Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET ACTIVEX Possible Symantec AppStream LaunchObj ActiveX Control Arbitrary File Download and Execute rev 4 2024-04-08
suricata ET WEB_SPECIFIC_APPS MindTouch Deki Wiki link.php Local File Inclusion Attempt rev 5 2024-04-08
suricata ET EXPLOIT_KIT DRIVEBY EgyPack Exploit Kit Cookie Set rev 7 2024-04-08
suricata ET WEB_SPECIFIC_APPS WordPress Simple Download Button Shortcode Plugin Arbitrary File Disclosure Vulnerability rev 6 2024-04-08
suricata ET INFO EXE - OSX Executable Download - Multi Arch w/PowerPC rev 5 2024-04-08
suricata ET MALWARE Win32.Datamaikon Checkin myAgent rev 6 2024-04-08
suricata ET ACTIVEX EdrawSoft Office Viewer Component ActiveX FtpUploadFile Stack Buffer Overflow rev 4 2024-04-08
suricata ET WEB_SPECIFIC_APPS Joomla com_rule controller Local File Inclusion Attempt rev 5 2024-04-08
suricata ET ACTIVEX EdrawSoft Office Viewer Component ActiveX FtpUploadFile Format String Function Call Attempt rev 4 2024-04-08
suricata ET WEB_SPECIFIC_APPS SourceBans ajaxargs Parameter Local File Inclusion Attempt rev 5 2024-04-08
suricata ET WEB_SPECIFIC_APPS Joomla com_mailchimpccnewsletter controller parameter Local File Inclusion Attempt rev 5 2024-04-08
suricata ET INFO Outdated Flash Version M1 rev 128 2024-04-08
suricata ET ACTIVEX Possible Edraw Diagram Component 5 ActiveX LicenseName Access Potential buffer overflow DOS 2 rev 4 2024-04-08
suricata ET WEB_SPECIFIC_APPS Joomla com_obsuggest controller parameter Local File Inclusion Attempt rev 4 2024-04-08
suricata ET WEB_SPECIFIC_APPS Joomla com_mscomment controller parameter Local File Inclusion Attempt rev 7 2024-04-08
suricata ET INFO EXE - OSX Executable Download - Intel Arch rev 5 2024-04-08
suricata ET WEB_CLIENT PDF With Embedded U3D rev 4 2024-04-08
suricata ET MALWARE W32/Renos.Downloader User Agent zeroup rev 4 2024-04-08
suricata ET WEB_SPECIFIC_APPS WordPress Thinkun Remind Plugin dirPath Remote File Disclosure Vulnerability rev 5 2024-04-08
suricata ET MALWARE Kelihos/Hlux GET jucheck.exe from CnC rev 6 2024-04-08
suricata ET ACTIVEX Possible IBM Lotus iNotes Upload Module possible ActiveX Control Attachment_Times Method Access Buffer Overflow Attempt rev 6 2024-04-08
suricata ET WEB_SPECIFIC_APPS Joomla com_wisroyq controller parameter Local File Inclusion Attempt rev 4 2024-04-08
suricata ET WEB_SPECIFIC_APPS Joomla com_visa controller Local File Inclusion Attempt rev 5 2024-04-08
suricata ET WEB_SPECIFIC_APPS 1024 CMS filename Parameter Local File Inclusion Attempt rev 5 2024-04-08
suricata ET WEB_SPECIFIC_APPS Joomla component img Local File Inclusion Attempt rev 5 2024-04-08
suricata ET ACTIVEX Possible CA BrightStor ARCserve Backup ActiveX AddColumn Method Access Buffer Overflow 2 rev 5 2024-04-08
suricata ET INFO EXE - OSX Disk Image Download rev 6 2024-04-08
suricata ET WEB_SPECIFIC_APPS Web Edition mod parameter Local File Inclusion vulnerability rev 4 2024-04-08
suricata ET WEB_SPECIFIC_APPS Joomla Component JE Story Submit view parameter Local File Inclusion Attempt rev 6 2024-04-08
suricata ET INFO EXE - OSX Executable Download - PowerPC Arch rev 5 2024-04-08
suricata ET ACTIVEX Dell Webcam CrazyTalk ActiveX Control BackImage Access Potential Buffer Overflow Attempt 2 rev 8 2024-04-08
suricata ET WEB_SPECIFIC_APPS Joomla com_bulkenquery controller parameter Local File Inclusion Attempt rev 5 2024-04-08
suricata ET MALWARE Cridex Post to CnC rev 9 2024-04-08
suricata ET ACTIVEX TRENDnet TV-IP121WN UltraMJCam ActiveX Control OpenFileDlg Access Potential Remote Stack Buffer Overflow 2 rev 6 2024-04-08
suricata ET MALWARE Trojan Downloader User-Agent BGroom rev 4 2024-04-08
suricata ET WEB_SPECIFIC_APPS dirLIST show_scaled_image.php Local File Inclusion Attempt rev 4 2024-04-08
suricata ET MALWARE Fareit/Pony Downloader Checkin 2 rev 14 2024-04-08
suricata ET ACTIVEX Possible IBM Tivoli Provisioning Manager Express Isig.isigCtl.1 ActiveX RunAndUploadFile Method Overflow rev 4 2024-04-08
suricata ET WEB_SPECIFIC_APPS Joomla com_catalogue controller parameter Local File Inclusion Attempt rev 6 2024-04-08
suricata ET INFO JAVA - Java Class Download rev 10 2024-04-08