Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET WEB_SPECIFIC_APPS NetClassifieds Premium Edition SQL Injection Attempt -- ViewCat.php s_user_id SELECT rev 7 2011-03-04
snort ET WEB_SPECIFIC_APPS NetVIOS Portal SQL Injection Attempt -- page.asp NewsID UNION SELECT rev 7 2011-03-04
snort ET WEB_SPECIFIC_APPS NetVIOS Portal SQL Injection Attempt -- page.asp NewsID DELETE rev 7 2011-03-04
snort ET WEB_SPECIFIC_APPS Neuron Blog SQL Injection Attempt -- addcomment2.php commentwebsite UNION SELECT rev 6 2011-03-04
snort ET WEB_SPECIFIC_APPS NetVIOS Portal SQL Injection Attempt -- page.asp NewsID UPDATE rev 7 2011-03-04
snort ET WEB_SPECIFIC_APPS Neuron Blog SQL Injection Attempt -- addcomment2.php commentwebsite DELETE rev 6 2011-03-04
snort ET WEB_SPECIFIC_APPS Unclassified NewsBoard forum.php __tplCollection Parameter Local File Inclusion rev 5 2011-03-04
snort ET WEB_SPECIFIC_APPS NetClassifieds Premium Edition SQL Injection Attempt -- ViewCat.php s_user_id INSERT rev 7 2011-03-04
snort ET WEB_SPECIFIC_APPS IWantOneButton Wordpress SQL Injection Attempt updateAJAX.php post_id UNION SELECT rev 2 2011-03-04
snort ET WEB_SPECIFIC_APPS NetClassifieds Premium Edition SQL Injection Attempt -- ViewCat.php s_user_id UPDATE rev 7 2011-03-04
snort ET WEB_SPECIFIC_APPS Neuron Blog SQL Injection Attempt -- addcomment2.php commentmail UNION SELECT rev 6 2011-03-04
snort ET WEB_SPECIFIC_APPS NetClassifieds Premium Edition SQL Injection Attempt -- ViewCat.php s_user_id DELETE rev 7 2011-03-04
snort ET WEB_SPECIFIC_APPS Neuron Blog SQL Injection Attempt -- addcomment2.php commentname INSERT rev 6 2011-03-04
snort ET WEB_SPECIFIC_APPS Neuron Blog SQL Injection Attempt -- addcomment2.php commentwebsite SELECT rev 6 2011-03-04
snort ET WEB_SPECIFIC_APPS Neuron Blog SQL Injection Attempt -- addcomment2.php commentwebsite UPDATE rev 6 2011-03-04
snort ET WEB_SPECIFIC_APPS Neuron Blog SQL Injection Attempt -- addcomment2.php commentmail INSERT rev 6 2011-03-04
snort ET WEB_SPECIFIC_APPS Potential Wordpress local file disclosure vulnerability rev 2 2011-03-02
snort ET WEB_SPECIFIC_APPS Potential Wordpress local file disclosure vulnerability rev 2 2011-03-02
snort ET WEB_CLIENT Hex Obfuscation of replace Javascript Function %u UTF-16 Encoding rev 2 2011-03-01
snort ET WEB_CLIENT Hex Obfuscation of replace Javascript Function %u UTF-8 Encoding rev 2 2011-03-01
snort ET WEB_SPECIFIC_APPS Awstats Apache Tomcat Configuration File Remote Arbitrary Command Execution Attempt rev 1 2011-03-01
snort ET WEB_CLIENT Hex Obfuscation of replace Javascript Function % Encoding rev 2 2011-03-01
snort ET VOIP Possible Modified Sipvicious OPTIONS Scan rev 2 2011-03-01
snort ET USER_AGENTS Suspicious User-Agent VCTestClient rev 1 2011-02-27
snort ET WEB_SPECIFIC_APPS WeBid active_auctions.php lan Parameter Local File inclusion Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS Services id Parameter UNION SELECT SQL Injection Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS PMB Services id Parameter UPDATE SET SQL Injection Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS Bexfront sid Parameter UNION SELECT SQL Injection Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS Woltlab Burning Board katid Parameter UNION SELECT SQL Injection Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS T-Content Management System id_novedad Parameter DELETE FROM SQL Injection Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS PHP-fusion Team Structure Infusion team_id Parameter DELETE FROM SQL Injection Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS CultBooking lang parameter Local File Inclusion Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS PHP-fusion Team Structure Infusion team_id Parameter UPDATE SET SQL Injection Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS Dokeos and Chamilo open_document.php file Parameter File Disclosure Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS PHP-fusion Team Structure Infusion team_id Parameter UNION SELECT SQL Injection Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS T-Content Management System id_novedad Parameter UPDATE SET SQL Injection Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS Bexfront sid Parameter SELECT FROM SQL Injection Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS T-Content Management System id_novedad Parameter INSERT INTO SQL Injection Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS Bexfront sid Parameter DELETE FROM SQL Injection Attempt rev 2 2011-02-25
snort ET WEB_SPECIFIC_APPS Woltlab Burning Board katid Parameter INSERT INTO SQL Injection Attempt rev 2 2011-02-25