部门 Lawfirm

Timeframe: -28 days

Default Categories (75): Access Management Software, Accounting Software, Anti-Malware Software, Anti-Spam Software, Application Server Software, Appointment Software, Artificial Intelligence Software, Asset Management Software, Backup Software, Billing Software, Business Process Management Software, Calendar Software, Chat Software, Cloud Software, Communications System, Connectivity Software, Content Management System, Customer Relationship Management System, Database Administration Software, Database Software, Digital Media Player, Directory Service Software, Document Management Software, Document Processing Software, Document Reader Software, Endpoint Management Software, Enterprise Resource Planning Software, File Compression Software, File Transfer Software, Firewall Software, Groupware Software, Hardware Driver Software, Human Capital Management Software, Image Processing Software, Information Management Software, IP Phone Software, Knowledge Base Software, Log Management Software, Mail Client Software, Mail Server Software, Messaging Software, Middleware, Multimedia Player Software, Multimedia Processing Software, Network Attached Storage Software, Network Authentication Software, Network Encryption Software, Network Management Software, Network Routing Software, Office Suite Software, Operating System, Photo Gallery Software, Policy Management Software, Presentation Software, Printing Software, Project Management Software, Remote Access Software, Reporting Software, Risk Management System, Router Operating System, Server Management Software, Service Management Software, Smartphone Operating System, Software Management Software, Solution Stack Software, Spreadsheet Software, SSH Server Software, Tablet Operating System, Ticket Tracking Software, Unified Communication Software, Virtualization Software, Web Browser, Web Server, Wireless LAN Software, Word Processing Software

时间轴

供应商

Linux	244
Microsoft	134
Not Defined	78
Foxit	52
Google	48

产品

Linux Kernel	244
Microsoft Windows	102
Foxit PDF Reader	52
Juniper Junos OS	28
Google Android	26

修正

Official Fix	756
Temporary Fix	0
Workaround	4
Unavailable	0
Not Defined	188

易受攻击性

High	6
Functional	2
Proof-of-Concept	56
Unproven	122
Not Defined	762

访问向量

Not Defined	0
Physical	14
Local	142
Adjacent	300
Network	492

身份验证

Not Defined	0
High	86
Low	510
None	352

用户交互

Not Defined	0
Required	266
None	682

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	12
≤4	96
≤5	220
≤6	262
≤7	182
≤8	116
≤9	52
≤10	8

CVSSv3 Temp

≤1	0
≤2	0
≤3	12
≤4	130
≤5	190
≤6	374
≤7	126
≤8	96
≤9	12
≤10	8

VulDB

≤1	0
≤2	0
≤3	30
≤4	138
≤5	180
≤6	256
≤7	172
≤8	126
≤9	38
≤10	8

NVD

≤1	948
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

CNA

≤1	692
≤2	0
≤3	2
≤4	4
≤5	30
≤6	76
≤7	32
≤8	70
≤9	24
≤10	18

供应商

≤1	816
≤2	0
≤3	0
≤4	0
≤5	4
≤6	14
≤7	28
≤8	58
≤9	28
≤10	0

零日攻击

<1k	46
<2k	278
<5k	48
<10k	288
<25k	158
<50k	112
<100k	18
≥100k	0

本日攻击

<1k	296
<2k	322
<5k	148
<10k	84
<25k	96
<50k	2
<100k	0
≥100k	0

攻击市场容量

IOB - Indicator of Behavior (1000)

时间轴

语言

en	986
ja	6
pt	2
es	2
zh	2

国家/地区

us	534
gb	104
jp	12
ch	12
de	8

演员

DPRK	2
Viper RAT	1
Powload	1
Sliver	1
Shade	1

活动

利益

时间轴

类型

Web Browser	8
Router Operating System	6
Web Server	6
Cloud Software	4
Content Management System	4

供应商

Google	8
cym1102	6
Not Defined	4
Palo Alto Networks	4
Microsoft	4

产品

cym1102 nginxWebUI	6
Google Chrome	6
Palo Alto Networks PAN-OS	4
Cisco IOS XE	2
Vesystem Cloud Desktop	2

