部门 Education

Timeframe: -28 days

Default Categories (58): Access Management Software, Accounting Software, Anti-Malware Software, Anti-Spam Software, Application Server Software, Backup Software, Blog Software, Calendar Software, Chat Software, Cloud Software, Communications System, Database Administration Software, Database Software, Digital Media Player, Directory Service Software, Document Management Software, Document Processing Software, Document Reader Software, Endpoint Management Software, Firewall Software, Groupware Software, Hardware Driver Software, Image Processing Software, Information Management Software, IP Phone Software, Knowledge Base Software, Learning Management Software, Library Management System Software, Log Management Software, Mail Client Software, Mail Server Software, Messaging Software, Middleware, Multimedia Player Software, Multimedia Processing Software, Network Attached Storage Software, Network Encryption Software, Network Management Software, Network Routing Software, Office Suite Software, Operating System, Presentation Software, Printing Software, Programming Language Software, Project Management Software, Remote Access Software, Reporting Software, Router Operating System, Server Management Software, Spreadsheet Software, SSH Server Software, Survey Software, Unified Communication Software, Virtualization Software, Web Browser, Web Server, Wireless LAN Software, Word Processing Software

时间轴

供应商

Linux	396
Microsoft	132
Oracle	74
Not Defined	56
Juniper	40

产品

Linux Kernel	396
Microsoft Windows	90
Juniper Junos OS	34
Oracle MySQL Server	34
Google Chrome	28

修正

Official Fix	778
Temporary Fix	0
Workaround	2
Unavailable	0
Not Defined	130

易受攻击性

High	8
Functional	2
Proof-of-Concept	20
Unproven	116
Not Defined	764

访问向量

Not Defined	0
Physical	4
Local	98
Adjacent	430
Network	378

身份验证

Not Defined	0
High	98
Low	556
None	256

用户交互

Not Defined	0
Required	150
None	760

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	26
≤4	70
≤5	212
≤6	280
≤7	124
≤8	138
≤9	56
≤10	4

CVSSv3 Temp

≤1	0
≤2	0
≤3	28
≤4	78
≤5	214
≤6	332
≤7	126
≤8	110
≤9	18
≤10	4

VulDB

≤1	0
≤2	0
≤3	30
≤4	90
≤5	210
≤6	260
≤7	130
≤8	142
≤9	44
≤10	4

NVD

≤1	910
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

CNA

≤1	684
≤2	0
≤3	4
≤4	12
≤5	46
≤6	50
≤7	22
≤8	52
≤9	32
≤10	8

供应商

≤1	784
≤2	0
≤3	0
≤4	0
≤5	0
≤6	16
≤7	30
≤8	44
≤9	36
≤10	0

零日攻击

<1k	22
<2k	136
<5k	34
<10k	458
<25k	138
<50k	108
<100k	14
≥100k	0

本日攻击

<1k	306
<2k	228
<5k	192
<10k	90
<25k	86
<50k	8
<100k	0
≥100k	0

攻击市场容量

IOB - Indicator of Behavior (1000)

时间轴

语言

en	676
ja	94
ru	62
de	38
es	36

国家/地区

us	190
jp	122
ru	74
cn	48
de	44

演员

Cobalt Strike	6
RedLine Stealer	3
Mirai	3
FAKEUPDATES	2
BumbleBee	2

活动

利益

时间轴

类型

Operating System	116
Web Browser	22
Router Operating System	20
Database Software	16
Document Reader Software	16

供应商

Linux	88
Microsoft	42
Not Defined	16
Oracle	16
Google	14

产品

Linux Kernel	88
Microsoft Windows	28
Google Chrome	14
Microsoft SQL Server	8
Adobe Acrobat Reader	8

