| snort |
ET SNMP missing community string attempt 4 |
rev 2 |
2013-01-10 |
| snort |
ET WEB_SERVER ColdFusion adminapi access |
rev 3 |
2013-01-09 |
| snort |
ET WEB_SERVER WebShell - JSP File Admin - POST Structure - dir |
rev 2 |
2013-01-09 |
| snort |
ET WEB_SERVER WebShell - JSP RAT |
rev 2 |
2013-01-09 |
| snort |
ET WEB_SERVER ColdFusion administrator access |
rev 3 |
2013-01-09 |
| snort |
ET TROJAN FakeAV security_scanner.exe |
rev 1 |
2013-01-09 |
| snort |
ET WEB_SERVER ColdFusion componentutils access |
rev 4 |
2013-01-09 |
| snort |
ET TROJAN Generic -POST To file.php w/Extended ASCII Characters |
rev 7 |
2013-01-08 |
| snort |
ET TROJAN ProxyBox - HTTP CnC - proxy_info.php |
rev 1 |
2013-01-08 |
| snort |
ET ACTIVEX Possible Sony PC Companion Admin_RemoveDirectory Stack-based Unicode Buffer Overload SEH |
rev 2 |
2013-01-05 |
| snort |
ET WEB_SPECIFIC_APPS Wordpress Google Doc Embedder plugin file parameter Local File Inclusion Attempt |
rev 1 |
2013-01-05 |
| snort |
ET ACTIVEX Possible Sony PC Companion CheckCompatibility method Stack-based Unicode Buffer Overload |
rev 2 |
2013-01-05 |
| snort |
ET ACTIVEX Possible Sony PC Companion Load method Stack-based Unicode Buffer Overload SEH |
rev 2 |
2013-01-05 |
| snort |
ET WEB_SPECIFIC_APPS Simple Machines Forum ssi_function parameter path disclosure vulnerability |
rev 1 |
2013-01-05 |
| snort |
ET TROJAN Request for fake postal receipt from e-mail link |
rev 1 |
2013-01-03 |
| snort |
ET INFO PTUNNEL OUTBOUND |
rev 2 |
2013-01-03 |
| snort |
ET INFO PTUNNEL INBOUND |
rev 3 |
2013-01-03 |
| snort |
ET CURRENT_EVENTS Injected iframe leading to Redkit Jan 02 2013 |
rev 2 |
2013-01-03 |
| snort |
ET WEB_SPECIFIC_APPS Symantec Messaging Gateway 9.5.3-3 - Arbitrary file download 2 |
rev 2 |
2012-12-29 |
| snort |
ET WEB_SPECIFIC_APPS Wordpress Myflash path parameter Local File Inclusion Attempt |
rev 1 |
2012-12-29 |
| snort |
ET TROJAN W32/Downloader.FakeFlashPlayer Status.Php CnC Beacon |
rev 1 |
2012-12-29 |
| snort |
ET ACTIVEX Possible Advantech Studio ISSymbol ActiveX Control Multiple Buffer Overflow Attempt |
rev 2 |
2012-12-29 |
| snort |
ET WEB_SPECIFIC_APPS Request to Wordpress W3TC Plug-in dbcache Directory |
rev 1 |
2012-12-28 |
| snort |
ET CURRENT_EVENTS Hostile Gate landing seen with pamdql/Sweet Orange base64 |
rev 1 |
2012-12-28 |
| snort |
ET TROJAN W32/Dexter Infostealer CnC POST |
rev 2 |
2012-12-28 |
| snort |
ET MOBILE_MALWARE Android/Updtkiller Sending Device Information |
rev 1 |
2012-12-28 |
| snort |
ET WEB_SPECIFIC_APPS WordPress WP-Property Plugin uploadify.php Arbitrary File Upload Vulnerability |
rev 1 |
2012-12-28 |
| snort |
ET CURRENT_EVENTS Unknown EK Landing Page |
rev 1 |
2012-12-28 |
| snort |
ET TROJAN SmokeLoader - Init 0x |
rev 1 |
2012-12-22 |
| snort |
ET ACTIVEX Possible Cyme ChartFX client server ActiveX Control ShowPropertiesDialog arbitrary code execution |
rev 2 |
2012-12-21 |
| snort |
ET POLICY poclbm BitCoin miner |
rev 1 |
2012-12-21 |
| snort |
ET WEB_SPECIFIC_APPS simple machines forum include parameter Local File Inclusion Attempt |
rev 1 |
2012-12-21 |
| snort |
ET WEB_SPECIFIC_APPS Amateur Photographer Image Gallery file parameter Local File Inclusion Attempt |
rev 1 |
2012-12-21 |
| snort |
ET WEB_SPECIFIC_APPS WordPress Cloudsafe365 file parameter Local File Inclusion Attempt |
rev 1 |
2012-12-21 |
| snort |
ET TROJAN W32.Daws/Sanny CnC Initial Beacon |
rev 2 |
2012-12-18 |
| snort |
ET ACTIVEX Possible NVIDIA Install Application ActiveX Control AddPackages Unicode Buffer Overflow |
rev 2 |
2012-12-14 |
| snort |
ET WEB_SPECIFIC_APPS RIPS code.php Local File Inclusion Vulnerability |
rev 1 |
2012-12-14 |
| snort |
ET TROJAN Faked Russian Opera UA without Accept - probable downloader |
rev 1 |
2012-12-14 |
| snort |
ET WEB_SPECIFIC_APPS RIPS function.php Local File Inclusion Vulnerability |
rev 1 |
2012-12-14 |
| snort |
ET WEB_SPECIFIC_APPS Manhali download.php Local File Inclusion Vulnerability |
rev 1 |
2012-12-14 |