漏洞

#	漏洞	Base	Temp	0day	今天	易	修正	EPSS	CTI	CVE
1	cym1102 nginxWebUI saveCmd handlePath 弱身份验证	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00045	4.51	CVE-2024-3738
2	PHPGurukul Small CRM Registration Page SQL注入	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00045	2.89	CVE-2024-3691
3	DedeCMS update_guide.php 未知漏洞	4.3	3.9	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00045	2.45	CVE-2024-3686
4	PHPGurukul Small CRM Change Password SQL注入	6.3	5.7	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00045	2.50	CVE-2024-3690
5	cym1102 nginxWebUI upload 权限升级	6.3	5.7	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00045	3.10	CVE-2024-3739
6	DedeCMS stepselect_main.php SQL注入	6.3	5.7	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00045	2.52	CVE-2024-3685
7	cym1102 nginxWebUI reload exec 权限升级	6.3	5.7	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00045	3.49	CVE-2024-3740
8	Xiamen Four-Faith RMP Router Management Platform SQL注入	6.3	5.7	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00045	2.17	CVE-2024-3688
9	cym1102 nginxWebUI addOver findCountByQuery 目录遍历	6.3	5.7	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00045	2.85	CVE-2024-3737
10	cym1102 nginxWebUI upload 权限升级	4.3	3.9	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00045	2.57	CVE-2024-3736
11	Vesystem Cloud Desktop fileupload2.php 权限升级	6.3	5.7	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00000	1.83-	CVE-2024-3804
12	Vesystem Cloud Desktop fileupload.php 权限升级	6.3	5.7	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00000	1.70-	CVE-2024-3803
13	Palo Alto Networks PAN-OS GlobalProtect 权限升级	8.9	8.7	$0-$5k	$0-$5k	High	Official Fix	0.00371	3.94	CVE-2024-3400
14	Macrob7 Macs CMS saveUser SQL注入	6.3	6.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00000	0.12	CVE-2023-45503
15	Wappointment Appointment Bookings for Zoom GoogleMeet and more Plugin 权限升级	4.6	4.5	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00043	0.16-	CVE-2024-32454
16	Microsoft Azure Identity Library for .NET 信息公开	4.4	4.2	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00043	0.12	CVE-2024-29992
17	mysql2 text_parser.js 未知漏洞	6.5	6.3	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00044	0.02	CVE-2024-21509
18	Palo Alto Networks PAN-OS Cloud Identity Engine 未知漏洞	6.1	6.0	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00043	0.19	CVE-2024-3383
19	Linux Kernel pci1xxxx_spi_probe 拒绝服务	5.0	4.9	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00043	0.12	CVE-2024-24862
20	iboss Secure Web Gateway Login Portal login 跨网站脚本	4.3	3.9	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00045	0.24	CVE-2024-3378

IOC - Indicator of Compromise (17)

These indicators of compromise highlight associated network ranges which are known to be part of research and attack activities.

ID	IP range	参与者	类型	可信度
1	54.38.234.0/24	AsyncRAT	predictive	高
2	68.66.216.0/24	Powload	predictive	高
3	XX.XX.XXX.X/XX	Xxxxx	predictive	高
4	XXX.XX.XXX.X/XX	Xxxxx	predictive	高
5	XXX.XX.XXX.X/XX	Xxxxxxxx	predictive	高
6	XXX.XX.XX.X/XX	Xxxxx Xxx	predictive	高
7	XXX.XXX.XX.X/XX	Xxxxx	predictive	高
8	XXX.XXX.XXX.X/XX	Xxxxxxxxxxxx	predictive	高
9	XXX.XX.XXX.X/XX	Xxxxxxx Xxxxx Xxxxx	predictive	高
10	XXX.XX.XX.X/XX	Xxxxxx	predictive	高
11	XXX.XXX.XXX.X/XX	Xxxx	predictive	高
12	XXX.XXX.XX.X/XX	Xxxxxxx Xxxxxx	predictive	高
13	XXX.XXX.XXX.X/XX	Xxxxxx Xxx	predictive	高
14	XXX.XXX.XXX.X/XX	Xxxxx	predictive	高
15	XXX.XX.XX.X/XX	Xxxxxxx	predictive	高
16	XXX.XX.XX.X/XX	Xxxxxx	predictive	高
17	XXX.XXX.XX.X/XX	Xxxx	predictive	高