漏洞

#	漏洞	Base	Temp	0day	今天	易	修正	EPSS	CTI	CVE
1	SourceCodester Pisay Online E-Learning System controller.php 权限升级	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00045	4.72	CVE-2024-4349
2	Tinyproxy HTTP Connection Header 内存损坏	9.8	9.6	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00091	1.04	CVE-2023-49606
3	Netgear DG834Gv5 Web Management Interface 弱加密	2.7	2.5	$5k-$25k	$0-$5k	Proof-of-Concept	Not Defined	0.00045	0.26	CVE-2024-4235
4	Google Chrome Dawn 内存损坏	6.3	6.0	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.00045	0.37	CVE-2024-4368
5	Google Chrome Picture In Picture 内存损坏	6.3	6.0	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.00045	0.33	CVE-2024-4331
6	Contemporary Controls BASrouter BACnet BASRT-B Device-Communication-Control Service 拒绝服务	6.5	5.9	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00045	0.19	CVE-2024-4292
7	Apache ActiveMQ Jolokia/REST API 弱身份验证	7.3	7.0	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00043	0.37	CVE-2024-32114
8	PHP password_verify 未知漏洞	3.7	3.4	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.00043	0.34	CVE-2024-3096
9	Linksys E5600 info 权限升级	5.5	5.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00000	0.48-	CVE-2024-33788
10	The R Project RDS 权限升级	7.5	7.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00045	0.34	CVE-2024-27322
11	Adobe Acrobat Reader 内存损坏	7.0	6.9	$5k-$25k	$5k-$25k	Not Defined	Official Fix	0.00053	0.34	CVE-2024-30305
12	Google Chrome ANGLE 权限升级	6.3	6.0	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.00045	0.30	CVE-2024-4058
13	Ruby Regex Search 内存损坏	3.5	3.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00000	0.26	CVE-2024-27282
14	Foliovision FV Flowplayer Video Player Plugin 权限升级	5.6	5.5	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00043	0.41	CVE-2024-32955
15	Microsoft Windows Proxy Driver 权限升级	6.7	5.8	$25k-$100k	$5k-$25k	Unproven	Official Fix	0.00043	0.30	CVE-2024-26234
16	Vesystem Cloud Desktop fileupload.php 权限升级	6.3	5.7	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00045	0.22	CVE-2024-3803
17	cym1102 nginxWebUI upload 权限升级	6.3	5.7	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00046	0.11	CVE-2024-3739
18	Microsoft Windows SmartScreen Prompt 权限升级	8.8	8.2	$25k-$100k	$25k-$100k	High	Official Fix	0.00455	0.18	CVE-2024-29988
19	cym1102 nginxWebUI addOver findCountByQuery 目录遍历	6.3	5.7	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00045	0.19	CVE-2024-3737
20	Xiamen Four-Faith RMP Router Management Platform SQL注入	6.3	5.7	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00045	0.22	CVE-2024-3688

IOC - Indicator of Compromise (40)

These indicators of compromise highlight associated network ranges which are known to be part of research and attack activities.

ID	IP range	参与者	类型	可信度
1	2.50.51.0/24	QakBot	predictive	高
2	2.57.122.0/24	Mirai	predictive	高
3	2.58.95.0/24	Bashlite	predictive	高
4	5.255.127.0/24	Raccoon	predictive	高
5	XX.XXX.XXX.X/XX	Xxxxxxxxxxx	predictive	高
6	XX.XXX.XXX.X/XX	Xxxxxxxx	predictive	高
7	XX.XXX.XXX.X/XX	Xxxxxxxx	predictive	高
8	XX.XX.XXX.X/XX	Xxxxxxxxx	predictive	高
9	XX.XXX.XX.X/XX	Xxxxxxxx	predictive	高
10	XX.XXX.XXX.X/XX	Xxxxxx Xxxxxx	predictive	高
11	XX.XX.XXX.X/XX	Xxxxxxx Xxxxx	predictive	高
12	XX.XX.XXX.X/XX	Xxxxxxx Xxxxx	predictive	高
13	XX.XX.XXX.X/XX	Xxxxxxx	predictive	高
14	XX.XXX.XXX.X/XX	Xxxxxx	predictive	高
15	XX.XX.XXX.X/XX	Xxxxxxxx	predictive	高
16	XX.XXX.XXX.X/XX	Xxxxxx	predictive	高
17	XX.XXX.XXX.X/XX	Xxxxxxxx Xxxx	predictive	高
18	XX.XXX.XXX.X/XX	Xxxxxx	predictive	高
19	XX.XXX.XXX.X/XX	Xxxxxx	predictive	高
20	XX.XX.XXX.X/XX	Xxxxxxxx	predictive	高
21	XX.XXX.XX.X/XX	Xxxxxxxxxxx	predictive	高
22	XXX.XXX.XXX.X/XX	Xxxxxxxxxxxxxxx	predictive	高
23	XXX.XXX.X.X/XX	Xxxxxxxxx	predictive	高
24	XXX.XXX.X.X/XX	Xxxxxxxxx	predictive	高
25	XXX.XXX.XX.X/XX	Xxxxx	predictive	高
26	XXX.XXX.XX.X/XX	Xxxxx	predictive	高
27	XXX.XXX.XXX.X/XX	Xxxxxxx Xxxxxxx	predictive	高
28	XXX.XXX.XXX.X/XX	Xxxxxxxxxxxxx	predictive	高
29	XXX.XX.XX.X/XX	Xxxxxxx Xxxxxx	predictive	高
30	XXX.XX.XXX.X/XX	Xxxxx	predictive	高
31	XXX.XX.XXX.X/XX	Xxxxx	predictive	高
32	XXX.XXX.XXX.X/XX	Xxxxxx Xxx	predictive	高
33	XXX.XXX.XXX.X/XX	Xxxxxxxx (xxxxx Xxxxx)	predictive	高
34	XXX.XXX.XX.X/XX	Xxxxxxxxxx	predictive	高
35	XXX.XX.XXX.X/XX	Xxxx	predictive	高
36	XXX.XX.XXX.X/XX	Xxxxxx	predictive	高
37	XXX.XX.XX.X/XX	Xxxxx	predictive	高
38	XXX.XXX.XXX.X/XX	Xxxxxxxx Xxx	predictive	高
39	XXX.XXX.XX.X/XX	Xxxxx	predictive	高
40	XXX.XXX.XX.X/XX	Xxxxxx	predictive	高

