Sector Agriculture

Timeframe: -28 days

Default Categories (49): Accounting Software, Anti-Malware Software, Anti-Spam Software, Appointment Software, Automation Software, Backup Software, Calendar Software, Chip Software, Communications System, Content Management System, Customer Relationship Management System, Database Software, Document Management Software, Document Processing Software, Document Reader Software, Enterprise Resource Planning Software, File Compression Software, File Transfer Software, Financial Software, Firewall Software, Firmware Software, Hardware Driver Software, Image Processing Software, Information Management Software, Mail Client Software, Mail Server Software, Network Attached Storage Software, Network Camera Software, Network Encryption Software, Network Routing Software, Office Suite Software, Operating System, Photo Gallery Software, Presentation Software, Printing Software, Project Management Software, Router Operating System, SCADA Software, Server Management Software, Service Management Software, Spreadsheet Software, Supplier Relationship Management Software, Supply Chain Management Software, Transport Management Software, Video Surveillance Software, Warehouse Management System Software, Web Browser, Web Server, Word Processing Software

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vendor

Linux	904
Not Defined	92
Microsoft	44
Apple	30
Adobe	30

Product

Linux Kernel	904
Microsoft Windows	42
HDF5	34
Apple macOS	28
Adobe Acrobat Reader	28

Remediation

Official Fix	1230
Temporary Fix	0
Workaround	2
Unavailable	0
Not Defined	172

Exploitability

High	6
Functional	2
Proof-of-Concept	18
Unproven	38
Not Defined	1340

Access Vector

Not Defined	0
Physical	14
Local	118
Adjacent	952
Network	320

Authentication

Not Defined	0
High	50
Low	1114
None	240

User Interaction

Not Defined	0
Required	184
None	1220

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	54
≤4	166
≤5	258
≤6	622
≤7	156
≤8	122
≤9	20
≤10	6

CVSSv3 Temp

≤1	0
≤2	0
≤3	58
≤4	186
≤5	240
≤6	678
≤7	136
≤8	94
≤9	8
≤10	4

VulDB

≤1	0
≤2	0
≤3	64
≤4	168
≤5	274
≤6	606
≤7	146
≤8	132
≤9	10
≤10	4

NVD

≤1	1404
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

CNA

≤1	1212
≤2	0
≤3	0
≤4	14
≤5	8
≤6	42
≤7	32
≤8	58
≤9	22
≤10	16

Vendor

≤1	1362
≤2	0
≤3	0
≤4	0
≤5	0
≤6	6
≤7	18
≤8	12
≤9	6
≤10	0

Exploit 0-day

<1k	40
<2k	216
<5k	42
<10k	888
<25k	172
<50k	38
<100k	8
≥100k	0

Exploit Today

<1k	490
<2k	502
<5k	260
<10k	100
<25k	50
<50k	2
<100k	0
≥100k	0

Exploit Market Volume

IOB - Indicator of Behavior (1000)

Timeline

Lang

en	818
de	44
ja	44
fr	34
zh	16

Country

us	404
de	56
jp	54
ru	30
cn	26

Actors

DPRK	2
Cobalt Strike	2
Emotet	1
AsyncRAT	1
Dealply	1

Activities

Interest

Timeline

Type

Operating System	290
Content Management System	18
Web Browser	16
Firewall Software	12
Document Reader Software	10

Vendor

Linux	270
Not Defined	16
Microsoft	12
Apple	10
Adobe	8

Product

Linux Kernel	270
DedeCMS	12
Apple macOS	10
Adobe Acrobat Reader	8
Microsoft Windows	8

