Novidade Analysis

IOB - Indicator of Behavior (1000)

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Lang

ar94
zh94
ru94
ja92
es82

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Country

ar94
ru94
es82
it82
pl82

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Actors

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Activities

Interest

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Type

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vendor

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Product

Tenda W15E12
MailCleaner6
Tenda i214
Tenda TX94
Kashipara Online Furniture Shopping Ecommerce Webs ...4

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vulnerabilities

#VulnerabilityBaseTemp0dayTodayExpRemEPSSCTICVE
1Apryse WebViewer PDF Document cross site scripting3.53.2$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.000450.88CVE-2024-4327
2MailCleaner Email os command injection9.89.3$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.000461.44CVE-2024-3191
3osCommerce all-products cross site scripting4.33.9$0-$5k$0-$5kProof-of-ConceptNot Defined0.000651.00CVE-2024-4348
4MailCleaner Admin Interface cross site scripting6.56.3$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.000450.48CVE-2024-3192
5SourceCodester Pisay Online E-Learning System controller.php unrestricted upload7.36.6$0-$5k$0-$5kProof-of-ConceptNot Defined0.000450.96CVE-2024-4349
6MailCleaner Admin Endpoints os command injection8.88.3$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.000460.40CVE-2024-3193
7BloomPixel Max Addons Pro for Bricks Plugin authorization6.56.4$0-$5k$0-$5kNot DefinedNot Defined0.000430.88CVE-2024-32951
8Extend Themes Teluro Plugin cross-site request forgery4.34.2$0-$5k$0-$5kNot DefinedNot Defined0.000430.00CVE-2024-33688
9Apache HTTP Server mod_lua Multipart Parser r:parsebody out-of-bounds write8.58.4$25k-$100k$5k-$25kNot DefinedOfficial Fix0.088080.00CVE-2021-44790
10Elementor ImageBox Plugin cross site scripting3.53.4$0-$5k$0-$5kNot DefinedNot Defined0.000450.68CVE-2024-3074
11Tenda i21 formQosManageDouble_auto stack-based overflow8.88.5$0-$5k$0-$5kNot DefinedNot Defined0.000450.08CVE-2024-4246
12Dell Wyse Proprietary OS Telemetry Dashboard information disclosure4.74.7$0-$5k$0-$5kNot DefinedNot Defined0.000430.52CVE-2024-28963
13Apache Parquet Parquet-MR denial of service3.53.4$0-$5k$0-$5kNot DefinedOfficial Fix0.000890.08CVE-2021-41561
14Pavex Embed Google Photos Album Plugin server-side request forgery5.65.5$0-$5k$0-$5kNot DefinedNot Defined0.000430.08CVE-2024-32775
15Foliovision FV Flowplayer Video Player Plugin server-side request forgery5.65.5$0-$5k$0-$5kNot DefinedNot Defined0.000430.00CVE-2024-32955
16Dell Repository Manager API Module improper authorization8.38.1$5k-$25k$0-$5kNot DefinedOfficial Fix0.000430.56CVE-2024-28976
17Jegstudio Financio Plugin cross-site request forgery4.34.2$0-$5k$0-$5kNot DefinedNot Defined0.000430.04CVE-2024-33690
18ThemeNcode Fan Page Widget by Plugin cross site scripting4.14.1$0-$5k$0-$5kNot DefinedNot Defined0.000430.08CVE-2024-33695
19Tenda W15E delIpMacBind formIPMacBindDel stack-based overflow8.88.0$0-$5k$0-$5kProof-of-ConceptNot Defined0.000450.04CVE-2024-4119
20AnnounceKit Plugin cross site scripting2.42.4$0-$5k$0-$5kNot DefinedNot Defined0.000450.60CVE-2024-3023

IOC - Indicator of Compromise (30)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

