部门 Hospital

Timeframe: -28 days

Default Categories (70): Access Management Software, Accounting Software, Anti-Malware Software, Anti-Spam Software, Application Server Software, Backup Software, Big Data Software, Billing Software, Calendar Software, Chip Software, Cloud Software, Communications System, Connectivity Software, Customer Relationship Management System, Database Administration Software, Database Software, Directory Service Software, Document Management Software, Document Processing Software, Document Reader Software, Endpoint Management Software, Enterprise Resource Planning Software, File Compression Software, File Transfer Software, Firewall Software, Firmware Software, Groupware Software, Hardware Driver Software, Health Information Software, Hospitality Software, Image Processing Software, Information Management Software, IP Phone Software, Knowledge Base Software, Log Management Software, Mail Client Software, Mail Server Software, Medical Device Software, Middleware, Multimedia Player Software, Network Attached Storage Software, Network Authentication Software, Network Encryption Software, Network Management Software, Network Routing Software, Office Suite Software, Operating System, Policy Management Software, Presentation Software, Printing Software, Project Management Software, Remote Access Software, Reporting Software, Router Operating System, Server Management Software, Service Management Software, Software Library, Spreadsheet Software, SSH Server Software, Supplier Relationship Management Software, Supply Chain Management Software, Ticket Tracking Software, Unified Communication Software, Video Surveillance Software, Virtualization Software, Warehouse Management System Software, Web Browser, Web Server, Wireless LAN Software, Word Processing Software

时间轴

供应商

Linux	190
Microsoft	66
Foxit	64
Apple	62
Not Defined	30

产品

Linux Kernel	190
Foxit PDF Reader	64
Apple macOS	54
Microsoft Windows	42
Qualcomm Snapdragon	22

修正

Official Fix	562
Temporary Fix	0
Workaround	4
Unavailable	0
Not Defined	102

易受攻击性

High	2
Functional	0
Proof-of-Concept	22
Unproven	50
Not Defined	594

访问向量

Not Defined	0
Physical	6
Local	128
Adjacent	238
Network	296

身份验证

Not Defined	0
High	46
Low	360
None	262

用户交互

Not Defined	0
Required	184
None	484

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	20
≤4	54
≤5	120
≤6	200
≤7	134
≤8	90
≤9	38
≤10	12

CVSSv3 Temp

≤1	0
≤2	0
≤3	22
≤4	58
≤5	120
≤6	286
≤7	84
≤8	72
≤9	14
≤10	12

VulDB

≤1	0
≤2	2
≤3	20
≤4	68
≤5	122
≤6	190
≤7	134
≤8	90
≤9	32
≤10	10

NVD

≤1	668
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

CNA

≤1	518
≤2	0
≤3	0
≤4	4
≤5	22
≤6	12
≤7	22
≤8	46
≤9	28
≤10	16

供应商

≤1	614
≤2	0
≤3	0
≤4	0
≤5	0
≤6	8
≤7	6
≤8	24
≤9	16
≤10	0

零日攻击

<1k	26
<2k	198
<5k	56
<10k	210
<25k	110
<50k	44
<100k	24
≥100k	0

本日攻击

<1k	280
<2k	160
<5k	132
<10k	44
<25k	50
<50k	2
<100k	0
≥100k	0

攻击市场容量

IOB - Indicator of Behavior (1000)

时间轴

语言

en	756
zh	64
de	48
fr	34
ja	20

国家/地区

us	162
cn	150
de	54
fr	24
gb	22

演员

Cobalt Strike	4
Mirai	2
AsyncRAT	1
Viper RAT	1
Sliver	1

活动

利益

时间轴

类型

Operating System	68
Router Operating System	22
Document Reader Software	20
Web Browser	20
Cloud Software	12

供应商

Linux	38
Apple	26
Foxit	18
Not Defined	18
Microsoft	18

产品

Linux Kernel	38
Apple macOS	24
Foxit PDF Reader	18
Cisco IOS XE	10
Microsoft Windows	6

