Sector Education

Timeframe: -28 days

Default Categories (58): Access Management Software, Accounting Software, Anti-Malware Software, Anti-Spam Software, Application Server Software, Backup Software, Blog Software, Calendar Software, Chat Software, Cloud Software, Communications System, Database Administration Software, Database Software, Digital Media Player, Directory Service Software, Document Management Software, Document Processing Software, Document Reader Software, Endpoint Management Software, Firewall Software, Groupware Software, Hardware Driver Software, Image Processing Software, Information Management Software, IP Phone Software, Knowledge Base Software, Learning Management Software, Library Management System Software, Log Management Software, Mail Client Software, Mail Server Software, Messaging Software, Middleware, Multimedia Player Software, Multimedia Processing Software, Network Attached Storage Software, Network Encryption Software, Network Management Software, Network Routing Software, Office Suite Software, Operating System, Presentation Software, Printing Software, Programming Language Software, Project Management Software, Remote Access Software, Reporting Software, Router Operating System, Server Management Software, Spreadsheet Software, SSH Server Software, Survey Software, Unified Communication Software, Virtualization Software, Web Browser, Web Server, Wireless LAN Software, Word Processing Software

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vendor

Linux	306
Microsoft	134
Oracle	64
Not Defined	56
Juniper	44

Product

Linux Kernel	306
Microsoft Windows	90
Juniper Junos OS	38
Microsoft SQL Server	30
Microsoft OLE DB Driver	24

Remediation

Official Fix	710
Temporary Fix	0
Workaround	4
Unavailable	0
Not Defined	146

Exploitability

High	6
Functional	2
Proof-of-Concept	30
Unproven	124
Not Defined	698

Access Vector

Not Defined	0
Physical	8
Local	98
Adjacent	364
Network	390

Authentication

Not Defined	0
High	96
Low	480
None	284

User Interaction

Not Defined	0
Required	166
None	694

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	32
≤4	60
≤5	198
≤6	236
≤7	144
≤8	122
≤9	58
≤10	10

CVSSv3 Temp

≤1	0
≤2	0
≤3	34
≤4	64
≤5	196
≤6	304
≤7	136
≤8	104
≤9	12
≤10	10

VulDB

≤1	0
≤2	0
≤3	32
≤4	90
≤5	176
≤6	224
≤7	154
≤8	124
≤9	50
≤10	10

NVD

≤1	860
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

CNA

≤1	620
≤2	0
≤3	12
≤4	8
≤5	38
≤6	46
≤7	40
≤8	62
≤9	18
≤10	16

Vendor

≤1	728
≤2	0
≤3	0
≤4	0
≤5	2
≤6	6
≤7	34
≤8	46
≤9	44
≤10	0

Exploit 0-day

<1k	24
<2k	168
<5k	38
<10k	376
<25k	124
<50k	116
<100k	14
≥100k	0

Exploit Today

<1k	246
<2k	232
<5k	188
<10k	118
<25k	76
<50k	0
<100k	0
≥100k	0

Exploit Market Volume

IOB - Indicator of Behavior (1000)

Timeline

Lang

en	684
de	84
ru	52
es	46
ja	42

Country

us	188
de	82
ru	72
jp	48
fr	42

Actors

Cobalt Strike	7
Mirai	6
AsyncRAT	5
RedLine Stealer	5
Sandworm	3

Activities

Interest

Timeline

Type

Operating System	52
Programming Language Software	16
Database Software	14
Web Browser	14
Virtualization Software	12

Vendor

Linux	38
Microsoft	22
Not Defined	22
Oracle	22
QNAP	14

Product

Linux Kernel	38
Microsoft Windows	14
QNAP QTS	12
QNAP QuTS hero	12
Oracle VM VirtualBox	8

