Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET WEB_SPECIFIC_APPS DynPage dynpage_load.php file Parameter Local File Inclusion Attempt rev 5 2024-04-09
suricata ET WEB_SPECIFIC_APPS WordPress PHP Speedy Plugin page Parameter Local File Inclusion Attempt rev 5 2024-04-09
suricata ET ACTIVEX CygniCon CyViewer ActiveX Control SaveData Insecure Method Vulnerability rev 4 2024-04-09
suricata ET WEB_SERVER Successful DD-WRT Information Disclosure rev 7 2024-04-09
suricata ET SHELLCODE Possible 0x0b0b0b0b Heap Spray Attempt rev 3 2024-04-09
suricata ET SHELLCODE Javascript Split String Unicode Heap Spray Attempt rev 3 2024-04-09
suricata ET WEB_SPECIFIC_APPS Horde type Parameter Local File Inclusion Attempt rev 6 2024-04-09
suricata ET WEB_CLIENT Hex Obfuscation of eval % Encoding rev 5 2024-04-09
suricata ET WEB_CLIENT Hex Obfuscation of parseInt % Encoding rev 5 2024-04-09
suricata ET SHELLCODE Double BackSlash Hex Obfuscated JavaScript Heap Spray 41414141 rev 4 2024-04-09
suricata ET WEB_SERVER Gootkit Website Infection Receiving FTP Credentials from Control Server rev 8 2024-04-09
suricata ET WEB_CLIENT Adobe Flash Player Button Remote Code Execution Attempt rev 5 2024-04-09
suricata ET WEB_SPECIFIC_APPS TFTgallery adminlangfile Parameter Local File inclusion Attempt rev 5 2024-04-09
suricata ET WEB_SPECIFIC_APPS Dokeos and Chamilo open_document.php file Parameter File Disclosure Attempt rev 6 2024-04-09
suricata ET WEB_CLIENT Hex Obfuscation of parseInt %u UTF-8 Encoding rev 5 2024-04-09
suricata ET MALWARE W32/NetShare User-Agent rev 5 2024-04-09
suricata ET WEB_SPECIFIC_APPS TinyWebGallery install_path parameter Local File Inclusion Attempt rev 5 2024-04-09
suricata ET WEB_SPECIFIC_APPS MaticMarket modulename Parameter Local File Inclusion Attempt-1 rev 6 2024-04-09
suricata ET WEB_CLIENT Hex Obfuscation of Script Tag % Encoding rev 5 2024-04-09
suricata ET WEB_CLIENT Adobe Acrobat Util.printf Buffer Overflow Attempt rev 4 2024-04-09
suricata ET SCAN Possible Fast-Track Tool Spidering User-Agent Detected rev 5 2024-04-09
suricata ET WEB_SPECIFIC_APPS OrangeHRM path Parameter Local File Inclusion Attempt rev 5 2024-04-09
suricata ET WEB_SPECIFIC_APPS MaticMarket modulename Parameter Local File Inclusion Attempt-6 rev 6 2024-04-09
suricata ET WEB_SPECIFIC_APPS People Joomla Component controller Parameter Local File Inclusion Vulnerability rev 4 2024-04-09
suricata ET WEB_SPECIFIC_APPS PHP-Fusion maincore.php folder_level Parameter Local File Inclusion Attempt rev 5 2024-04-09
suricata ET ACTIVEX AVTECH Software ActiveX Snapshot Method Buffer Overflow Attempt rev 5 2024-04-09
suricata ET WEB_SPECIFIC_APPS MaticMarket modulename Parameter Local File Inclusion Attempt-7 rev 6 2024-04-09
suricata ET WEB_SPECIFIC_APPS Automne upload-controler.php Arbitrary File Upload Vulnerability rev 5 2024-04-09
suricata ET WEB_CLIENT Adobe Audition Malformed Session File Buffer Overflow Attempt rev 3 2024-04-09
suricata ET WEB_SPECIFIC_APPS axdcms aXconf Parameter Local File Inclusion Attempt rev 6 2024-04-09
suricata ET WEB_SPECIFIC_APPS Joomla JGrid Component File Inclusion Attempt rev 5 2024-04-09
suricata ET SHELLCODE Possible %u41%u41%u41%u41 UTF-8 Heap Spray Attempt rev 4 2024-04-09
suricata ET WEB_SPECIFIC_APPS TinyWebGallery workaround_dir parameter Local File Inclusion Attempt rev 5 2024-04-09
suricata ET SHELLCODE Possible 0x0d0d0d0d Heap Spray Attempt rev 4 2024-04-09
suricata ET WEB_SPECIFIC_APPS WordPress UnGallery pic Parameter Local File Inclusion Attempt rev 5 2024-04-09
suricata ET WEB_SPECIFIC_APPS Simplis CMS download_file Parameter Local File Inclusion Attempt rev 5 2024-04-09
suricata ET WEB_CLIENT Hex Obfuscation of replace Javascript Function %u UTF-16 Encoding rev 6 2024-04-09
suricata ET SHELLCODE Possible Unescape Encoded Content With Split String Obfuscation rev 5 2024-04-09
suricata ET SHELLCODE Possible 0x0c0c0c0c Heap Spray Attempt rev 4 2024-04-09
suricata ET ACTIVEX AVTECH Software ActiveX Login Method Buffer Oveflow Attempt rev 5 2024-04-09