX.X.XX.X/XX	Xxxxxxxxxx	predictive	高
27	XXX.XXX.XX.X/XX	Xxxxxx	predictive	高

TTP - Tactics, Techniques, Procedures (22)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	分类	漏洞	访问向量	类型	可信度
1	T1006	CAPEC-126	CWE-22, CWE-35	Path Traversal	predictive	高
2	T1055	CAPEC-10	CWE-74	Improper Neutralization of Data within XPath Expressions	predictive	高
3	T1059	CAPEC-137	CWE-88, CWE-94, CWE-1321	Argument Injection	predictive	高
4	T1059.007	CAPEC-209	CWE-79, CWE-80	Cross Site Scripting	predictive	高
5	T1068	CAPEC-122	CWE-269, CWE-284	Execution with Unnecessary Privileges	predictive	高
6	TXXXX.XXX	CAPEC-	CWE-XXX	Xxx Xx Xxxx-xxxxx Xxxxxxxx	predictive	高
7	TXXXX.XXX	CAPEC-16	CWE-XXX, CWE-XXX	Xxxx-xxxxx Xxxxxxxxxxx	predictive	高
8	TXXXX	CAPEC-136	CWE-XX, CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	高
9	TXXXX.XXX	CAPEC-178	CWE-XXX	Xxxx Xxxxxxxx	predictive	高
10	TXXXX	CAPEC-1	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxx Xxxxxx	predictive	高
11	TXXXX	CAPEC-108	CWE-XX	Xxx Xxxxxxxxx	predictive	高
12	TXXXX.XXX	CAPEC-1	CWE-XXX	Xxxxxxxx Xxxxxxxxxxxxx	predictive	高
13	TXXXX	CAPEC-102	CWE-XXX, CWE-XXX	Xxxxxxxxxxx Xxxxxxxxxx	predictive	高
14	TXXXX	CAPEC-37	CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxxxxx Xx Xxxxxxxxx Xxxxxxxxxxx	predictive	高
15	TXXXX	CAPEC-38	CWE-XXX	Xxxxxxxxx Xxxxxx Xxxx	predictive	高
16	TXXXX.XXX	CAPEC-	CWE-XXX	Xxxxxxxx Xxxxxx Xxxx	predictive	高
17	TXXXX.XXX	CAPEC-459	CWE-XXX	Xxxxxxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	高
18	TXXXX	CAPEC-464	CWE-XXX	Xxxxxxxx Xx Xxxxxxx Xxxxxxxx Xxxxxxxxxxx Xx Xx Xxxxxxxxxxxx Xxxxx	predictive	高
19	TXXXX	CAPEC-116	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	高
20	TXXXX	CAPEC-112	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxxxxx Xxxxxx	predictive	高
21	TXXXX.XXX	CAPEC-	CWE-XXX	Xxx Xxxxxxxxxx Xxxxx	predictive	高
22	TXXXX.XXX	CAPEC-1	CWE-XXX	Xxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx Xxxxxxxxx	predictive	高