TTP - Tactics, Techniques, Procedures (22)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	分类	漏洞	访问向量	类型	可信度
1	T1006	CAPEC-126	CWE-22	Path Traversal	predictive	高
2	T1055	CAPEC-10	CWE-74	Improper Neutralization of Data within XPath Expressions	predictive	高
3	T1059	CAPEC-242	CWE-94, CWE-1321	Argument Injection	predictive	高
4	T1059.007	CAPEC-209	CWE-79, CWE-80	Cross Site Scripting	predictive	高
5	T1068	CAPEC-122	CWE-269, CWE-284	Execution with Unnecessary Privileges	predictive	高
6	TXXXX.XXX	CAPEC-	CWE-XXX	Xxx Xx Xxxx-xxxxx Xxxxxxxx	predictive	高
7	TXXXX.XXX	CAPEC-16	CWE-XXX, CWE-XXX	Xxxx-xxxxx Xxxxxxxxxxx	predictive	高
8	TXXXX	CAPEC-136	CWE-XX, CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	高
9	TXXXX.XXX	CAPEC-178	CWE-XXX	Xxxx Xxxxxxxx	predictive	高
10	TXXXX	CAPEC-1	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxx Xxxxxx	predictive	高
11	TXXXX	CAPEC-108	CWE-XX	Xxx Xxxxxxxxx	predictive	高
12	TXXXX.XXX	CAPEC-1	CWE-XXX	Xxxxxxxx Xxxxxxxxxxxxx	predictive	高
13	TXXXX	CAPEC-102	CWE-XXX	Xxxxxxxxxxx Xxxxxxxxxx	predictive	高
14	TXXXX	CAPEC-37	CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxxxxx Xx Xxxxxxxxx Xxxxxxxxxxx	predictive	高
15	TXXXX	CAPEC-38	CWE-XXX	Xxxxxxxxx Xxxxxx Xxxx	predictive	高
16	TXXXX.XXX	CAPEC-	CWE-XXX	Xxxxxxxx Xxxxxx Xxxx	predictive	高
17	TXXXX.XXX	CAPEC-459	CWE-XXX	Xxxxxxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	高
18	TXXXX	CAPEC-464	CWE-XXX	Xxxxxxxx Xx Xxxxxxx Xxxxxxxx Xxxxxxxxxxx Xx Xx Xxxxxxxxxxxx Xxxxx	predictive	高
19	TXXXX	CAPEC-116	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	高
20	TXXXX	CAPEC-112	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxxxxx Xxxxxx	predictive	高
21	TXXXX.XXX	CAPEC-	CWE-XXX	Xxx Xxxxxxxxxx Xxxxx	predictive	高
22	TXXXX.XXX	CAPEC-1	CWE-XXX	Xxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx Xxxxxxxxx	predictive	高

