| snort |
ET WEB_CLIENT Hex Obfuscation of unescape % Encoding |
rev 1 |
2011-02-03 |
| snort |
ET WEB_CLIENT Hex Obfuscation of parseInt %u UTF-16 Encoding |
rev 1 |
2011-02-03 |
| snort |
ET WEB_CLIENT Hex Obfuscation of parseInt %u UTF-8 Encoding |
rev 1 |
2011-02-03 |
| snort |
ET TROJAN x0Proto Download Cmd |
rev 1 |
2011-01-27 |
| snort |
ET WEB_CLIENT Possible # Encoded Iframe Tag |
rev 1 |
2011-01-27 |
| snort |
ET TROJAN x0Proto Client Info |
rev 1 |
2011-01-27 |
| snort |
ET ACTIVEX Oracle Document Capture File Overwrite or Buffer Overflow Attempt |
rev 1 |
2011-01-27 |
| snort |
ET WEB_CLIENT Possible %u UTF-16 Encoded Iframe Tag |
rev 1 |
2011-01-27 |
| snort |
ET WEB_CLIENT Possible %u UTF-8 Encoded Iframe Tag |
rev 1 |
2011-01-27 |
| snort |
ET TROJAN x0Proto Ping |
rev 1 |
2011-01-27 |
| snort |
ET SHELLCODE Possible Encoded %90 NOP SLED |
rev 2 |
2011-01-27 |
| snort |
ET WEB_CLIENT Hex Obfuscation of document.write # Encoding |
rev 1 |
2011-01-27 |
| snort |
ET WEB_CLIENT Possible % Encoded Iframe Tag |
rev 1 |
2011-01-27 |
| snort |
ET TROJAN x0Proto Init |
rev 1 |
2011-01-27 |
| snort |
ET TROJAN x0Proto Pong |
rev 1 |
2011-01-27 |
| snort |
ET P2P BTWebClient UA uTorrent in use |
rev 2 |
2011-01-27 |
| snort |
ET SHELLCODE Possible UTF-8 %u90 NOP SLED |
rev 2 |
2011-01-27 |
| snort |
ET TROJAN Winsoft.E Checkin 1 |
rev 2 |
2011-01-24 |
| snort |
ET TROJAN Win32/Banbra Banking Trojan Communication |
rev 2 |
2011-01-24 |
| snort |
ET TROJAN Spy Banker Outbound Communication Attempt |
rev 2 |
2011-01-24 |
| snort |
ET TROJAN Winsoft.E Checkin 3 |
rev 2 |
2011-01-24 |
| snort |
ET TROJAN Winsoft.E Checkin 2 |
rev 2 |
2011-01-24 |
| snort |
ET WEB_SPECIFIC_APPS Tunngavik CMS id Parameter UNION SELECT SQL Injection Attempt |
rev 2 |
2011-01-21 |
| snort |
ET WEB_SPECIFIC_APPS Tunngavik CMS id Parameter INSERT INTO SQL Injection Attempt |
rev 2 |
2011-01-21 |
| snort |
ET WEB_SPECIFIC_APPS Tunngavik CMS id Parameter DELETE FROM SQL Injection Attempt |
rev 2 |
2011-01-21 |
| snort |
ET WEB_SERVER Possible Cisco Adaptive Security Appliance Web VPN FTP or CIFS Authentication Form Phishing Attempt |
rev 5 |
2011-01-21 |
| snort |
ET WEB_SPECIFIC_APPS Tunngavik CMS id Parameter SELECT FROM SQL Injection Attempt |
rev 2 |
2011-01-21 |
| snort |
ET WEB_SPECIFIC_APPS LetoDMS lang Parameter Local File Inclusion Attempt |
rev 2 |
2011-01-21 |
| snort |
ET WEB_SPECIFIC_APPS Tunngavik CMS id Parameter UPDATE SET SQL Injection Attempt |
rev 2 |
2011-01-21 |
| snort |
ET SCAN Inspathx Path Disclosure Scan |
rev 4 |
2011-01-20 |
| snort |
ET ACTIVEX Novell iPrint ActiveX GetDriverSettings Remote Code Execution Attempt |
rev 1 |
2011-01-20 |
| snort |
ET WEB_SERVER HP OpenView /OvCgi/Toolbar.exe Accept Language Heap Buffer Overflow Attempt |
rev 9 |
2011-01-20 |
| snort |
ET WEB_SERVER Possible HP OpenView Network Node Manager ovalarm.exe CGI Buffer Overflow Attempt |
rev 8 |
2011-01-20 |
| snort |
ET WORM Possible Worm Sohanad.Z or Other Infection Request for setting.nql |
rev 1 |
2011-01-17 |
| snort |
ET WEB_SERVER Possible DD-WRT Metacharacter Injection Command Execution Attempt |
rev 8 |
2011-01-15 |
| snort |
ET WEB_SPECIFIC_APPS axdcms aXconf Parameter Local File Inclusion Attempt |
rev 2 |
2011-01-15 |
| snort |
ET WEB_SPECIFIC_APPS Neocrome Seditio SQL Injection Attempt -- users.register.inc.php SELECT |
rev 7 |
2011-01-11 |
| snort |
ET WEB_SPECIFIC_APPS Neocrome Seditio SQL Injection Attempt -- users.register.inc.php UPDATE |
rev 7 |
2011-01-11 |
| snort |
ET WEB_SPECIFIC_APPS Neocrome Seditio SQL Injection Attempt -- users.register.inc.php INSERT |
rev 7 |
2011-01-11 |
| snort |
ET WEB_SPECIFIC_APPS Neocrome Seditio SQL Injection Attempt -- users.register.inc.php UNION SELECT |
rev 7 |
2011-01-11 |