Vulnerabilities

#	Vulnerability	Base	Temp	0day	Today	Exp	Rem	EPSS	CTI	CVE
1	Contemporary Controls BASrouter BACnet BASRT-B Device-Communication-Control Service denial of service	6.5	5.9	$1k-$2k	$0-$1k	Proof-of-Concept	Not Defined	0.00000	4.85	CVE-2024-4292
2	Netgear DG834Gv5 Web Management Interface cleartext storage	2.7	2.5	$5k-$10k	$0-$1k	Proof-of-Concept	Not Defined	0.00045	0.66	CVE-2024-4235
3	Google Chrome ANGLE type confusion	6.3	6.0	$25k-$50k	$10k-$25k	Not Defined	Official Fix	0.00000	0.44	CVE-2024-4058
4	Cisco ASA/Firepower Threat Defense Web Server infinite loop	8.0	7.9	$10k-$25k	$5k-$10k	Not Defined	Official Fix	0.00226	0.17	CVE-2024-20353
5	Artifex Ghostscript SAFER Mode zmisc1.c Privilege Escalation	5.5	5.3	$1k-$2k	$0-$1k	Not Defined	Official Fix	0.00000	1.16	CVE-2023-52722
6	PHP password_verify poison null byte	3.7	3.4	$5k-$10k	$0-$1k	Proof-of-Concept	Official Fix	0.00000	0.11	CVE-2024-3096
7	Google Chrome Dawn use after free	6.3	6.0	$25k-$50k	$10k-$25k	Not Defined	Official Fix	0.00000	0.28	CVE-2024-4060
8	Backdoor.Win32.Dumador.c FTP Server stack-based overflow	6.3	5.6	$1k-$2k	$0-$1k	Proof-of-Concept	Workaround	0.00000	0.61
9	Google Chrome V8 API out-of-bounds	6.3	6.0	$25k-$50k	$10k-$25k	Not Defined	Official Fix	0.00000	0.06	CVE-2024-4059
10	PHP proc_open command injection	7.3	7.0	$10k-$25k	$2k-$5k	Not Defined	Official Fix	0.00000	0.11	CVE-2024-1874
11	JumpCloud Agent temp file	7.8	7.5	$1k-$2k	$0-$1k	Not Defined	Official Fix	0.00043	0.28	CVE-2023-26603
12	code-projects Car Rental add-vehicle.php unrestricted upload	6.3	5.7	$1k-$2k	$0-$1k	Proof-of-Concept	Not Defined	0.00045	0.33	CVE-2024-3369
13	QNAP QTS/QuTS hero/QuTScloud command injection	9.9	9.7	$2k-$5k	$0-$1k	Not Defined	Official Fix	0.00043	0.28	CVE-2024-32766
14	Apple iTunes Local Privilege Escalation	5.3	5.1	$2k-$5k	$1k-$2k	Not Defined	Official Fix	0.00043	0.17	CVE-2022-48611
15	Vesystem Cloud Desktop fileupload.php unrestricted upload	6.3	5.7	$1k-$2k	$0-$1k	Proof-of-Concept	Not Defined	0.00045	0.27	CVE-2024-3803
16	Cisco ASA/Firepower Threat Defense Legacy Capability code injection	5.1	5.0	$5k-$10k	$1k-$2k	Not Defined	Official Fix	0.00128	0.06	CVE-2024-20359
17	Ruby Regex Search heap-based overflow	3.5	3.4	$0-$1k	$0-$1k	Not Defined	Official Fix	0.00000	0.06	CVE-2024-27282
18	Linux Kernel aio null pointer dereference	5.7	5.5	$5k-$10k	$1k-$2k	Not Defined	Official Fix	0.00044	0.17	CVE-2023-52646
19	FFmpeg af_stereowiden.c buffer overflow	6.3	6.3	$1k-$2k	$2k-$5k	Not Defined	Not Defined	0.00043	0.28	CVE-2023-51794
20	Vesystem Cloud Desktop fileupload2.php unrestricted upload	6.3	5.7	$1k-$2k	$0-$1k	Proof-of-Concept	Not Defined	0.00045	0.33	CVE-2024-3804

IOC - Indicator of Compromise (32)

These indicators of compromise highlight associated network ranges which are known to be part of research and attack activities.

