Introducing IP Intelligence features to VulnCheck Initial Access Intelligence

The IP Intelligence data in VulnCheck Initial Access Intelligence currently includes two things:

  1. Potentially vulnerable systems (CVE detections of emerging Initial Access vulnerabilities)
  2. Command & Control (C2) detections (attacker infrastructure)

Every 24 hours, we're generating offline backups for IP Intelligence in the following increments:

The offline backups include both potentially vulnerable systems to recent initial access vulnerabilities, as well as C2 detections.

Besides offline backups, we also have live lookup APIs for the IP Intelligence, which may be accessed in ways similar to the following (real) examples:

Additional documentation may be found at: https://docs.vulncheck.com/initial-access-intelligence/ip-intel

Recent Initial Access activity

ZoneMinder Snapshot Command Injection was added on Dec, 19 and is found in 1 product.

View more detail on CVE-2023-26035

WAGO License Command Injection was added on Dec, 19 and is found in 7 products.

View more detail on CVE-2023-1698

Apache OFBiz XMLRPC Java Deserialization was added on Dec, 18 and is found in 1 product.

View more detail on CVE-2023-49070

ASUS Router VPNUpload Configuration Change was added on Dec, 17 and is found in 3 products.

View more detail on CVE-2018-5999

ASUS Router Session Hijack and Configuration / Credential Download was added on Dec, 14 and is found in 3 products.

View more detail on CVE-2017-15653

Apache Pulsar Security Advisories

Apache Pulsar security advisories are official notifications released by the open source Apache Pulsar project to address security vulnerabilities and updates in the open source Apache Pulsar project. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems.

Browse the apache-pulsar index

AMI Security Advisories

AMI security advisories are official notifications released by the AMI Product Security Incident Response Team (PSIRT) to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems.

Browse the ami index

OpenSSH Security Advisories

OpenSSH security advisories are official notifications released by the OpenSSH security team to address security vulnerabilities and updates in the open source OpenSSH project. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems.

Browse the openssh index

Asterisk Security Advisories

Asterisk security advisories are official notifications released by the open source Asterisk project to address security vulnerabilities and updates in the open source Asterisk project. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems.

Browse the asterisk index

Apache Flink Security Updates

Apache Flink security updates are official notifications released by the open source Apache Flink project to address security vulnerabilities and updates in the open source Apache Flink project. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems.

Browse the apache-flink index

Apache Subversion Security Advisories

Apache Subversion security advisories are official notifications released by the open source Apache Subversion project to address security vulnerabilities and updates in the open source Apache Subversion project. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems.

Browse the apache-subversion index

Apache JSPWiki CVEs

Apache JSPWiki CVEs are official notifications released by the open source Apache JSPWiki project to address security vulnerabilities and updates in the open source Apache OpenMeetings project. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems.

Browse the apache-jspwiki index

Apache OpenMeetings Security Vulnerabilities

Apache OpenMeetings security vulnerabilities are official notifications released by the open source Apache OpenMeetings project to address security vulnerabilities and updates in the open source Apache OpenMeetings project. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems.

Browse the apache-openmeetings index

Apache Spark Known Security Issues

Apache Spark cves are official notifications released by the open source Apache Spark project to address security vulnerabilities and updates in the open source Apache Spark project. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems.

Browse the apache-spark index

Apache Superset CVEs

Apache Superset cves are official notifications released by the open source Apache Superset project to address security vulnerabilities and updates in the open source Apache Superset project. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems.

Browse the apache-superset index

Apache Logging Services Known Vulnerabilities

Apache Logging Services known vulnerabilities are official notifications released by the open source Apache Logging Services project to address security vulnerabilities and updates in the open source Apache Logging Services project. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems.

Browse the apache-loggingservices index

Apache Guacamole Security Reports

Apache Guacamole security reports are official notifications released by the open source Apache Guacamole project to address security vulnerabilities and updates in the open source Apache Guacamole project. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems.

Browse the apache-guacamole index

Apache ActiveMQ Security Advisories

Apache ActiveMQ security advisories are official notifications released by the open source Apache ActiveMQ project to address security vulnerabilities and updates in the open source Apache ActiveMQ project. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems.

Browse the apache-activemq index

Apache Shiro Vulnerability Reports

Apache Shiro vulnerability reports are official notifications released by the open source Apache Shiro project to address security vulnerabilities and updates in the open source Apache Shiro project. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems.

Browse the apache-shiro index

Apache OpenOffice Security Bulletins

Apache OpenOffice security bulletins are official notifications released by the open source Apache OpenOffice project to address security vulnerabilities and updates in the open source Apache OpenOffice project. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems.

Browse the apache-openoffice index

Apache OFBiz Security Vulnerabilities

Apache OFBiz security vulnerabilities are official notifications released by the open source Apache OFBiz project to address security vulnerabilities and updates in the open source Apache OFBiz project. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems.

Browse the apache-ofbiz index

Apache Commons Known Security Vulnerabilities

Apache Commons security vulnerabilities are official notifications released by the open source Apache Commons project to address security vulnerabilities and updates in the open source Apache Commons project. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems.

Browse the apache-commons index