IOA - Indicator of Attack (99)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	分类	Indicator	类型	可信度
1	File	/adminPage/conf/reload	predictive	高
2	File	/adminPage/conf/saveCmd	predictive	高
3	File	/adminPage/main/upload	predictive	高
4	File	/adminPage/www/addOver	predictive	高
5	File	/CMD0/xml_modes.xml	predictive	高
6	File	/Device/Device/GetDeviceInfoList?deviceCode=&searchField=&deviceState=	predictive	高
7	File	/drivers/tty/serial/serial_core.c	predictive	高
8	File	/proc/scsi/${proc_name}	predictive	高
9	File	/Public/webuploader/0.1.5/server/fileupload.php	predictive	高
10	File	/Public/webuploader/0.1.5/server/fileupload2.php	predictive	高
11	File	/sys/bus/i2c/devices/i2c-2/new_device	predictive	高
12	File	/sys/kernel/notes	predictive	高
13	File	/webeditor/	predictive	中
14	File	xxxxx-xxxxxx-xxxx.xxx	predictive	高
15	File	xxxxxxxxxxxxxxxxx.xxxxxxxxxxxx.xxx	predictive	高
16	File	x:\xxxxxxxx	predictive	中
17	File	xxxx_xxxxxxx.xx	predictive	高
18	File	xxxxxx/xxxxxx_xxxxxx.x	predictive	高
19	File	xx_xxx.x	predictive	中
20	File	xxxxxxx/xxxxxx/xxxxxxx/xxxxxx_xxxx.x	predictive	高
21	File	xxxxxxx/xxx/xxxx/xxx.x	predictive	高
22	File	xxxxxxx/xxxx/xxxx_xxxx.x	predictive	高
23	File	xxxxxxx/xxxxx/xxx-xxxxxxxxx/xxxxxxx.x	predictive	高
24	File	xxxxxxx/xxx/xxxxxxxx/xxx/xx.x	predictive	高
25	File	xxxxxxx/xxx/xxxxxxxx/xxxxxxxxx/xxxxxxxx/xxx.x	predictive	高
26	File	xxxxxxx/xxxx/xxx/xxxxxx.x	predictive	高
27	File	xxxxxxx/xxx/xxxxxx/xxxx/xxxx_xxxx.x	predictive	高
28	File	xxxxxxx/xxx/xxxx/xxxxx.x	predictive	高
29	File	xxxxxxx/xxx/xxxx/xxx.x	predictive	高
30	File	xxxxxxxxx.xxx	predictive	高
31	File	xx/xxxxxx.x	predictive	中
32	File	xx/xxxx/xxxxxxx.x	predictive	高
33	File	xx/xxxxx/xxxx.x	predictive	高
34	File	xx/xxxxxx/xxx.x	predictive	高
35	File	xxxxxxx.xx	predictive	中
36	File	xxxxx	predictive	低
37	File	xxxxx_xxxxxx	predictive	中
38	File	xx/xxx/xxx_xx_xxx.x	predictive	高
39	File	xxxxxxx/xxxxx/xxxxxxxxxxxx.x	predictive	高
40	File	xxxxxxx/xxxxx/xxxx.x	predictive	高
41	File	xxxxxxx/xxxxx/xxxxxx.x	predictive	高
42	File	xxxx/xxxx.x	predictive	中
43	File	xxxxxx/xxx/xxxxxx.x	predictive	高
44	File	xxxxxx/xxxx_xxxxx.x	predictive	高
45	File	xxxxxxxxxxxxx.xxx	predictive	高
46	File	xx/xxxx.x	predictive	中
47	File	xx/xxxxxxxx.x	predictive	高
48	File	xxxxxxx/xxxxx/xxxxxx/xxxxxx.xxx	predictive	高
49	File	xxx/xxxxxx/xx_xxxxxxxxx_xxxxx.x	predictive	高
50	File	xxx/xxxx/xxx.x	predictive	高
51	File	xxx/xxxx/xxxx.x	predictive	高
52	File	xxx/xxxxxxxxx/xx_xxxxxx_xxx.x	predictive	高
53	File	xxxx.x	predictive	低
54	File	xxxx.xxx	predictive	中
55	File	xxx/xxxxxx.x	predictive	中
56	File	xxx.x	predictive	低
57	File	xxxxx_xxxx.x	predictive	中
58	File	xxxx-xxxxxxx.xxx	predictive	高
59	File	xxxx_xxxxxx.xx	predictive	高
60	File	xxxxxx-xxxxx.xxx	predictive	高
61	File	xxxxxx_xxxxxxxx.xxx	predictive	高
62	File	xxxx.xxx	predictive	中
63	Library	xxxxx-xx.xx	predictive	中
64	Library	xxxx.xxx	predictive	中
65	Library	xxxxxxx/xxx/xxxx_xxx.x	predictive	高
66	Library	xxx/xxxxxxxxxxxx.x	predictive	高
67	Library	xxx/xxxx_xxxxx.x	predictive	高
68	Library	xxx/xxxx_xxxxx.x	predictive	高
69	Library	xxx/xxxxxx.x	predictive	中
70	Library	xxx/xxxxxxxx.x	predictive	高
71	Library	xxx/xxx_xxxxxxx.x	predictive	高
72	Library	xxx/xxxxxxxxxxx.x	predictive	高
73	Library	xxx/xxxxxxxx.x	predictive	高
74	Library	xxxxxxxx.xxx	predictive	中
75	Library	xxxx-xxxxxx.xxx	predictive	高
76	Argument	xxxxxx	predictive	低
77	Argument	xxxx	predictive	低
78	Argument	xxxxxxxxxxxxxxxx	predictive	高
79	Argument	xxx	predictive	低
80	Argument	xxx	predictive	低
81	Argument	xxxxxxx	predictive	低
82	Argument	xxxxxxx_xxxx	predictive	中
83	Argument	xxxx	predictive	低
84	Argument	xxx_xxxx/xx_xxx_xxxx	predictive	高
85	Argument	xxxxxxx	predictive	低
86	Argument	xx/xxx/xxxxx	predictive	中
87	Argument	xxxxx	predictive	低
88	Argument	xxx_xxxxxxx	predictive	中
89	Argument	xxxxxxxx	predictive	中
90	Argument	xxxxxxxxx	predictive	中
91	Argument	xxxxxxx_xxxxx_xxxxxx	predictive	高
92	Argument	xxxxxxx	predictive	低
93	Argument	xxxxx	predictive	低
94	Argument	xxxx	predictive	低
95	Argument	xxxx_xx	predictive	低
96	Argument	xxxxxxxx	predictive	中
97	Argument	xx_xxxxx	predictive	中
98	Argument	xxx_xx_xxx_xxxx	predictive	高
99	Input Value	xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx	predictive	高

◂ 上一步一览下一步 ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!