ID	IP range	Actor	Type	Confidence
1	2.57.122.0/24	Mirai	predictive	High
2	36.230.4.0/24	Mirai	predictive	High
3	45.134.225.0/24	Mirai	predictive	High
4	45.141.215.0/24	RedLine Stealer	predictive	High
5	XX.XXX.XX.X/XX	Xxxxxx Xxxxxx	predictive	High
6	XX.XXX.X.X/XX	Xxxxxx	predictive	High
7	XX.XX.XXX.X/XX	Xxxxxxxx	predictive	High
8	XX.XX.XXX.X/XX	Xxxxx	predictive	High
9	XXX.XXX.XXX.X/XX	Xxxxxxxx	predictive	High
10	XXX.XXX.X.X/XX	Xxxxxxx	predictive	High
11	XXX.XXX.XXX.X/XX	Xxxxxx	predictive	High
12	XXX.XXX.XX.X/XX	Xxxxxx	predictive	High
13	XXX.XXX.XXX.X/XX	Xxxxxxxxxxxx	predictive	High
14	XXX.XX.XX.X/XX	Xxxxxxxx	predictive	High
15	XXX.XXX.XX.X/XX	Xxxxxxx Xxxxxx	predictive	High
16	XXX.XX.XXX.X/XX	Xxxxxxx Xxxxxxx	predictive	High
17	XXX.XXX.XX.X/XX	Xxxxxxx Xxxxxx	predictive	High
18	XXX.XXX.XXX.X/XX	Xxxxxxxx	predictive	High
19	XXX.XXX.XXX.X/XX	Xxxxx Xxxxxxx	predictive	High
20	XXX.XXX.XXX.X/XX	Xxxxxxxxx Xxxxxx	predictive	High
21	XXX.XXX.XX.X/XX	Xxxxxxxx	predictive	High
22	XXX.XX.XXX.X/XX	Xxxxxx	predictive	High
23	XXX.XX.XXX.X/XX	Xxxxxxx Xxxxxxx	predictive	High
24	XXX.XXX.XXX.X/XX	Xxxx	predictive	High
25	XXX.XX.XXX.X/XX	Xxxxxx Xxxxxx	predictive	High
26	XXX.XX.XX.X/XX	Xxxxxxxx	predictive	High
27	XXX.XX.XX.X/XX	Xxxxxxxx	predictive	High
28	XXX.XXX.XXX.X/XX	Xxxxxxx Xxxxxxx	predictive	High
29	XXX.XXX.XXX.X/XX	Xxxxxxxx	predictive	High
30	XXX.XXX.XXX.X/XX	Xxxxxxxxx	predictive	High
31	XXX.XXX.X.X/XX	Xxxxxxxxxx	predictive	High
32	XXX.XXX.XX.X/XX	Xxxxxx	predictive	High

TTP - Tactics, Techniques, Procedures (24)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	Class	Vulnerabilities	Access Vector	Type	Confidence
1	T1006	CAPEC-126	CWE-22, CWE-23, CWE-35	Path Traversal	predictive	High
2	T1040	CAPEC-102	CWE-319	Authentication Bypass by Capture-replay	predictive	High
3	T1055	CAPEC-10	CWE-74	Improper Neutralization of Data within XPath Expressions	predictive	High
4	T1059	CAPEC-242	CWE-94, CWE-1321	Argument Injection	predictive	High
5	T1059.007	CAPEC-209	CWE-79, CWE-80	Cross Site Scripting	predictive	High
6	TXXXX	CAPEC-122	CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	High
7	TXXXX.XXX	CAPEC-	CWE-XXX	Xxx Xx Xxxx-xxxxx Xxxxxxxx	predictive	High
8	TXXXX.XXX	CAPEC-16	CWE-XXX, CWE-XXX	Xxxx-xxxxx Xxxxxxxxxxx	predictive	High
9	TXXXX	CAPEC-136	CWE-XX, CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	High
10	TXXXX.XXX	CAPEC-178	CWE-XXX	Xxxx Xxxxxxxx	predictive	High
11	TXXXX	CAPEC-1	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxx Xxxxxx	predictive	High
12	TXXXX	CAPEC-108	CWE-XX	Xxx Xxxxxxxxx	predictive	High
13	TXXXX.XXX	CAPEC-1	CWE-XXX	Xxxxxxxx Xxxxxxxxxxxxx	predictive	High
14	TXXXX	CAPEC-102	CWE-XXX, CWE-XXX	Xxxxxxxxxxx Xxxxxxxxxx	predictive	High
15	TXXXX	CAPEC-37	CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxxxxx Xx Xxxxxxxxx Xxxxxxxxxxx	predictive	High
16	TXXXX.XXX	CAPEC-154	CWE-XXX	Xxxxxxxxxxxx	predictive	High
17	TXXXX	CAPEC-38	CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxxxx Xxxx	predictive	High
18	TXXXX.XXX	CAPEC-	CWE-XXX	Xxxxxxxx Xxxxxx Xxxx	predictive	High
19	TXXXX.XXX	CAPEC-459	CWE-XXX	Xxxxxxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	High
20	TXXXX	CAPEC-464	CWE-XXX	Xxxxxxxx Xx Xxxxxxx Xxxxxxxx Xxxxxxxxxxx Xx Xx Xxxxxxxxxxxx Xxxxx	predictive	High
21	TXXXX	CAPEC-116	CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	High
22	TXXXX	CAPEC-157	CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxxxxx Xxxxxx	predictive	High
23	TXXXX.XXX	CAPEC-	CWE-XXX	Xxx Xxxxxxxxxx Xxxxx	predictive	High
24	TXXXX.XXX	CAPEC-1	CWE-XXX	Xxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx Xxxxxxxxx	predictive	High