漏洞

#	漏洞	Base	Temp	0day	今天	易	修正	CTI	EPSS	CVE
1	Zimbra zm-admin-ajax Form Textbox Field Error XFormItem.js XFormItem.prototype.setError 跨网站脚本	3.5	3.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.05	0.00000	CVE-2017-20191
2	Integrate Google Drive Plugin Setting 权限升级	7.3	7.1	$0-$5k	$0-$5k	Not Defined	Not Defined	1.13	0.00043	CVE-2024-2086
3	code-projects Online Book System cart.php SQL注入	6.3	5.7	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.39	0.00045	CVE-2024-3003
4	code-projects Online Book System description.php SQL注入	6.3	5.7	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.39	0.00045	CVE-2024-3002
5	code-projects Online Book System Product.php 跨网站脚本	3.5	3.2	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.39	0.00045	CVE-2024-3004
6	code-projects Online Book System Product.php SQL注入	6.3	5.7	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.39	0.00045	CVE-2024-3001
7	Linux Kernel push-switch flush_work 内存损坏	8.0	7.6	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.10	0.00043	CVE-2023-52629
8	code-projects Online Book System index.php SQL注入	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.34	0.00045	CVE-2024-3000
9	D-Link DIR-3040us A1 FTP Server 内存损坏	7.3	7.3	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.46	0.00045	CVE-2024-27619
10	All In One WP Security & Firewall Plugin 跨网站请求伪造	4.3	4.2	$0-$5k	$0-$5k	Not Defined	Not Defined	0.35	0.00043	CVE-2024-30468
11	xzs-mysql 弱身份验证	3.7	3.6	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.69	0.00043	CVE-2024-29401
12	ThimPress WP Hotel Booking Plugin 权限升级	6.5	6.4	$0-$5k	$0-$5k	Not Defined	Not Defined	0.15	0.00043	CVE-2024-30508
13	Nextcloud NextcloudPi Web-Panel 权限升级	9.9	9.7	$0-$5k	$0-$5k	Not Defined	Official Fix	0.30	0.00043	CVE-2024-30247
14	Huashi Private Cloud CDN Live Streaming Acceleration Server ipping.php Privilege Escalation	6.3	6.1	$0-$5k	$0-$5k	Not Defined	Not Defined	0.20	0.00043	CVE-2024-31032
15	Backup Bolt Plugin 信息公开	5.3	5.1	$0-$5k	$0-$5k	Not Defined	Not Defined	0.64	0.00043	CVE-2023-7236
16	Linux Kernel __tracing_map_insert 权限升级	4.6	4.4	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.54	0.00044	CVE-2024-26645
17	code-projects Mobile Shop Login Page Details.php SQL注入	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.05	0.00045	CVE-2024-2927
18	zephyrproject-rtos Zephyr BLE 内存损坏	6.1	6.1	$0-$5k	$0-$5k	Not Defined	Not Defined	0.53	0.00043	CVE-2024-3077
19	Apple macOS App 权限升级	5.3	5.1	$0-$5k	$0-$5k	Not Defined	Official Fix	0.27	0.00044	CVE-2023-42947
20	Apple macOS App 信息公开	3.3	3.2	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	0.00044	CVE-2023-42936

IOC - Indicator of Compromise (27)

These indicators of compromise highlight associated network ranges which are known to be part of research and attack activities.

ID	IP range	参与者	类型	可信度
1	2.57.122.0/24	Mirai	predictive	高
2	3.75.178.0/24	Cobalt Strike	predictive	高
3	5.42.65.0/24	Zusy	predictive	高
4	X.XXX.XX.X/XX	Xxxxxx Xxxxxx	predictive	高
5	X.XXX.XX.X/XX	Xxxxxx Xxxxxx	predictive	高
6	X.XXX.XXX.X/XX	Xxxxxxxxx	predictive	高
7	X.XXX.XXX.X/XX	Xxxxxx Xxxxxx	predictive	高
8	X.XXX.XXX.X/XX	Xxxxxxxxx	predictive	高
9	X.XXX.XXX.X/XX	Xxxxx	predictive	高
10	X.XXX.XXX.X/XX	Xxxxxx	predictive	高
11	X.XXX.XXX.X/XX	Xxxxx	predictive	高
12	X.XXX.XXX.X/XX	Xxxxxx Xxxxxx	predictive	高
13	X.XXX.XXX.X/XX	Xxxxxx Xxxxxx	predictive	高
14	X.XXX.XXX.X/XX	Xxxxxx Xxxxxx	predictive	高
15	X.XXX.XXX.X/XX	Xxxxxx Xxxxxx	predictive	高
16	X.XXX.XXX.X/XX	Xxxxxx Xxxxxx	predictive	高
17	XX.XXX.XXX.X/XX	Xxxxxxxx	predictive	高
18	XX.XXX.XXX.X/XX	Xxxxxxx	predictive	高
19	XX.XX.XXX.X/XX	Xxxxx	predictive	高
20	XXX.XX.XXX.X/XX	Xxxxx	predictive	高
21	XXX.XX.XXX.X/XX	Xxxxxxxx	predictive	高
22	XXX.XX.XX.X/XX	Xxxxx Xxx	predictive	高
23	XXX.XXX.XXX.X/XX	Xxxxxx Xxxxxx	predictive	高
24	XXX.XX.XX.X/XX	Xxxxxxx Xxxxxx	predictive	高
25	XXX.XXX.XXX.X/XX	Xxxxx Xxxxxxx	predictive	高
26	XXX.XX.XXX.X/XX	Xxxxxx Xxx	predictive	高
27	XXX.XXX.XXX.X/XX	Xxxxxxx Xxxxxxx	predictive	高

