Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET WEB_SPECIFIC_APPS Joomla Community Builder Enhenced Component Local File Inclusion Attempt rev 5 2024-04-09
suricata ET WEB_SPECIFIC_APPS Horde type Parameter Local File Inclusion Attempt rev 6 2024-04-09
suricata ET WEB_SPECIFIC_APPS Joomla Component com_xmovie file Parameter Local File Inclusion Attempt rev 7 2024-04-09
suricata ET WEB_SPECIFIC_APPS WordPress WP Publication file Parameter Local File Inclusion Attempt rev 5 2024-04-09
suricata ET WEB_CLIENT Hex Obfuscation of Script Tag % Encoding rev 5 2024-04-09
suricata ET ACTIVEX LEADTOOLS Imaging LEADSmtp ActiveX SaveMessage Method Vulnerability rev 4 2024-04-09
suricata ET WEB_SERVER Gootkit Website Infection Receiving FTP Credentials from Control Server rev 8 2024-04-09
suricata ET SCAN Havij SQL Injection Tool User-Agent Outbound rev 4 2024-04-09
suricata ET MALWARE Win32/TrojanDownloader.Chekafe.D User-Agent my_check_data On Off HTTP Port rev 4 2024-04-09
suricata ET WEB_CLIENT Hex Obfuscation of substr %u UTF-16 Encoding rev 5 2024-04-09
suricata ET WEB_SPECIFIC_APPS PHP-Fusion maincore.php folder_level Parameter Local File Inclusion Attempt rev 5 2024-04-09
suricata ET SHELLCODE Possible Encoded %90 NOP SLED rev 6 2024-04-09
suricata ET MALWARE W32/NetShare User-Agent rev 5 2024-04-09
suricata ET ACTIVEX Ubisoft CoGSManager ActiveX RunCore method Buffer Overflow Vulnerability rev 4 2024-04-09
suricata ET WEB_SPECIFIC_APPS MantisBT db_type Parameter Local File Inclusion Attempt rev 6 2024-04-09
suricata ET MALWARE Java EXE Download by Vulnerable Version - Likely Driveby rev 10 2024-04-09
suricata ET SHELLCODE Possible %u4141%u4141 UTF-16 Heap Spray Attempt rev 4 2024-04-09
suricata ET WEB_CLIENT Likely Malicious PDF Containing StrReverse rev 5 2024-04-09
suricata ET WEB_SPECIFIC_APPS Open Web Analytics owa_action Parameter Local File inclusion Attempt rev 6 2024-04-09
suricata ET WEB_SPECIFIC_APPS Open Web Analytics owa_do Parameter Local File inclusion Attempt rev 6 2024-04-09
suricata ET WEB_CLIENT Hex Obfuscation of eval %u UTF-16 Encoding rev 5 2024-04-09
suricata ET WEB_CLIENT Possible Adobe Acrobat Reader Newclass Invalid Pointer Remote Code Execution Attempt rev 6 2024-04-09
suricata ET WEB_CLIENT DLL or EXE File From Possible WebDAV Share Possible DLL Preloading Exploit Attempt rev 11 2024-04-09
suricata ET ACTIVEX Trend Micro Internet Security Pro 2010 ActiveX extSetOwner Remote Code Execution Attempt rev 4 2024-04-09
suricata ET WEB_CLIENT Adobe Acrobat Reader FlateDecode Stream Predictor Exploit Attempt rev 4 2024-04-09
suricata ET ADWARE_PUP UBar Trojan/Adware Checkin 1 rev 6 2024-04-09
suricata ET WEB_SPECIFIC_APPS DynPage dynpage_load.php file Parameter Local File Inclusion Attempt rev 5 2024-04-09
suricata ET ACTIVEX IDrive Online Backup ActiveX control SaveToFile Insecure Method rev 4 2024-04-09
suricata ET WEB_SPECIFIC_APPS Joomla Jimtawl Component task Parameter Local File Inclusion Attempt rev 5 2024-04-09
suricata ET EXPLOIT Linksys WAP54G debug.cgi Shell Access as Gemtek rev 7 2024-04-09
suricata ET WEB_SPECIFIC_APPS Tiki Wiki CMS Groupware language Parameter Local File Inclusion Attempt rev 7 2024-04-09
suricata ET WEB_SPECIFIC_APPS WordPress PHP Speedy Plugin page Parameter Local File Inclusion Attempt rev 5 2024-04-09
suricata ET WEB_SPECIFIC_APPS LoCal Calendar System LIBDIR Parameter Local File Inclusion Attempt rev 5 2024-04-09
suricata ET EXPLOIT_KIT Redirection to driveby Page Home index.php rev 6 2024-04-09
suricata ET MALWARE Spy Banker Outbound Communication Attempt rev 5 2024-04-09
suricata ET SHELLCODE Possible Unescape Encoded Content With Split String Obfuscation 2 rev 6 2024-04-09
suricata ET WEB_SPECIFIC_APPS Plogger phpThumb.php src Parameter Remote File Disclosure Attempt rev 6 2024-04-09
suricata ET ACTIVEX Avaya CallPilot Unified Messaging ActiveX Function Call rev 6 2024-04-09
suricata ET MALWARE Win32/Winshow User Agent rev 4 2024-04-09
suricata ET WEB_SPECIFIC_APPS Joomla wgPicasa Component controller Parameter Local File Inclusion Attempt rev 7 2024-04-09