IOA - Indicator of Attack (123)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	分类	Indicator	类型	可信度
1	File	/adminPage/conf/reload	predictive	高
2	File	/adminPage/conf/saveCmd	predictive	高
3	File	/adminPage/main/upload	predictive	高
4	File	/adminPage/www/addOver	predictive	高
5	File	/API/info	predictive	中
6	File	/api/runs/search/run/	predictive	高
7	File	/CMD0/xml_modes.xml	predictive	高
8	File	/Device/Device/GetDeviceInfoList?deviceCode=&searchField=&deviceState=	predictive	高
9	File	/drivers/tty/serial/serial_core.c	predictive	高
10	File	/fftools/ffmpeg_enc.c	predictive	高
11	File	/htdocs/webinc/js/bsc_sms_inbox.php	predictive	高
12	File	/lesson/controller.php	predictive	高
13	File	/proc/scsi/${proc_name}	predictive	高
14	File	/Public/webuploader/0.1.5/server/fileupload.php	predictive	高
15	File	/Public/webuploader/0.1.5/server/fileupload2.php	predictive	高
16	File	/sys/bus/i2c/devices/i2c-2/new_device	predictive	高
17	File	/xxx/xxxxxx/xxxxx	predictive	高
18	File	/xxxxxxxxx/	predictive	中
19	File	xxxxx-xxxxxx-xxxx.xxx	predictive	高
20	File	xx_xxxxxxxxxxxxxx.x	predictive	高
21	File	xxx_xxx_xxxxx.xxx	predictive	高
22	File	xxxx_xxxxxxx.xx	predictive	高
23	File	xxxxxx/xxxxxx_xxxxxx.x	predictive	高
24	File	xx_xxx.x	predictive	中
25	File	xxxxxxx/xxxxxx/xxxxxxx/xxxxxx_xxxx.x	predictive	高
26	File	xxxxxxx/xxx/xxxx/xxx.x	predictive	高
27	File	xxxxxxx/xxxx/xxxx_xxxx.x	predictive	高
28	File	xxxxxxx/xxxxx/xxx-xxxxxxxxx/xxxxxxx.x	predictive	高
29	File	xxxxxxx/xxx/xxxxxxxx/xxx/xx.x	predictive	高
30	File	xxxxxxx/xxx/xxxxxxxx/xxxxxxxxx/xxxxxxxx/xxx.x	predictive	高
31	File	xxxxxxx/xxxx/xxx/xxxxxx.x	predictive	高
32	File	xxxxxxx/xxx/xxxxxx/xxxx/xxxx_xxxx.x	predictive	高
33	File	xxxxxxx/xxx/xxxx/xxxxx.x	predictive	高
34	File	xxxxxxx/xxx/xxxx/xxx.x	predictive	高
35	File	xx/xxxxxx.x	predictive	中
36	File	xx/xxxx/xxxxxxx.x	predictive	高
37	File	xx/xxxxx/xxxx.x	predictive	高
38	File	xx/xxxxxx/xxx.x	predictive	高
39	File	xxxxxxx.xx	predictive	中
40	File	xxxxxx.xxx	predictive	中
41	File	xxxxx	predictive	低
42	File	xxxxx_xxxxxx	predictive	中
43	File	xx/xxx/xxx_xx_xxx.x	predictive	高
44	File	xxxxxxx/xxxxx/xxxxxxxxxxxx.x	predictive	高
45	File	xxxxxxx/xxxxx/xxxx.x	predictive	高
46	File	xxxxxxx/xxxxx/xxxxxx.x	predictive	高
47	File	xxxx/xxxx.x	predictive	中
48	File	xxxxxx/xxx/xxxxxx.x	predictive	高
49	File	xxxxxx/xxxx_xxxxx.x	predictive	高
50	File	xxxxxxxxxxxxx.xxx	predictive	高
51	File	xxxxxxxxxx/xxx_xxxx_xxxxxx_xxxxxxxx.x	predictive	高
52	File	xxxxxxxxxx/xxxxxx_xxxxxx.x	predictive	高
53	File	xxxxxxxxxxx/xx_xxxxxxxxxxx.x	predictive	高
54	File	xxxxxxxxxxx/xxxx_xxxxxxx.x	predictive	高
55	File	xxxxxxxxxxx/xxx_xxxxxxxxxxxx.x	predictive	高
56	File	xxxxxxxxxxx/xxx_xxxxxxxxx.x	predictive	高