TTP - Tactics, Techniques, Procedures (21)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	漏洞	访问向量	类型	可信度
1	T1006	CWE-22, CWE-23	Path Traversal	predictive	高
2	T1055	CWE-74	Improper Neutralization of Data within XPath Expressions	predictive	高
3	T1059	CWE-94	Argument Injection	predictive	高
4	T1059.007	CWE-79	Cross Site Scripting	predictive	高
5	T1068	CWE-250, CWE-269, CWE-274, CWE-284	Execution with Unnecessary Privileges	predictive	高
6	TXXXX.XXX	CWE-XXX, CWE-XXX	Xxxx-xxxxx Xxxxxxxxxxx	predictive	高
7	TXXXX	CWE-XX, CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	高
8	TXXXX	CWE-XXX	Xxxxxxxxxx Xxxxxx	predictive	高
9	TXXXX	CWE-XX, CWE-XX	Xxx Xxxxxxxxx	predictive	高
10	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xxxxxxxxxxxxx	predictive	高
11	TXXXX	CWE-XXX, CWE-XXX	Xxxxxxxxxxx Xxxxxxxxxx	predictive	高
12	TXXXX	CWE-XXX	Xxxxxxx Xxxxxxxxxx Xx Xxx-xxxxxxxx	predictive	高
13	TXXXX.XXX	CWE-XXX	Xxxxxxx Xxxxxxxxxx Xxx Xxxxxxxx Xxxxxxx Xx Xx-xxxx Xxxxxx Xxxxxxxx	predictive	高
14	TXXXX.XXX	CWE-XXX	Xxxxxxxxxxxx	predictive	高
15	TXXXX	CWE-XXX	Xxxxxxxxx Xxxxxx Xxxx	predictive	高
16	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	高
17	TXXXX.XXX	CWE-XXX	Xxxxxxxx	predictive	高
18	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	高
19	TXXXX.XXX	CWE-XXX	Xxx Xxxxxxxxxx Xxxxx	predictive	高
20	TXXXX.XXX	CWE-XXX	Xxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx Xxxxxxxxx	predictive	高
21	TXXXX	CWE-XXX	Xxxxxxxxxxx Xxxxxx	predictive	高