TTP - Tactics, Techniques, Procedures (27)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	漏洞	访问向量	类型	可信度
1	T1006	CWE-22, CWE-23, CWE-24, CWE-25, CWE-35	Path Traversal	predictive	高
2	T1040	CWE-319	Authentication Bypass by Capture-replay	predictive	高
3	T1055	CWE-74	Improper Neutralization of Data within XPath Expressions	predictive	高
4	T1059	CWE-94, CWE-1321	Argument Injection	predictive	高
5	T1059.007	CWE-79, CWE-80	Cross Site Scripting	predictive	高
6	T1068	CWE-250, CWE-269, CWE-274, CWE-284	Execution with Unnecessary Privileges	predictive	高
7	TXXXX.XXX	CWE-XXX	Xxx Xx Xxxx-xxxxx Xxxxxxxx	predictive	高
8	TXXXX	CWE-XXX	Xxxx Xxx Xxxxxxxxx Xxxxxxxxxxx Xxxxxxxx	predictive	高
9	TXXXX.XXX	CWE-XXX, CWE-XXX	Xxxx-xxxxx Xxxxxxxxxxx	predictive	高
10	TXXXX	CWE-XX, CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	高
11	TXXXX.XXX	CWE-XXX	Xxxx Xxxxxxxx	predictive	高
12	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxx Xxxxxx	predictive	高
13	TXXXX.XXX	CWE-XXXX	Xxxxxxxxxxx Xxxxxxx Xxxxxxxxxx Xxxxxxxxxx	predictive	高
14	TXXXX	CWE-XX	Xxx Xxxxxxxxx	predictive	高
15	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xxxxxxxxxxxxx	predictive	高
16	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxxx Xxxxxxxxxx	predictive	高
17	TXXXX	CWE-XXX	Xxxxxxxxx Xxxxxxx Xx Xxxxxxxxx Xxxxxxxxxxx	predictive	高
18	TXXXX.XXX	CWE-XXX	Xxxxxxx Xxxxxxxxxx Xxx Xxxxxxxx Xxxxxxx Xx Xx-xxxx Xxxxxx Xxxxxxxx	predictive	高
19	TXXXX.XXX	CWE-XXX	Xxxxxxxxxxxx	predictive	高
20	TXXXX	CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxxxx Xxxx	predictive	高
21	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xxxxxx Xxxx	predictive	高
22	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	高
23	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	高
24	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxxxxx Xxxxxx	predictive	高
25	TXXXX.XXX	CWE-XXX	Xxx Xxxxxxxxxx Xxxxx	predictive	高
26	TXXXX.XXX	CWE-XXX	Xxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx Xxxxxxxxx	predictive	高
27	TXXXX	CWE-XXX	Xxxxxxxxxxx Xxxxxx	predictive	高