Vulnerabilities

#	Vulnerability	Base	Temp	0day	Today	Exp	Rem	EPSS	CTI	CVE
1	Contemporary Control System BASrouter BACnet BASRT-B Application Protocol Data Unit denial of service	7.5	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Workaround	0.00045	10.00	CVE-2024-4791
2	SourceCodester Online Art Gallery Management System adminHome.php unrestricted upload	6.3	5.7	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00045	1.25	CVE-2024-4946
3	Mozilla Firefox PDF.js type conversion	6.3	6.0	$5k-$25k	$5k-$25k	Not Defined	Official Fix	0.00045	0.75	CVE-2024-4367
4	Ritlabs TinyWeb Server Request crlf injection	5.3	4.8	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00000	0.64+	CVE-2024-5193
5	code-projects Budget Management index.php sql injection	6.3	5.7	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00045	0.79	CVE-2024-5048
6	LCDS LAquis SCADA path traversal	7.0	6.9	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00000	0.43	CVE-2024-5040
7	Campcodes Online Examination System addCourseExe.php sql injection	6.3	5.7	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00045	0.57	CVE-2024-4919
8	Google Chrome Scheduling use after free	6.3	6.0	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.00000	0.39	CVE-2024-5157
9	Linux Kernel riscv stack-based overflow	8.0	7.6	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00000	0.39-	CVE-2023-52761
10	VMware vCenter Server/Cloud Foundation information disclosure	3.8	3.7	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00000	0.29	CVE-2024-22275
11	VMware vCenter Server/Cloud Foundation Shell Privilege Escalation	7.2	7.0	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00000	0.32	CVE-2024-22274
12	DedeCMS path traversal	4.3	3.9	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00045	0.36	CVE-2024-4790
13	MarvinTest Solutions Hardware Access Driver Hw65.sys Local Privilege Escalation	5.3	5.1	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00000	0.32	CVE-2024-31756
14	Umbraco CMS cross site scripting	3.3	3.2	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00000	0.32-	CVE-2024-35218
15	Google Chrome ANGLE heap-based overflow	6.3	6.0	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.00000	0.29	CVE-2024-5159
16	Google Chrome Dawn heap-based overflow	6.3	6.0	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.00000	0.25	CVE-2024-5160
17	Fortinet FortiProxy/FortiOS SSL-VPN Tunnel Mode data authenticity	4.6	4.5	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00043	0.43	CVE-2023-45586
18	Mozilla Thunderbird PDF.js type conversion	6.3	6.0	$5k-$25k	$5k-$25k	Not Defined	Official Fix	0.00045	0.25	CVE-2024-4367
19	Google Chrome V8 type confusion	6.3	6.0	$25k-$100k	$5k-$25k	High	Official Fix	0.01972	0.47	CVE-2024-4947
20	Google Chrome V8 type confusion	6.3	6.0	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.00000	0.25	CVE-2024-5158

IOC - Indicator of Compromise (30)

These indicators of compromise highlight associated network ranges which are known to be part of research and attack activities.

ID	IP range	Actor	Type	Confidence
1	23.239.16.0/24	NSO Group	predictive	High
2	31.171.154.0/24	MuddyWater	predictive	High
3	45.195.198.0/24	Quasar RAT	predictive	High
4	XX.XXX.X.X/XX	Xxxxx	predictive	High
5	XX.XXX.XXX.X/XX	Xxxxxxx	predictive	High
6	XX.XX.XXX.X/XX	Xxxxxxxx	predictive	High
7	XX.XX.XXX.X/XX	Xxxxxxx	predictive	High
8	XX.XXX.XXX.X/XX	Xxxxxxxxxx	predictive	High
9	XX.XXX.XX.X/XX	Xxxxxxxxx	predictive	High
10	XX.XXX.XX.X/XX	Xxxxxx Xxxxxx	predictive	High
11	XXX.XX.XXX.X/XX	Xxxxxx	predictive	High
12	XXX.XXX.XXX.X/XX	Xxxxxx Xxxxxx	predictive	High
13	XXX.XXX.XXX.X/XX	Xxxxx	predictive	High
14	XXX.XXX.X.X/XX	Xxxxxxxxx	predictive	High
15	XXX.XXX.XXX.X/XX	Xxxxxxxxxxxxx	predictive	High
16	XXX.XXX.XXX.X/XX	Xxxxxx Xxxxxx	predictive	High
17	XXX.X.XXX.X/XX	Xxxxxxx	predictive	High
18	XXX.XXX.XXX.X/XX	Xxxxxxx	predictive	High
19	XXX.XXX.XXX.X/XX	Xxxx	predictive	High
20	XXX.XXX.XXX.X/XX	Xxxxxxx Xxxxxxx	predictive	High
21	XXX.XX.XXX.X/XX	Xxxxx	predictive	High
22	XXX.XXX.XXX.X/XX	Xxxxxx	predictive	High
23	XXX.XXX.XXX.X/XX	Xxxxx	predictive	High
24	XXX.XXX.XXX.X/XX	Xxxx	predictive	High
25	XXX.XX.XX.X/XX	Xxxxx	predictive	High
26	XXX.XXX.XXX.X/XX	Xxxxxx Xxxxxx	predictive	High
27	XXX.XXX.XXX.X/XX	Xxxxxxx Xxxxxxx	predictive	High
28	XXX.XXX.XX.X/XX	Xxxx	predictive	High
29	XXX.XX.XXX.X/XX	Xxxxx	predictive	High
30	XXX.XXX.XX.X/XX	Xxxxxx	predictive	High