IOA - Indicator of Attack (126)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	Class	Indicator	Type	Confidence
1	File	/adminPage/conf/reload	predictive	High
2	File	/adminPage/conf/saveCmd	predictive	High
3	File	/adminPage/main/upload	predictive	High
4	File	/adminPage/www/addOver	predictive	High
5	File	/api/runs/search/run/	predictive	High
6	File	/CMD0/xml_modes.xml	predictive	High
7	File	/Device/Device/GetDeviceInfoList?deviceCode=&searchField=&deviceState=	predictive	High
8	File	/etc/passwd	predictive	Medium
9	File	/fftools/ffmpeg_enc.c	predictive	High
10	File	/login	predictive	Low
11	File	/Public/webuploader/0.1.5/server/fileupload.php	predictive	High
12	File	/Public/webuploader/0.1.5/server/fileupload2.php	predictive	High
13	File	/sys/kernel/notes	predictive	High
14	File	/webeditor/	predictive	Medium
15	File	add-vehicle.php	predictive	High
16	File	admin-manage-user.php	predictive	High
17	File	xxxxx-xxxxxxxx-xxxxxx.xxx	predictive	High
18	File	xx_xxxxxxxxxxxxxx.x	predictive	High
19	File	xxxxxxxxxxxxxxx.xxx	predictive	High
20	File	xxxxxxx.xxx	predictive	Medium
21	File	xxxxxxxxxxxxx.xxx	predictive	High
22	File	xxxxxxxxxxx.xxx	predictive	High
23	File	xxxxxxxxxxx.xxx	predictive	High
24	File	xxxxxxxxx.x	predictive	Medium
25	File	xxxxxxxxxxx.xxx	predictive	High
26	File	xxxxxxxx.xxx	predictive	Medium
27	File	xxxxxxxxxx-xxxx.xxx	predictive	High
28	File	xxxxx/xxx-xxxxxx.x	predictive	High
29	File	xxxxx/xxx-xx-xxx.x	predictive	High
30	File	xxx_xxx.xxxx	predictive	Medium
31	File	xxxx_xxxxxxx.xx	predictive	High
32	File	xxxxxx/xxxxxx_xxxxxx.x	predictive	High
33	File	xx_xxx.x	predictive	Medium
34	File	xxxxxxxxxxxxxx.xxx	predictive	High
35	File	xxxxxxxxx.xxx	predictive	High
36	File	xxxxxxx/xxxxxx/xxxxxxx/xxxxxx_xxxx.x	predictive	High
37	File	xxxxxxx/xxx/xxxx/xxx.x	predictive	High
38	File	xxxxxxx/xxxxx/xxxxxxx/xx_xxxxxxxxx.x	predictive	High
39	File	xxxxxxx/xxxx/xxx/xxxxxx.x	predictive	High
40	File	xxxx-xxxx.xxx	predictive	High
41	File	xx/xxxxx/xxxx-xx.x	predictive	High
42	File	xx/xxxx/xxxx.x	predictive	High
43	File	xxxxxxx.xx	predictive	Medium
44	File	xxxxx	predictive	Low
45	File	xxxxx_xxxxxx	predictive	Medium
46	File	xx/xxx/xxx_xx_xxx.x	predictive	High
47	File	xxxxxxx/xxxxx/xxxxxxxxxxxx.x	predictive	High
48	File	xxxxxxx/xxxxx/xxxxxx.x	predictive	High
49	File	xxxxx.x	predictive	Low
50	File	xxxxxx/xxx/xxxxxx.x	predictive	High
51	File	xxxxxx/xxx/xxxxx.x	predictive	High
52	File	xxxxxx/xxxx_xxxxx.x	predictive	High
53	File	xxxxxx/xxx/xxxx.x:	predictive	High
54	File	xxxxxxxxxx/xxx_xxxx_xxxxxx_xxxxxxxx.x	predictive	High
55	File	xxxxxxxxxx/xxxxxx_xxxxxx.x	predictive	High
56	File	xxxxxxxxxxx/xx_xxxxxxxxxxx.x	predictive	High
57	File	xxxxxxxxxxx/xxxx_xxxxxxx.x	predictive	High
58	File	xxxxxxxxxxx/xxx_xxxxxxxxxxxx.x	predictive	High
59	File	xxxxxxxxxxx/xxx_xxxxxxxxx.x	predictive	High
60	File	xxxxxxxxxxx/xxxxxxxx.x	predictive	High
