Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET WEB_SPECIFIC_APPS Wordpress Plugin Tinymce Thumbnail Gallery href parameter Remote File Disclosure Attempt rev 8 2024-04-08
suricata ET EXPLOIT_KIT CirtXPack - No Java URI - /a.Test rev 3 2024-04-08
suricata ET WEB_SPECIFIC_APPS Help Center Live file parameter Local File Inclusion vulnerability rev 4 2024-04-08
suricata ET INFO DynDNS CheckIp External IP Address Server Response rev 4 2024-04-08
suricata ET WEB_SPECIFIC_APPS Wordpress Plugins Wp-ImageZoom file parameter Remote File Disclosure Vulnerability rev 5 2024-04-08
suricata ET WEB_SPECIFIC_APPS wordpress thecartpress plugin loop parameter Local File Inclusion Attempt rev 5 2024-04-08
suricata ET WEB_SPECIFIC_APPS WordPress jRSS Widget url parameter Local File Inclusion Vulnerability rev 5 2024-04-08
suricata ET ACTIVEX Possible AOL ICQ ActiveX Control DownloadAgent Method Access Arbitrary File Download and Execute rev 4 2024-04-08
suricata ET WEB_SPECIFIC_APPS Joomla com_br controller parameter Local File Inclusion Attempt rev 5 2024-04-08
suricata ET ACTIVEX 2X ApplicationServer TuxSystem Class ActiveX Control ExportSettings Function Call Attempt rev 4 2024-04-08
suricata ET EXPLOIT_KIT Probable Sakura exploit kit landing page with obfuscated URLs rev 5 2024-04-08
suricata ET WEB_SPECIFIC_APPS VTiger CRM module_name parameter Local File Inclusion Attempt rev 5 2024-04-08
suricata ET ACTIVEX Possible Dell IT Assistant detectIESettingsForITA.ocx ActiveX Control readRegVal Remote Registry Dump Vulnerability 2 rev 4 2024-04-08
suricata ET WEB_SPECIFIC_APPS Wordpress Plugin Newsletter data parameter Local File Inclusion vulnerability rev 4 2024-04-08
suricata ET WEB_SPECIFIC_APPS Wordpress Plugin PICA Photo Gallery imgname parameter Local File Inclusion Attempt rev 4 2024-04-08
suricata ET HUNTING Suspicious Windows Executable CreateRemoteThread rev 7 2024-04-08
suricata ET MALWARE Win32/Striked Ransomware CnC Checkin rev 3 2024-04-08
suricata ET INFO Bomgar Remote Assistance Tool Download rev 5 2024-04-08
suricata ET ACTIVEX Possible WinZip FileView ActiveX CreateNewFolderFromName Method Access Buffer Overflow rev 4 2024-04-08
suricata ET ACTIVEX Potential ThreeDify Designer ActiveX Control cmdImport Method Access Buffer Overflow 2 rev 5 2024-04-08
suricata ET EXPLOIT_KIT DRIVEBY Generic - 8Char.JAR Naming Algorithm rev 7 2024-04-08
suricata ET ACTIVEX Possible IBM Tivoli Provisioning Manager Express Isig.isigCtl.1 ActiveX RunAndUploadFile Method Overflow 2 rev 4 2024-04-08
suricata ET WEB_CLIENT Internet Explorer CTableRowCellsCollectionCacheItem.GetNext Memory Use-After-Free Attempt rev 4 2024-04-08
suricata ET WEB_SPECIFIC_APPS Joomla Component JE Story Submit view parameter Local File Inclusion Attempt rev 6 2024-04-08
suricata ET INFO EXE - OSX Executable Download - PowerPC Arch rev 5 2024-04-08
suricata ET INFO EXE - OSX Disk Image Download rev 6 2024-04-08
suricata ET WEB_SPECIFIC_APPS Joomla com_bulkenquery controller parameter Local File Inclusion Attempt rev 5 2024-04-08
suricata ET ACTIVEX TRENDnet TV-IP121WN UltraMJCam ActiveX Control OpenFileDlg Access Potential Remote Stack Buffer Overflow 2 rev 6 2024-04-08
suricata ET WEB_SPECIFIC_APPS Joomla PollXT component Itemid parameter Local File Inclusion Attempt rev 4 2024-04-08
suricata ET WEB_SPECIFIC_APPS Joomla com_jeformcr view parameter Local File Inclusion Attempt rev 5 2024-04-08
suricata ET WEB_SPECIFIC_APPS Fork-CMS js.php module parameter Local File Inclusion Attempt rev 5 2024-04-08
suricata ET ACTIVEX Possible IBM Rational ClearQuest Activex Control RegisterSchemaRepoFromFileByDbSet Insecure Method Access rev 4 2024-04-08
suricata ET WEB_SPECIFIC_APPS 1024 CMS filename Parameter Local File Inclusion Attempt rev 5 2024-04-08
suricata ET MALWARE Kelihos/Hlux GET jucheck.exe from CnC rev 6 2024-04-08
suricata ET WEB_SPECIFIC_APPS WordPress Thinkun Remind Plugin dirPath Remote File Disclosure Vulnerability rev 5 2024-04-08
suricata ET WEB_SPECIFIC_APPS Joomla com_mailchimpccnewsletter controller parameter Local File Inclusion Attempt rev 5 2024-04-08
suricata ET WEB_SPECIFIC_APPS Joomla com_wisroyq controller parameter Local File Inclusion Attempt rev 4 2024-04-08
suricata ET ACTIVEX 2X ApplicationServer TuxSystem Class ActiveX Control ImportSettings Remote File Overwrite Attempt rev 6 2024-04-08
suricata ET ACTIVEX EdrawSoft Office Viewer Component ActiveX FtpUploadFile Format String Function Call Attempt rev 4 2024-04-08
suricata ET INFO Outdated Flash Version M1 rev 128 2024-04-08