IDIP addressHostnameActorCampaignsIdentifiedTypeConfidence
110.0.0.1Novidade12/11/2018verifiedHigh
210.0.0.2Novidade12/11/2018verifiedHigh
310.0.0.3Novidade12/11/2018verifiedHigh
410.0.0.138Novidade12/11/2018verifiedHigh
510.1.1.1Novidade12/11/2018verifiedHigh
623.94.149.24223-94-149-242-host.colocrossing.comNovidade12/11/2018verifiedHigh
7XX.XX.XXX.XXXxxxxxxxxxxxxxxxxx.xxxXxxxxxxx12/11/2018verifiedHigh
8XX.XX.XX.XXxx-xx-xx-xx-xxxx.xxxxxxxxxxxx.xxxXxxxxxxx12/11/2018verifiedHigh
9XX.XX.XX.XXXxxx-xx-xx-xx-xxx.xx-xxxx-x.xxxxxxx.xxxxxxxxx.xxxXxxxxxxx12/11/2018verifiedMedium
10XX.XXX.XX.XXXXxxxxxxx12/11/2018verifiedHigh
11XXX.XXX.XXX.XXXxxxxxxxx.xxx.xxXxxxxxxx12/11/2018verifiedHigh
12XXX.XXX.XXX.XXXxxxxxx-xxx-xxx-xxx-xxx.xxxxxxxxxxxx.xxxXxxxxxxx12/11/2018verifiedHigh
13XXX.XXX.XX.XXXxxxxx.xx-xxx-xxx-xx.xxxXxxxxxxx12/11/2018verifiedHigh
14XXX.XXX.XX.XXXxxx-xxx-xx-xxx-xxxx.xxxxxxxxxxxx.xxxXxxxxxxx12/11/2018verifiedHigh
15XXX.XXX.XX.XX.Xxxxxxxx12/11/2018verifiedHigh
16XXX.X.X.XXXxxxxxxxxx.xxxXxxxxxxx12/11/2018verifiedHigh
17XXX.X.XXX.XXXxxxxxxx.xxxXxxxxxxx12/11/2018verifiedHigh
18XXX.X.XXX.XXXxxx-x-xxx-xxx-xxxx.xxxxxxxxxxxx.xxxXxxxxxxx12/11/2018verifiedHigh
19XXX.XXX.X.XXxxxxxxx12/11/2018verifiedHigh
20XXX.XXX.X.XXxxxxxxx12/11/2018verifiedHigh
21XXX.XXX.X.XXxxxxxxx12/11/2018verifiedHigh
22XXX.XXX.X.XXXXxxxxxxx12/11/2018verifiedHigh
23XXX.XXX.X.XXxxxxxxx12/11/2018verifiedHigh
24XXX.XXX.X.XXXXxxxxxxx12/11/2018verifiedHigh
25XXX.XXX.XX.XXxxxxxxx12/11/2018verifiedHigh
26XXX.XXX.XX.XXxxxxxxx12/11/2018verifiedHigh
27XXX.XXX.XXX.XXxxxxxxx12/11/2018verifiedHigh
28XXX.XXX.XXX.XXXXxxxxxxx12/11/2018verifiedHigh
29XXX.XX.XXX.XXxxx-xx-xxx-xx-xxxx.xxxxxxxxxxxx.xxxXxxxxxxx12/11/2018verifiedHigh
30XXX.XX.XXX.XXXxxxxxxxxxx.xxxXxxxxxxx12/11/2018verifiedHigh