57	File	xxxxxxxxxxx/xxxxxxxx.x	predictive	高
58	File	xxxxxxxxxxx/xxxx_xxxxxxxx.x	predictive	高
59	File	xxxxxxxxxxx/x_xxxxxxx.x	predictive	高
60	File	xxxxxxxxxxx/xx_xxxxxxxxx.x	predictive	高
61	File	xxxxxxxxxxx/xx_xxxxxxxxxxxx.x	predictive	高
62	File	xxxxxxxxx/xxxxxxxx.x	predictive	高
63	File	xxxxxxxxx/xxx.x	predictive	高
64	File	xxxx.xxx	predictive	中
65	File	xx/xxxx.x	predictive	中
66	File	xx/xxxxxxxx.x	predictive	高
67	File	xxxxxx/xxxxxxxxxxx.xx	predictive	高
68	File	xxx/xxxxxx/xx_xxxxxxxxx_xxxxx.x	predictive	高
69	File	xxx/xxxx/xxx.x	predictive	高
70	File	xxx/xxxx/xxxx.x	predictive	高
71	File	xxx/xxxxxxxxx/xx_xxxxxx_xxx.x	predictive	高
72	File	xxxx.x	predictive	低
73	File	xxxx.xxx	predictive	中
74	File	xxx/xxxxxx.x	predictive	中
75	File	xxx.x	predictive	低
76	File	xxxxx_xxxx.x	predictive	中
77	File	xxxx-xxxxxxx.xxx	predictive	高
78	File	xxxx_xxxxxx.xx	predictive	高
79	File	xxxxxxxxxxxx/xxxxxxxxx.x	predictive	高
80	File	xxxxxx-xxxxx.xxx	predictive	高
81	File	xxxxxx_xxxxxxxx.xxx	predictive	高
82	File	xxxx.xxx	predictive	中
83	Library	xxxxx-xx.xx	predictive	中
84	Library	xxxx.xxx	predictive	中
85	Library	xxxxxxx/xxx/xxxx_xxx.x	predictive	高
86	Library	xxx/xxxxxxxxxxxx.x	predictive	高
87	Library	xxx/xxxx_xxxxx.x	predictive	高
88	Library	xxx/xxxx_xxxxx.x	predictive	高
89	Library	xxx/xxxxxx.x	predictive	中
90	Library	xxx/xxxxxxxx.x	predictive	高
91	Library	xxx/xxx_xxxxxxx.x	predictive	高
92	Library	xxx/xxxxxxxxxxx.x	predictive	高
93	Library	xxx/xxxxxxxx.x	predictive	高
94	Library	xxxxxxxxxxxx.xxx	predictive	高
95	Library	xxxxxxxx.xxx	predictive	中
96	Library	xxxx-xxxxxx.xxx	predictive	高
97	Argument	xxxxxx	predictive	低
98	Argument	xxxx	predictive	低
99	Argument	xxxxxxxxxxxxxxxx	predictive	高
100	Argument	xxx	predictive	低
101	Argument	xxx	predictive	低
102	Argument	xxxxxxx	predictive	低
103	Argument	xxxxxxx_xxxx	predictive	中
104	Argument	xxxx	predictive	低
105	Argument	xxx_xxxx/xx_xxx_xxxx	predictive	高
106	Argument	xxxxxxx	predictive	低
107	Argument	xx/xxx/xxxxx	predictive	中
108	Argument	xxxxx	predictive	低
109	Argument	xxxxx	predictive	低
110	Argument	xxx_xxxxxxx	predictive	中
111	Argument	xxxx/xxxxx	predictive	中
112	Argument	xxxxxxxx	predictive	中
113	Argument	xxxxxxxxx	predictive	中
114	Argument	xxxxxxx_xxxxx_xxxxxx	predictive	高
115	Argument	xxxxxxx	predictive	低
116	Argument	xxxxxxx	predictive	低
117	Argument	xxxxx	predictive	低
118	Argument	xxxx	predictive	低
119	Argument	xxxx_xx	predictive	低
120	Argument	xxxxxxxx	predictive	中
121	Argument	xx_xxxxx	predictive	中
122	Argument	xxx_xx_xxx_xxxx	predictive	高
123	Input Value	xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx	predictive	高

◂ 上一步一览下一步 ▸

Interested in the pricing of exploits?

See the underground prices here!