IOA - Indicator of Attack (150)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	分类	Indicator	类型	可信度
1	File	/admin/adminHome.php	predictive	高
2	File	/adminPage/conf/reload	predictive	高
3	File	/adminPage/conf/saveCmd	predictive	高
4	File	/adminPage/main/upload	predictive	高
5	File	/adminPage/www/addOver	predictive	高
6	File	/anchor/admin/categories/delete/2	predictive	高
7	File	/anchor/admin/users/delete/2	predictive	高
8	File	/api/runs/search/run/	predictive	高
9	File	/cart.php	predictive	中
10	File	/description.php	predictive	高
11	File	/Device/Device/GetDeviceInfoList?deviceCode=&searchField=&deviceState=	predictive	高
12	File	/endpoint/add-image.php	predictive	高
13	File	/etc/passwd	predictive	中
14	File	/index.php	predictive	中
15	File	/login	predictive	低
16	File	/Product.php	predictive	中
17	File	/Public/webuploader/0.1.5/server/fileupload.php	predictive	高
18	File	/Public/webuploader/0.1.5/server/fileupload2.php	predictive	高
19	File	/src/dede/baidunews.php	predictive	高
20	File	/src/dede/co_do.php	predictive	高
21	File	/xxx/xxxx/xxxxxxxxxx_xxxx.xxx	predictive	高
22	File	/xxx/xxxx/xxxxxxxx_xxxxxxxx.xxx	predictive	高
23	File	/xxx/xxxx/xxxxxxxx_xx_xxxxxx.xxx	predictive	高
24	File	/xxx/xxxx/xxxxxxxx_xxx.xxx	predictive	高
25	File	/xxx/xxxx/xxxxxxxx_xxx_xxxxxx.xxx	predictive	高
26	File	/xxx/xxxx/xxxxxxxx_xxxx.xxx	predictive	高
27	File	/xxx/xxxx/xxx_xxxx.xxx	predictive	高
28	File	/xxx/xxxx/xxxxxx_xxxx.xxx	predictive	高
29	File	/xxx/xxxx/xxxxxx_xxxxxx.xxx	predictive	高
30	File	/xxx/xxxx/xxxx_xxxx.xxx	predictive	高
31	File	/xxx/xxxxxx/xxxxx	predictive	高
32	File	xxxxxxxx_xxx_xxxxxxx_xxxx_xxxxxxx.xxx	predictive	高
33	File	xxx-xxxxxxx.xxx	predictive	高
34	File	xxxxx/xxxxxx_xxxx.xxx	predictive	高
35	File	xx_xxxxxxxxxxxxxx.x	predictive	高
36	File	xxxxxxxxxxxxxxx.xxx	predictive	高
37	File	xxxxxxx.xxx	predictive	中
38	File	xxxxxxxxxxxxx.xxx	predictive	高
39	File	xxxxxxxxxxx.xxx	predictive	高
40	File	xxxxxxxxxxx.xxx	predictive	高
41	File	xxxxxxxxx.x	predictive	中
42	File	xxxxxxxxxxx.xxx	predictive	高
43	File	xxxxxxxx.xxx	predictive	中
44	File	xxxx/xxx/xxxxxx/xxx/xxxx.x	predictive	高
45	File	xxxx_xxxxxx.x	predictive	高
46	File	xxxxx/xxx-xxxxxx.x	predictive	高
47	File	xxxxx/xxx-xx-xxx.x	predictive	高
48	File	xxx_xxx.xxxx	predictive	中
49	File	xxxx_xxxxxxx.xx	predictive	高
50	File	xxxxxxx/xxxxxx.xxx?x=xxxx_xxxxx	predictive	高
51	File	xxxxxxxxxx/xxxxx/xxxxxxxxxxxxxxxx.xxxx	predictive	高
52	File	xxxxxxxxxxxxxx.xxx	predictive	高
53	File	xxxxxxxxx.xxx	predictive	高
54	File	xxxx/xxxxxxxx_xxxxxxxx_xxxxxx.xxx	predictive	高
55	File	xxxxxxx.xxx	predictive	中
56	File	xxxxxxx/xxxxx/xxxxxxx/xx_xxxxxxxxx.x	predictive	高
57	File	xxxxxxx/xxxx/xxx/xxxxxx.x	predictive	高
58	File	xxxx.x	predictive	低
59	File	xx/xxxxx/xxxx-xx.x	predictive	高
60	File	xx/xxxxx/xxxxxxxxxxx.x	predictive	高
61	File	xx/xxxxx/xxxx-xxx.x	predictive	高
62	File	xx/xxxx/xxxx.x	predictive	高
63	File	xxxxx	predictive	低
64	File	xxxxx_xxxxxx	predictive	中
65	File	xx/xxx/xxx_xx_xxx.x	predictive	高
66	File	xxxxxxx/xxxxx/xxxxxx.x	predictive	高
67	File	xxxxx.xxx	predictive	中
68	File	xxxxx.x	predictive	低
69	File	xxxxxx/xxx/xxxxxxx.x	predictive	高
