Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET WEB_SPECIFIC_APPS FuseTalk SQL Injection Attempt -- autherror.cfm errorcode INSERT rev 7 2010-11-08
snort ET WEB_SPECIFIC_APPS Fixit iDMS Pro Image Gallery SQL Injection Attempt -- filelist.asp show_id INSERT rev 8 2010-11-08
snort ET WEB_SPECIFIC_APPS GDL gdl.php node Parameter SQL Injection rev 4 2010-11-08
snort ET WEB_SPECIFIC_APPS Fuzzylime Forum SQL Injection Attempt -- low.php topic UPDATE rev 6 2010-11-08
snort ET WEB_SPECIFIC_APPS Fixit iDMS Pro Image Gallery SQL Injection Attempt -- showfile.asp fid INSERT rev 7 2010-11-08
snort ET WEB_SPECIFIC_APPS Fullaspsite ASP Hosting Site SQL Injection Attempt -- listmain.asp cat INSERT rev 6 2010-11-08
snort ET WEB_SPECIFIC_APPS Flash Quiz answers.php quiz Parameter SQL Injection rev 4 2010-11-08
snort ET WEB_SPECIFIC_APPS Forum Livre SQL Injection Attempt -- info_user.asp user UPDATE rev 6 2010-11-08
snort ET WEB_SPECIFIC_APPS Flash Quiz num_questions.php quiz Parameter SQL Injection rev 4 2010-11-08
snort ET WEB_SPECIFIC_APPS FipsSHOP SQL Injection Attempt -- index.asp cat DELETE rev 7 2010-11-08
snort ET WEB_SPECIFIC_APPS Fixit iDMS Pro Image Gallery SQL Injection Attempt -- filelist.asp show_id SELECT rev 8 2010-11-08
snort ET WEB_SPECIFIC_APPS Fixit iDMS Pro Image Gallery SQL Injection Attempt -- filelist.asp show_id DELETE rev 8 2010-11-08
snort ET WEB_SPECIFIC_APPS Fullaspsite Asp Hosting Sitesi SQL Injection Attempt -- windows.asp kategori_id UNION SELECT rev 6 2010-11-08
snort ET WEB_SPECIFIC_APPS Gazi Download Portal SQL Injection Attempt -- down_indir.asp id UNION SELECT rev 7 2010-11-08
snort ET WEB_SPECIFIC_APPS Fuzzylime Forum SQL Injection Attempt -- low.php topic INSERT rev 6 2010-11-08
snort ET WEB_SPECIFIC_APPS Future Internet SQL Injection Attempt -- index.cfm langId DELETE rev 6 2010-11-08
snort ET WEB_SPECIFIC_APPS FipsSHOP SQL Injection Attempt -- index.asp cat INSERT rev 7 2010-11-08
snort ET WEB_SPECIFIC_APPS FipsSHOP SQL Injection Attempt -- index.asp did INSERT rev 7 2010-11-08
snort ET WEB_SPECIFIC_APPS GaziYapBoz Game Portal SQL Injection Attempt -- kategori.asp kategori SELECT rev 6 2010-11-08
snort ET WEB_SPECIFIC_APPS FipsSHOP SQL Injection Attempt -- index.asp did DELETE rev 7 2010-11-08
snort ET WEB_SPECIFIC_APPS Fullaspsite Asp Hosting Sitesi SQL Injection Attempt -- windows.asp kategori_id UPDATE rev 6 2010-11-08
snort ET WEB_SPECIFIC_APPS Fantastic News SQL Injection Attempt -- news.php id UPDATE rev 6 2010-11-05
snort ET WEB_SPECIFIC_APPS Fantastic News SQL Injection Attempt -- news.php id UNION SELECT rev 6 2010-11-05
snort ET WEB_SPECIFIC_APPS Fantastic News SQL Injection Attempt -- news.php id INSERT rev 6 2010-11-05
snort ET WEB_SPECIFIC_APPS Fantastic News SQL Injection Attempt -- news.php id DELETE rev 6 2010-11-05
snort ET WEB_SPECIFIC_APPS Fantastic News SQL Injection Attempt -- news.php id SELECT rev 6 2010-11-05
snort ET EXPLOIT Pwdump3e Session Established Reg-Entry port 139 rev 9 2010-11-04
snort ET SCAN Grabber.py Web Scan Detected rev 5 2010-11-04
snort ET WEB_SPECIFIC_APPS EzHRS HR Assist SQL Injection Attempt -- vdateUsr.asp UPDATE rev 6 2010-11-04
snort ET WEB_SPECIFIC_APPS F5 Data Manager ViewSatReport.do Local File Inclusion Attempt rev 3 2010-11-04
snort ET EXPLOIT Pwdump3e Session Established Reg-Entry port 445 rev 9 2010-11-04
snort ET WEB_CLIENT Adobe Acrobat newfunction Remote Code Execution Attempt rev 2 2010-11-04
snort ET WEB_SPECIFIC_APPS Ezboxx Portal System Beta SQL Injection Attempt -- ShowAppendix.asp iid DELETE rev 6 2010-11-04
snort ET ATTACK_RESPONSE Cisco TclShell TFTP Download rev 3 2010-11-04
snort ET WEB_CLIENT Possible Adobe Acrobat Reader Newclass Invalid Pointer Remote Code Execution Attempt rev 2 2010-11-04
snort ET WEB_SPECIFIC_APPS Expinion.net iNews SQL Injection Attempt -- articles.asp ex INSERT rev 7 2010-11-04
snort ET ATTACK_RESPONSE r57 phpshell footer detected rev 8 2010-11-04
snort ET EXPLOIT SQL sp_configure attempt rev 3 2010-11-04
snort ET SCAN Amap UDP Service Scan Detected rev 5 2010-11-04
snort ET ATTACK_RESPONSE FTP inaccessible directory access COM2 rev 9 2010-11-04