Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET ACTIVEX Oracle Document Capture File Overwrite or Buffer Overflow Attempt rev 6 2024-04-09
suricata ET WEB_SPECIFIC_APPS Joomla jfeedback Component controller parameter Local File Inclusion Attempt rev 5 2024-04-09
suricata ET ACTIVEX Ubisoft CoGSManager ActiveX Initialize method Buffer Overflow Vulnerability rev 4 2024-04-09
suricata ET WEB_SPECIFIC_APPS Joomla Component com_jphone Local File Inclusion Attempt rev 5 2024-04-09
suricata ET WEB_CLIENT Hex Obfuscation of substr %u UTF-8 Encoding rev 5 2024-04-09
suricata ET SHELLCODE Common %u0a%u0a%u0a%u0a UTF-8 Heap Spray String rev 5 2024-04-09
suricata ET MALWARE W32/NetShare User-Agent rev 5 2024-04-09
suricata ET SHELLCODE Common %u0c0c%u0c0c UTF-16 Heap Spray String rev 5 2024-04-09
suricata ET WEB_SPECIFIC_APPS Joomla NoticeBoard Component controller Parameter Local File Inclusion Attempt rev 7 2024-04-09
suricata ET WEB_SPECIFIC_APPS Joomla XGallery com_xgallery Component Local File Inclusion Attempt rev 6 2024-04-09
suricata ET WEB_SPECIFIC_APPS Horde type Parameter Local File Inclusion Attempt rev 6 2024-04-09
suricata ET SHELLCODE Double BackSlash Hex Obfuscated JavaScript NOP SLED rev 4 2024-04-09
suricata ET MALWARE Win32/TrojanDownloader.Chekafe.D User-Agent my_check_data On Off HTTP Port rev 4 2024-04-09
suricata ET ACTIVEX Avaya CallPilot Unified Messaging ActiveX InstallFrom Method Access Attempt rev 6 2024-04-09
suricata ET WEB_SPECIFIC_APPS PHP-Fusion maincore.php folder_level Parameter Local File Inclusion Attempt rev 5 2024-04-09
suricata ET EXPLOIT_KIT phoenix exploit kit - admin login page detected rev 4 2024-04-09
suricata ET WEB_SPECIFIC_APPS Dokeos and Chamilo open_document.php file Parameter File Disclosure Attempt rev 6 2024-04-09
suricata ET WEB_SPECIFIC_APPS ClanSphere CurrentFolder Parameter Local File Inclusion Attempt rev 5 2024-04-09
suricata ET ACTIVEX TeeChart Professional ActiveX Control integer overflow Vulnerability 5 rev 4 2024-04-09
suricata ET SHELLCODE Possible Encoded %90 NOP SLED rev 6 2024-04-09
suricata ET ACTIVEX Ubisoft CoGSManager ActiveX RunCore method Buffer Overflow Vulnerability rev 4 2024-04-09
suricata ET WEB_SPECIFIC_APPS MantisBT db_type Parameter Local File Inclusion Attempt rev 6 2024-04-09
suricata ET WEB_SERVER Local Website Infected By Gootkit rev 6 2024-04-09
suricata ET WEB_SPECIFIC_APPS WeBid active_auctions.php lan Parameter Local File inclusion Attempt rev 6 2024-04-09
suricata ET SCADA ICONICS WebHMI ActiveX Stack Overflow rev 6 2024-04-09
suricata ET WEB_SPECIFIC_APPS MaticMarket modulename Parameter Local File Inclusion Attempt-8 rev 7 2024-04-09
suricata ET WEB_SPECIFIC_APPS bug_actiongroup_ext_page.php script Local File Inclusion Attempt rev 5 2024-04-09
suricata ET WEB_CLIENT Possible Adobe Acrobat and Reader Pushstring Memory Corruption Attempt rev 4 2024-04-09
suricata ET ACTIVEX Softek Barcode Reader Toolkit ActiveX Control Buffer Overflow Attempt rev 5 2024-04-09
suricata ET WEB_SPECIFIC_APPS Abtp Portal Project skel_null.php Local File Inclusion Attempt rev 5 2024-04-09
suricata ET ACTIVEX Gesytec ElonFmt ActiveX Component Format String Function Call rev 4 2024-04-09
suricata ET WEB_CLIENT Hex Obfuscation of Script Tag %u UTF-8 Encoding rev 5 2024-04-09
suricata ET WEB_CLIENT Mozilla Firefox mChannel Object Dangling Pointer Use-After-Free Memory Corruption Attempt rev 3 2024-04-09
suricata ET WEB_SPECIFIC_APPS Google Urchin session.cgi Local File Inclusion Attempt rev 5 2024-04-09
suricata ET WEB_SPECIFIC_APPS Joomla Frontend-User-Access controller Parameter Local File Inclusion Attempt rev 6 2024-04-09
suricata ET WEB_CLIENT Adobe Acrobat newfunction Remote Code Execution Attempt rev 6 2024-04-09
suricata ET ADWARE_PUP UBar Trojan/Adware Checkin 3 rev 6 2024-04-09
suricata ET ACTIVEX AVTECH Software ActiveX Login Method Buffer Oveflow Attempt rev 5 2024-04-09
suricata ET WEB_SPECIFIC_APPS axdcms aXconf Parameter Local File Inclusion Attempt rev 6 2024-04-09
suricata ET MALWARE W32/Hupigon.B User Agent TSDownload rev 4 2024-04-09