61	File	xxxxxxxxxxx/xxxx_xxxxxxxx.x	predictive	High
62	File	xxxxxxxxxxx/x_xxxxxxx.x	predictive	High
63	File	xxxxxxxxxxx/xx_xxxxxxxxx.x	predictive	High
64	File	xxxxxxxxxxx/xx_xxxxxxxxxxxx.x	predictive	High
65	File	xxxxxxxxx/xxxxxxxx.x	predictive	High
66	File	xxxxxxxxx/xxx.x	predictive	High
67	File	xx/xxxx_xxxxx.x	predictive	High
68	File	xx/xxxxxxxx.x	predictive	High
69	File	xxx/xxx/xxx_xxxxxx.x	predictive	High
70	File	xxxx.xxx	predictive	Medium
71	File	xxx/xxxxxx.x	predictive	Medium
72	File	xxxxxxxxx.xxx	predictive	High
73	File	xxx.x	predictive	Low
74	File	xxxxx/xxx/xxxx/xxxxx-xxx-xxx.x	predictive	High
75	File	xxxxx_xxxx.x	predictive	Medium
76	File	xxxx-xxxxxxx.xxx	predictive	High
77	File	xxxx_xxxxxx.xx	predictive	High
78	File	xxxxxxxxxxxx/xxxxxxxxx.x	predictive	High
79	File	xxxxxx-xxxxx.xxx	predictive	High
80	File	xxxxxx_xxxxxxxx.xxx	predictive	High
81	File	_xxxxxxxxxx.x	predictive	High
82	Library	xxxx.xxx	predictive	Medium
83	Library	xxxxxxx/xxx/xxxx_xxx.x	predictive	High
84	Library	xxx/xxxxxxxxxxxx.x	predictive	High
85	Library	xxx/xxxx_xxxxx.x	predictive	High
86	Library	xxx/xxx_xxxx.x	predictive	High
87	Library	xxx/xxxx_xxxxx.x	predictive	High
88	Library	xxx/xxxxxx.x	predictive	Medium
89	Library	xxx/xxx_xxxxxxx.x	predictive	High
90	Library	xxx/xxxxxxxxxxx.x	predictive	High
91	Library	xxx/xxxxxxxx.x	predictive	High
92	Library	xxxxxxxx.xxx	predictive	Medium
93	Library	xxxx.x	predictive	Low
94	Library	xxxx-xxxxxx.xxx	predictive	High
95	Argument	xxxxxx	predictive	Low
96	Argument	xxxxxxxxxxxxx xxxxx xxxxxxx	predictive	High
97	Argument	xxxxx_xx	predictive	Medium
98	Argument	xxxx	predictive	Low
99	Argument	xxxxxxxxxxxxxxxx	predictive	High
100	Argument	xx-xxxxxx	predictive	Medium
101	Argument	xx_xxxx_xxx	predictive	Medium
102	Argument	xxx	predictive	Low
103	Argument	xxxxxxx	predictive	Low
104	Argument	xxxxxxx_xxxx	predictive	Medium
105	Argument	xxxx	predictive	Low
106	Argument	xxxxxxx	predictive	Low
107	Argument	xx/xxx/xxxxx	predictive	Medium
108	Argument	xxxxx	predictive	Low
109	Argument	xxx_xxxxxxx	predictive	Medium
110	Argument	xxxxx_xxx	predictive	Medium
111	Argument	xxxxxxxx	predictive	Medium
112	Argument	xxxxxxxxx	predictive	Medium
113	Argument	xxx_xxxxxx	predictive	Medium
114	Argument	xxxxxxx_xxxxx_xxxxxx	predictive	High
115	Argument	xxxxxxx	predictive	Low
116	Argument	xxxxx	predictive	Low
117	Argument	xxxxxxxxxxx	predictive	Medium
118	Argument	xxxx_xxxxxxx_xxxx	predictive	High
119	Argument	xxxx	predictive	Low
120	Argument	xxxx/xxxxxxxx	predictive	High
121	Argument	xxxx_xx	predictive	Low
122	Argument	xxxxxxxx	predictive	Medium
123	Argument	xxxxxx xxxxx	predictive	Medium
124	Argument	xxxx_xx	predictive	Low
125	Argument	x-xxxxxxxxx-xxx	predictive	High
126	Input Value	xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx	predictive	High

◂ PreviousOverviewNext ▸

Interested in the pricing of exploits?

See the underground prices here!