Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET WEB_SPECIFIC_APPS x10 Automatic MP3 Script layout_lyrics.php web_root Parameter Local file Inclusion rev 8 2024-04-10
suricata ET ACTIVEX Adobe browser document ActiveX DoS Function call Attempt rev 6 2024-04-10
suricata ET WEB_SPECIFIC_APPS LWS php User Base unverified.inc.php template Parameter Local File Inclusion rev 9 2024-04-10
suricata ET WEB_SPECIFIC_APPS F5 Data Manager DiagLogListActionBody.do Local File Inclusion Attempt rev 8 2024-04-10
suricata ET WEB_SERVER SHOW CHARACTER SET SQL Injection Attempt in URI rev 8 2024-04-10
suricata ET WEB_SPECIFIC_APPS NewsOffice news_show.php newsoffice_directory Parameter Local File Inclusion rev 9 2024-04-10
suricata ET WEB_SPECIFIC_APPS Possible Zenoss Network Monitoring Application INTO OUTFILE SQL Injection Attempt rev 7 2024-04-10
suricata ET WEB_SPECIFIC_APPS Mole viewsource.php fname Parameter Local File Inclusion rev 8 2024-04-10
suricata ET WEB_SPECIFIC_APPS Demium CMS urheber.php name Parameter Local File Inclusion rev 9 2024-04-10
suricata ET WEB_SERVER Possible Successful Juniper NetScreen ScreenOS Firmware Version Disclosure Attempt rev 7 2024-04-10
suricata ET WEB_SPECIFIC_APPS PNphpBB2 admin_groups_reapir.php ModName parameter Local File inclusion rev 7 2024-04-10
suricata ET WEB_SPECIFIC_APPS Blogplus window_top.php Local File Inclusion rev 9 2024-04-10
suricata ET WEB_SPECIFIC_APPS CAT2 spaw_control.class.php spaw_root Parameter Local File Inclusion rev 9 2024-04-10
suricata ET WEB_SPECIFIC_APPS PowerPHPBoard footer.inc.php settings Parameter Local File Inclusion rev 8 2024-04-10
suricata ET WEB_SPECIFIC_APPS Ideal MooFAQ Joomla Component file_includer.php file Parameter Local File Inclusion rev 10 2024-04-10
suricata ET WEB_SPECIFIC_APPS Possible Zenoss Network Monitoring Application SELECT FROM SQL Injection Attempt rev 7 2024-04-10
suricata ET HUNTING Suspicious exe.exe request - possible downloader/Oficla rev 7 2024-04-10
suricata ET WEB_SPECIFIC_APPS Joomla Component com_communitypolls controller Parameter Local File Inclusion Attempt rev 8 2024-04-10
suricata ET WEB_SPECIFIC_APPS ODARS resource_categories_view.php CLASSES_ROOT parameter local file inclusion rev 8 2024-04-10
suricata ET WEB_SPECIFIC_APPS PNphpBB2 admin_words.php ModName parameter Local File inclusion rev 7 2024-04-10
suricata ET WEB_SPECIFIC_APPS SnippetMaster vars.inc.php _SESSION Parameter Local File Inclusion rev 8 2024-04-10
suricata ET WEB_SPECIFIC_APPS Blogplus block_center_down.php Local File Inclusion rev 9 2024-04-10
suricata ET ACTIVEX SoftArtisans XFile FileManager ActiveX Buildpath method stack overflow Attempt rev 4 2024-04-10
suricata ET MALWARE Banker/Banbra Variant POST via x-www-form-urlencoded rev 10 2024-04-10
suricata ET ACTIVEX Dart Communications PowerTCP FTP for ActiveX DartFtp.dll Control Buffer Overflow rev 12 2024-04-10
suricata ET WEB_SPECIFIC_APPS Job2C windetail.php adtype Parameter Local File Inclusion rev 9 2024-04-10
suricata ET WEB_SPECIFIC_APPS pHNews comments.php template Local File Inclusion rev 8 2024-04-10
suricata ET WEB_SPECIFIC_APPS rgboard _footer.php skin_path parameter local file inclusion rev 8 2024-04-10
suricata ET WEB_SPECIFIC_APPS ea-gBook index_inc.php inc_ordner parameter local file inclusion rev 8 2024-04-10
suricata ET WEB_SPECIFIC_APPS Mole viewsource.php dirn Parameter Local File Inclusion rev 8 2024-04-10
suricata ET WEB_SPECIFIC_APPS F5 Data Manager ViewInventoryErrorReport.do Local File Inclusion Attempt rev 8 2024-04-10
suricata ET WEB_SPECIFIC_APPS e107 123 FlashChat Module 123flashchat.php e107path Parameter Local File Inclusion rev 8 2024-04-10
suricata ET ACTIVEX SoftArtisans XFile FileManager ActiveX DeleteFile method stack overflow Attempt rev 4 2024-04-10
suricata ET WEB_SPECIFIC_APPS Cyberfolio css.php theme Parameter Local File Inclusion rev 9 2024-04-10
suricata ET ACTIVEX SoftArtisans XFile FileManager ActiveX GetDriveName method stack overflow Attempt rev 4 2024-04-10
suricata ET WEB_SPECIFIC_APPS TinyButStrong bs_us_examples_0view.php script Parameter Local File Inclusion rev 8 2024-04-10
suricata ET ATTACK_RESPONSE Windows LMHosts File Download - Likely DNSChanger Infection rev 9 2024-04-10
suricata ET SCAN WhatWeb Web Application Fingerprint Scanner Default User-Agent Detected rev 5 2024-04-10
suricata ET WEB_SPECIFIC_APPS Possible Zenoss Network Monitoring Application INSERT INTO SQL Injection Attempt rev 7 2024-04-10
suricata ET ATTACK_RESPONSE Possible ASPXSpy Related Activity rev 7 2024-04-10