Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET WEB_SPECIFIC_APPS Open Web Analytics owa_do Parameter Local File inclusion Attempt rev 6 2024-04-09
suricata ET MALWARE DonBot Checkin rev 7 2024-04-09
suricata ET WEB_SPECIFIC_APPS LoCal Calendar System LIBDIR Parameter Local File Inclusion Attempt rev 5 2024-04-09
suricata ET WEB_SPECIFIC_APPS Opencadastre soustab.php script Local File Inclusion Vulnerability rev 4 2024-04-09
suricata ET WEB_CLIENT Adobe Flash Player Button Remote Code Execution Attempt rev 5 2024-04-09
suricata ET WEB_SPECIFIC_APPS MaticMarket modulename Parameter Local File Inclusion Attempt-6 rev 6 2024-04-09
suricata ET WEB_CLIENT Hex Obfuscation of parseInt % Encoding rev 5 2024-04-09
suricata ET WEB_SPECIFIC_APPS ClanSphere CurrentFolder Parameter Local File Inclusion Attempt rev 5 2024-04-09
suricata ET WEB_SPECIFIC_APPS Google Urchin session.cgi Local File Inclusion Attempt rev 5 2024-04-09
suricata ET WEB_SPECIFIC_APPS bug_actiongroup_ext_page.php script Local File Inclusion Attempt rev 5 2024-04-09
suricata ET WEB_CLIENT Mozilla Firefox mChannel Object Dangling Pointer Use-After-Free Memory Corruption Attempt rev 3 2024-04-09
suricata ET WEB_SPECIFIC_APPS WeBid active_auctions.php lan Parameter Local File inclusion Attempt rev 6 2024-04-09
suricata ET WEB_SPECIFIC_APPS Abtp Portal Project skel_null.php Local File Inclusion Attempt rev 5 2024-04-09
suricata ET SHELLCODE Possible Encoded %90 NOP SLED rev 6 2024-04-09
suricata ET ACTIVEX Ubisoft CoGSManager ActiveX RunCore method Buffer Overflow Vulnerability rev 4 2024-04-09
suricata ET WEB_SPECIFIC_APPS MantisBT db_type Parameter Local File Inclusion Attempt rev 6 2024-04-09
suricata ET ACTIVEX Softek Barcode Reader Toolkit ActiveX Control Buffer Overflow Attempt rev 5 2024-04-09
suricata ET WEB_SERVER Local Website Infected By Gootkit rev 6 2024-04-09
suricata ET ACTIVEX TeeChart Professional ActiveX Control integer overflow Vulnerability 3 rev 4 2024-04-09
suricata ET ADWARE_PUP UBar Trojan/Adware Checkin 3 rev 6 2024-04-09
suricata ET SHELLCODE Possible Unescape Encoded Content With Split String Obfuscation rev 5 2024-04-09
suricata ET ACTIVEX AoA Audio Extractor ActiveX Control Buffer Overflow Attempt rev 5 2024-04-09
suricata ET WEB_CLIENT Hex Obfuscation of replace Javascript Function %u UTF-16 Encoding rev 6 2024-04-09
suricata ET WEB_CLIENT Hex Obfuscation of replace Javascript Function %u UTF-8 Encoding rev 6 2024-04-09
suricata ET SCAN Havij SQL Injection Tool User-Agent Inbound rev 5 2024-04-09
suricata ET WEB_CLIENT Hex Obfuscation of Script Tag %u UTF-16 Encoding rev 5 2024-04-09
suricata ET WEB_CLIENT PDF Containing Windows Commands Downloaded rev 5 2024-04-09
suricata ET WEB_CLIENT Adobe Shockwave Director tSAC Chunk memory corruption Attempt rev 6 2024-04-09
suricata ET ACTIVEX Tom Sawyer Possible Memory Corruption Attempt Format String Function Call rev 4 2024-04-09
suricata ET SHELLCODE Possible 0x0c0c0c0c Heap Spray Attempt rev 4 2024-04-09
suricata ET ADWARE_PUP UBar Trojan/Adware Checkin 2 rev 6 2024-04-09
suricata ET ACTIVEX Chilkat Crypt ActiveX Control SaveDecrypted Insecure Method Vulnerability rev 5 2024-04-09
suricata ET MALWARE Potential Blackhole Exploit Pack Binary Load Request rev 11 2024-04-09
suricata ET SHELLCODE Possible UTF-8 %u90 NOP SLED rev 5 2024-04-09
suricata ET WEB_CLIENT FakeAV scanner page encountered Initializing Virus Protection System rev 5 2024-04-09
suricata ET MALWARE Win32/Banbra Banking Trojan Communication rev 5 2024-04-09
suricata ET ACTIVEX TeeChart Professional ActiveX Control integer overflow Vulnerability 1 rev 4 2024-04-09
suricata ET ACTIVEX Softek Barcode Reader Toolkit ActiveX Control Format String Function Call rev 5 2024-04-09
suricata ET WEB_SPECIFIC_APPS WordPress UnGallery pic Parameter Local File Inclusion Attempt rev 5 2024-04-09
suricata ET WEB_SPECIFIC_APPS TinyWebGallery workaround_dir parameter Local File Inclusion Attempt rev 5 2024-04-09