70	File	xxxxxx/xxx/xxxxx.x	predictive	高
71	File	xxxxxx/xxx/xxxx.x:	predictive	高
72	File	xxx.x	predictive	低
73	File	xxxxxxxxx.xx	predictive	中
74	File	xxx.x	predictive	低
75	File	xxxxxxx/xxxxxx.xxx	predictive	高
76	File	xx/xxxx_xxxxx.x	predictive	高
77	File	xx/xxxxxxxx.x	predictive	高
78	File	xxxxxxx/xxxxx/xxxxxxx/xxxxxxx.xxx	predictive	高
79	File	xxx/xxxx/xxxxxx.x	predictive	高
80	File	xxx/xxx/xxx_xxxxxx.x	predictive	高
81	File	xxx/xxxxxxxxxxx/xxxx.x	predictive	高
82	File	xxx/xxxxxx/xxxxxxxxxxxxx.x	predictive	高
83	File	xxxxx.x	predictive	低
84	File	xxxxx.x	predictive	低
85	File	xxxxxxxxx.xxx	predictive	高
86	File	xxxxx/xxx/xxxx/xxxxx-xxx-xxx.x	predictive	高
87	File	xxxxxxx:xxxxxxxxxxxxxxxx	predictive	高
88	File	xxxxxxxxxx_xxxx.xxx	predictive	高
89	File	xxxx_xxxxxx.xx	predictive	高
90	File	xxx.x	predictive	低
91	File	xxxxxx_xxxxx.xxx	predictive	高
92	File	xxxxxxx/xx/xxxx/xxx/xxxxxx/xxxxxxxxx.xx	predictive	高
93	Library	xxxx.xxx	predictive	中
94	Library	xxxxxxx/xxxxx/xxxx.x	predictive	高
95	Library	xxx/xxx_xxxx.x	predictive	高
96	Library	xxx/xxxxxxxxxxxx.x	predictive	高
97	Library	xxx/xxxx_xxxxx.x	predictive	高
98	Library	xxx/xxx_xxxx.x	predictive	高
99	Library	xxx/xxxxxxxxxxx.x	predictive	高
100	Library	xxxxxxxx.xxx	predictive	中
101	Library	xxxx.x	predictive	低
102	Argument	xxxxxx	predictive	低
103	Argument	xxx	predictive	低
104	Argument	xxxxxxxxxxx	predictive	中
105	Argument	xxxx	predictive	低
106	Argument	xxxxxxxxxxxxxxxx	predictive	高
107	Argument	xx-xxxxxx	predictive	中
108	Argument	xxxxxxxx	predictive	中
109	Argument	xxxxxxx-xxxx/xxxx	predictive	高
110	Argument	xxxxxxxxxxx	predictive	中
111	Argument	xx_xxxx_xxx	predictive	中
112	Argument	xxx	predictive	低
113	Argument	xxxxx	predictive	低
114	Argument	xxxxxxx_xxxx	predictive	中
115	Argument	xxxx	predictive	低
116	Argument	xxxxxxxx	predictive	中
117	Argument	xxxxx	predictive	低
118	Argument	xxxxxx_xxxx	predictive	中
119	Argument	xxxx	predictive	低
120	Argument	xxxxxxx	predictive	低
121	Argument	x_xxxx	predictive	低
122	Argument	xx	predictive	低
123	Argument	xx	predictive	低
124	Argument	xxx	predictive	低
125	Argument	xxxxx_xxxx	predictive	中
126	Argument	xxxxx	predictive	低
127	Argument	xxx_xx	predictive	低
128	Argument	xxxxx_xxx	predictive	中
129	Argument	xxxxxxx	predictive	低
130	Argument	xxxx	predictive	低
131	Argument	xxxxxxxx	predictive	中
132	Argument	xxxxxxxxx	predictive	中
133	Argument	xxx_xxxxxx	predictive	中
134	Argument	xxxxxx	predictive	低
135	Argument	xxx_xxxxxx	predictive	中
136	Argument	xx_xxxxx_xxxxxxx	predictive	高
137	Argument	xxxx_xxxxxx_xxxxx	predictive	高
138	Argument	xxxxxxx	predictive	低
139	Argument	xxxxxxx	predictive	低
140	Argument	xxxxxxxx/xxxxxx	predictive	高
141	Argument	xxxxxxxxxxx	predictive	中
142	Argument	xxxxxxxxx	predictive	中
143	Argument	xxxx_xxxxxxx_xxxx	predictive	高
144	Argument	xxxx	predictive	低
145	Argument	xxxx/xxxxxxxx	predictive	高
146	Argument	xxxxx	predictive	低
147	Argument	xxxxxx xxxxx	predictive	中
148	Argument	xxxxxxxx/xxxxxxxx/xxxxx_xxxxxxxx/xxxxx_xxxxxxxx	predictive	高
149	Argument	xxxxx	predictive	低
150	Argument	x-xxxxxxxxx-xxx	predictive	高

◂ 上一步一览下一步 ▸

Do you need the next level of professionalism?

Upgrade your account now!