Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET WEB_SPECIFIC_APPS Joomla Jimtawl Component task Parameter Local File Inclusion Attempt rev 5 2024-04-09
suricata ET WEB_SPECIFIC_APPS Zen Cart loader_file Parameter Local File Inclusion Attempt rev 5 2024-04-09
suricata ET SCAN Havij SQL Injection Tool User-Agent Outbound rev 4 2024-04-09
suricata ET SHELLCODE Possible UTF-8 %u90 NOP SLED rev 5 2024-04-09
suricata ET MALWARE DonBot Checkin rev 7 2024-04-09
suricata ET WEB_CLIENT Adobe Shockwave Director tSAC Chunk memory corruption Attempt rev 8 2024-04-09
suricata ET WEB_SPECIFIC_APPS Open Web Analytics owa_action Parameter Local File inclusion Attempt rev 6 2024-04-09
suricata ET WEB_SPECIFIC_APPS Tiki Wiki CMS Groupware language Parameter Local File Inclusion Attempt rev 7 2024-04-09
suricata ET WEB_CLIENT Likely Malicious PDF Containing StrReverse rev 5 2024-04-09
suricata ET ACTIVEX Cisco AnyConnect VPN Secure Mobility Client Cisco.AnyConnect.VPNWeb.1 Arbitrary Program Execution Attempt rev 5 2024-04-09
suricata ET SHELLCODE Common %u0c%u0c%u0c%u0c UTF-8 Heap Spray String rev 5 2024-04-09
suricata ET WEB_SPECIFIC_APPS iGaming CMS loadplugin.php load Parameter Local File inclusion Attempt rev 5 2024-04-09
suricata ET SHELLCODE Unescape Variable Unicode Shellcode rev 3 2024-04-09
suricata ET ACTIVEX IDrive Online Backup ActiveX control SaveToFile Insecure Method rev 4 2024-04-09
suricata ET ACTIVEX Magneto ICMP ActiveX ICMPSendEchoRequest Remote Code Execution Attempt rev 3 2024-04-09
suricata ET WEB_SPECIFIC_APPS Open Web Analytics owa_do Parameter Local File inclusion Attempt rev 6 2024-04-09
suricata ET ADWARE_PUP UBar Trojan/Adware Checkin 1 rev 6 2024-04-09
suricata ET WEB_CLIENT FakeAV scanner page encountered Initializing Virus Protection System rev 5 2024-04-09
suricata ET WEB_SPECIFIC_APPS Simplis CMS download_file Parameter Local File Inclusion Attempt rev 5 2024-04-09
suricata ET SHELLCODE Possible %u41%u41%u41%u41 UTF-8 Heap Spray Attempt rev 4 2024-04-09
suricata ET WEB_SPECIFIC_APPS Joomla JGrid Component File Inclusion Attempt rev 5 2024-04-09
suricata ET WEB_SPECIFIC_APPS The Uploader download_launch.php Remote File Disclosure Attempt rev 6 2024-04-09
suricata ET SHELLCODE Possible 0x0c0c0c0c Heap Spray Attempt rev 4 2024-04-09
suricata ET SHELLCODE Possible 0x0d0d0d0d Heap Spray Attempt rev 4 2024-04-09
suricata ET ACTIVEX Chilkat Crypt ActiveX Control SaveDecrypted Insecure Method Vulnerability rev 5 2024-04-09
suricata ET WEB_SPECIFIC_APPS BaconMap updatelist.php filepath Local File Inclusion Attempt rev 5 2024-04-09
suricata ET WEB_SPECIFIC_APPS Joomla Component com_jmsfileseller view Parameter Local File Inclusion Attempt rev 4 2024-04-09
suricata ET WEB_SPECIFIC_APPS MaticMarket modulename Parameter Local File Inclusion Attempt-8 rev 7 2024-04-09
suricata ET WEB_SPECIFIC_APPS Dokeos and Chamilo open_document.php file Parameter File Disclosure Attempt rev 6 2024-04-09
suricata ET WEB_SPECIFIC_APPS Automne upload-controler.php Arbitrary File Upload Vulnerability rev 5 2024-04-09
suricata ET WEB_CLIENT Possible Adobe Acrobat and Reader Pushstring Memory Corruption Attempt rev 4 2024-04-09
suricata ET WEB_CLIENT Hex Obfuscation of parseInt % Encoding rev 5 2024-04-09
suricata ET WEB_SPECIFIC_APPS bug_actiongroup_ext_page.php script Local File Inclusion Attempt rev 5 2024-04-09
suricata ET WEB_CLIENT Adobe Audition Malformed Session File Buffer Overflow Attempt rev 3 2024-04-09
suricata ET WEB_SPECIFIC_APPS Horde type Parameter Local File Inclusion Attempt rev 6 2024-04-09
suricata ET WEB_SPECIFIC_APPS PHP-Fusion maincore.php folder_level Parameter Local File Inclusion Attempt rev 5 2024-04-09
suricata ET WEB_SPECIFIC_APPS People Joomla Component controller Parameter Local File Inclusion Vulnerability rev 4 2024-04-09
suricata ET ACTIVEX TeeChart Professional ActiveX Control integer overflow Vulnerability 5 rev 4 2024-04-09
suricata ET USER_AGENTS Suspicious User-Agent SimpleClient 1.0 rev 6 2024-04-09
suricata ET WEB_CLIENT Hex Obfuscation of Script Tag % Encoding rev 5 2024-04-09