TTP - Tactics, Techniques, Procedures (28)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	Class	Vulnerabilities	Access Vector	Type	Confidence
1	T1006	CAPEC-126	CWE-22, CWE-23, CWE-24, CWE-41	Path Traversal	predictive	High
2	T1040	CAPEC-102	CWE-319	Authentication Bypass by Capture-replay	predictive	High
3	T1055	CAPEC-10	CWE-74	Improper Neutralization of Data within XPath Expressions	predictive	High
4	T1059	CAPEC-242	CWE-94	Argument Injection	predictive	High
5	T1059.007	CAPEC-209	CWE-79, CWE-80	Cross Site Scripting	predictive	High
6	T1068	CAPEC-104	CWE-250, CWE-266, CWE-269, CWE-284	Execution with Unnecessary Privileges	predictive	High
7	TXXXX.XXX	CAPEC-	CWE-XXX	Xxx Xx Xxxx-xxxxx Xxxxxxxx	predictive	High
8	TXXXX.XXX	CAPEC-16	CWE-XXX, CWE-XXX	Xxxx-xxxxx Xxxxxxxxxxx	predictive	High
9	TXXXX	CAPEC-136	CWE-XX, CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	High
10	TXXXX.XXX	CAPEC-178	CWE-XXX	Xxxx Xxxxxxxx	predictive	High
11	TXXXX	CAPEC-	CWE-XXXX	Xxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxx Xxxxxxxx Xxxx Xx X Xxxxxxxx Xxxxxx	predictive	High
12	TXXXX	CAPEC-	CWE-XXX	Xxxxxxxxxx Xxxxxx	predictive	High
13	TXXXX	CAPEC-184	CWE-XXX	Xxxxxxxx Xx Xxxx Xxxxxxx Xxxxxxxxx Xxxxx	predictive	High
14	TXXXX	CAPEC-108	CWE-XX	Xxx Xxxxxxxxx	predictive	High
15	TXXXX.XXX	CAPEC-1	CWE-XXX	Xxxxxxxx Xxxxxxxxxxxxx	predictive	High
16	TXXXX	CAPEC-102	CWE-XXX, CWE-XXX	Xxxxxxxxxxx Xxxxxxxxxx	predictive	High
17	TXXXX.XXX	CAPEC-220	CWE-XXX	Xxxxxxxxx Xxxxxxxxx	predictive	High
18	TXXXX.XXX	CAPEC-154	CWE-XXX	Xxxxxxxxxxxx	predictive	High
19	TXXXX	CAPEC-38	CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxxxx Xxxx	predictive	High
20	TXXXX.XXX	CAPEC-	CWE-XXX	Xxxxxxxx Xxxxxx Xxxx	predictive	High
21	TXXXX.XXX	CAPEC-459	CWE-XXX	Xxxxxxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	High
22	TXXXX.XXX	CAPEC-133	CWE-XXX	Xxxxxxxx	predictive	High
23	TXXXX	CAPEC-464	CWE-XXX	Xxxxxxxx Xx Xxxxxxx Xxxxxxxx Xxxxxxxxxxx Xx Xx Xxxxxxxxxxxx Xxxxx	predictive	High
24	TXXXX	CAPEC-116	CWE-XXX, CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	High
25	TXXXX	CAPEC-	CWE-XXX	Xxxxxxxxxxxxx Xxxxxx	predictive	High
26	TXXXX.XXX	CAPEC-112	CWE-XXX, CWE-XXX, CWE-XXX	Xxx Xxxxxxxxxx Xxxxx	predictive	High
27	TXXXX.XXX	CAPEC-1	CWE-XXX	Xxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx Xxxxxxxxx	predictive	High
28	TXXXX	CAPEC-	CWE-XXX	Xxxxxxxxxxx Xxxxxx	predictive	High

◂ PreviousOverviewNext ▸

Interested in the pricing of exploits?

See the underground prices here!