IOA - Indicator of Attack (78)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	分类	Indicator	类型	可信度
1	File	/cart.php	predictive	中
2	File	/cgi-bin/gui.cgi	predictive	高
3	File	/description.php	predictive	高
4	File	/Employer/DeleteJob.php?JobId=1	predictive	高
5	File	/index.php	predictive	中
6	File	/login.php	predictive	中
7	File	/Product.php	predictive	中
8	File	/secret_coder.sql	predictive	高
9	File	/setup.cgi	predictive	中
10	File	adminFormvalidation.php	predictive	高
11	File	xxxx/xxx/xxxxxx/xxx/xxxx.x	predictive	高
12	File	xxxx/xxx/xxx/xxx/xxxxxx.x	predictive	高
13	File	xxxxxxx.xxx	predictive	中
14	File	xxxxxxx/xxxx/xxxx_xxxxxx.x	predictive	高
15	File	xxxxxxx/xxx/xxx/xxxx_xxxxxx.x	predictive	高
16	File	xx/xxxxx/xxxxxxxxxxx.x	predictive	高
17	File	xx/xxxxx/xxxx-xxx.x	predictive	高
18	File	xx/xxxx/xxxxxxx_xxxxxx.x	predictive	高
19	File	xx/xxx/xxx_xxxx.x	predictive	高
20	File	xx/xxx/xxx_xxxxx.x	predictive	高
21	File	xx/xxx/xxx_xxxx.x	predictive	高
22	File	xxx_xxx_xxxx.x	predictive	高
23	File	xxxxxxx/xxxxx/xxxx.x	predictive	高
24	File	xxxxxx/xxx/xxxxxxx.x	predictive	高
25	File	xxxxxx.x	predictive	中
26	File	xxxxx.xxx	predictive	中
27	File	xxxxx.xxx	predictive	中
28	File	xxxxxxx/xxxxxx.xxx	predictive	高
29	File	xxxxxxxxxxxxxxxx.xxxxx.xxx	predictive	高
30	File	xx/xxxx_xxxxx.x	predictive	高
31	File	xxx/xxxx/xxx.x	predictive	高
32	File	xxx/xxxx/xxxxxx.x	predictive	高
33	File	xxx/xxxx/xxxxx.x	predictive	高
34	File	xxx/xxxxxxxxx/xx_xxxxxxxxx_xxxxxx.x	predictive	高
35	File	xxx/xxxxxxxxx/xx_xxxxxx_xxx.x	predictive	高
36	File	xxx/xxxxxxxxxxx/xxxx.x	predictive	高
37	File	xxx/xxxxxx/xxxxxxxxxxxxx.x	predictive	高
38	File	xxxxx.xxx	predictive	中
39	File	xxx.xxxxxx	predictive	中
40	File	xxxxxx.xxx	predictive	中
41	File	xxxxxxx/xx/xxxx/xxx/xxxxxx/xxxxxxxxx.xx	predictive	高
42	Library	/xxxxx/xxxx/xxxx/xxxx/xxx/xxx/xxxxxxxxx.x	predictive	高
43	Library	xxxx/xxx/xxxxxxx/xxx/xxxx.x	predictive	高
44	Library	xxxxxxx/xxxxx/xxx.x	predictive	高
45	Library	xxxxxxx/xxxxx/xxxx.x	predictive	高
46	Library	xxxxxxx/xxx/xxxx_xxx.x	predictive	高
47	Library	xxxx_xx.xx	predictive	中
48	Library	xxx/xxx_xxxx.x	predictive	高
49	Library	xxx/xxxx_xxxxx.x	predictive	高
50	Library	xxx/xxxxxxxx.x	predictive	高
51	Library	xxx/xxx	predictive	低
52	Library	xxx/xxxxxxxx.x	predictive	高
53	Library	xxxxx.xxx	predictive	中
54	Argument	xxxxxxxxx/xxxxxx/xxxxxx xx/xxxxxx xxé	predictive	高
55	Argument	xxxxxxxx	predictive	中
56	Argument	xxxxx	predictive	低
57	Argument	xxxxxxxxxxx/xxxxxxxxxxxxxx	predictive	高
58	Argument	xxxxxx_xxxx	predictive	中
59	Argument	x_xxxx	predictive	低
60	Argument	xx	predictive	低
61	Argument	xx	predictive	低
62	Argument	xxxxxxx	predictive	低
63	Argument	xxxx_xxxx	predictive	中
64	Argument	xxxx	predictive	低
65	Argument	xxxxx[]	predictive	低
66	Argument	xxxxxx	predictive	低
67	Argument	xxx_xxxxxx	predictive	中
68	Argument	xx_xxxxx_xxxxxxx	predictive	高
69	Argument	xxxx_xxxxxx_xxxxx	predictive	高
70	Argument	xxxxxxx	predictive	低
71	Argument	xxxxxxxx/xxxxxx	predictive	高
72	Argument	xxxxx	predictive	低
73	Argument	xxxxxx	predictive	低
74	Argument	xxxxxxx xxxx/xxxxxxx xxxx	predictive	高
75	Argument	xxx/xxxxxx	predictive	中
76	Argument	xxxxxxxx	predictive	中
77	Argument	xxxxxxxx/xxxxxxxx/xxxxx_xxxxxxxx/xxxxx_xxxxxxxx	predictive	高
78	Argument	xxxxx	predictive	低

◂ 上一步一览下一步 ▸

Do you know our Splunk app?

Download it now for free!