TTP - Tactics, Techniques, Procedures (10)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IOA - Indicator of Attack (69)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDClassIndicatorTypeConfidence
1File/catalog/all-productspredictiveHigh
2File/changePasswordpredictiveHigh
3File/goform/addIpMacBindpredictiveHigh
4File/goform/AdvSetMacMtuWanpredictiveHigh
5File/goform/DelDhcpRulepredictiveHigh
6File/goform/delIpMacBindpredictiveHigh
7File/goform/DelPortMappingpredictiveHigh
8File/goform/modifyDhcpRulepredictiveHigh
9File/goform/modifyIpMacBindpredictiveHigh
10File/xxxxxx/xxxxxxxxxxxxpredictiveHigh
11File/xxxxxx/xxxxxxxxxxxxpredictiveHigh
12File/xxxxxx/xxxxxxxxxxpredictiveHigh
13File/xxxxxx/xxxxxxxxxpredictiveHigh
14File/xxxxxx/xxxxxxxxxxxxxxxxpredictiveHigh
15File/xxxxxx/xxxxxxxxxxxxxxpredictiveHigh
16File/xxxxxx/xxxxxxxxxxxxxxxxxxpredictiveHigh
17File/xxxxxx/xxxxxxxxxxxxxxpredictiveHigh
18File/xxxxxx/xxxxxxxxxxxxxpredictiveHigh
19File/xxxxxx/xxxxxxxxxxxxxxxxxxxpredictiveHigh
20File/xxxxxx/xxxxxxxxxxxpredictiveHigh
21File/xxxxxx/xxxxxxxxxxxxpredictiveHigh
22File/xxxxxx/xxxxxxxxxx.xxxpredictiveHigh
23File/xxxxxxxxxxx.xxx/xxxxxxxxpredictiveHigh
24File/xxxx/xxxxxxx xxxxxx/xxx/xxx_xxxx_xxxxxx.xxxpredictiveHigh
25File/xxx/xxxxxxxxxxx.xxxpredictiveHigh
26Filexxxxx/xxxxxxx/xxxxxxxxxxxxx.xxpredictiveHigh
27Filexxxxxxxxxxxx.xxxpredictiveHigh
28Filexxxxxxxxxxxxxxxxxxx.xxxpredictiveHigh
29Filexx/xxxxxx/xxxxxxxxxxpredictiveHigh
30Filexxxxx.xxxpredictiveMedium
31Filexxxxxxxx.xxxpredictiveMedium
32Filexxxxxxxx.xxxpredictiveMedium
33Filexxxxxx.xxxpredictiveMedium
34Argumentxxxxx_xxxxxpredictiveMedium
35ArgumentxxxxxxxxxxxxxpredictiveHigh
36ArgumentxxxpredictiveLow
37ArgumentxxxxxxxxxpredictiveMedium
38ArgumentxxxxxxxxxxxxpredictiveMedium
39ArgumentxxxxxxxxxxpredictiveMedium
40ArgumentxxxxxxxpredictiveLow
41ArgumentxxxxxxxxxxxxxxxxpredictiveHigh
42ArgumentxxxxpredictiveLow
43ArgumentxxxxxxxxxxxxxxxxxxxxxxpredictiveHigh
44Argumentxx/xxxxpredictiveLow
45ArgumentxxxxxxxxxxpredictiveMedium
46ArgumentxxpredictiveLow
47ArgumentxxxxxxxxxxxxxxpredictiveHigh
48ArgumentxxxxxxxxxxxxxpredictiveHigh
49Argumentxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxpredictiveHigh
50Argumentxxxx xxxxxxpredictiveMedium
51ArgumentxxxxpredictiveLow
52ArgumentxxxxxxxxxxpredictiveMedium
53ArgumentxxxxxxxxxxxxpredictiveMedium
54ArgumentxxxxpredictiveLow
55ArgumentxxxxxxxxxxxxxxxxpredictiveHigh
56ArgumentxxxpredictiveLow
57ArgumentxxxxxxpredictiveLow
58ArgumentxxxxxxxxpredictiveMedium
59ArgumentxxxxxxxxxxxxxxxxxxpredictiveHigh
60ArgumentxxxxxxxxxxpredictiveMedium
61ArgumentxxxxxxxxpredictiveMedium
62Argumentxxxxxxxxxx/xxxxxxxx/xxxxxxx/xxxxxxxxxxpredictiveHigh
63ArgumentxxxxxxxxxpredictiveMedium
64ArgumentxxxxxxxxxxxxxxxxpredictiveHigh
65ArgumentxxxxpredictiveLow
66ArgumentxxxxxxxxxxpredictiveMedium
67ArgumentxxxxxxxxxpredictiveMedium
68Argumentxxxxxx/xxxxxxxx/xxxxxxxxx/xxx/xxxxxxxxxxx/xxxxxxxxxxpredictiveHigh
69Argumentxxxx/xxxxx/xxx/xxxx/xxxxxx/xxxxxxpredictiveHigh

References (2)

The following list contains external sources which discuss the actor and the associated activities:

Do you want to use VulDB in your project?

Use the official API to access entries easily!