*** NK8 RELS 3346 Release *** Total number of signatures: 3216 Description ================================================================== In this signature, we addressed the exploits/vulnerabilities and applications as below: Added 4 rule(s): --------------- 1133891 EXPLOIT Zabbix Server Active Proxy Trapper Command Injection -2 (CVE-2017-2824) 1134033 WEB Supervisor XML-RPC Authenticated Remote Code Execution (CVE-2017-11610) 1134035 WEB HTTP Host Header Command Injection 1134045 WEB-CLIENT Microsoft Edge Use After Free -1 (CVE-2017-8652) Modified 6 rule(s): --------------- 1054965 WEB HTTP Basic Authorization Header Buffer Overflow 1055107 SHELLCODE Egg Hunter -1 1133572 WEB Shell Spawning Attempt via telnetd -1.b 1133919 WEB Nginx ngx_http_range_filter_module Integer Overflow -1 (CVE-2017-7529) 1134019 WEB Muieblackcat Scanner 1134027 EXPLOIT Trend Micro Control Manager cmdHandlerLicenseManager SQL Injection (CVE-2017-11384) Deleted 8 rule(s): --------------- 1059672 WEB Cisco Linksys E1500/E2500 apply.cgi Remote Command Injection -2 (BID-57760) (old rule) 1059674 WEB-CLIENT Oracle Java awt_setPixels Information Disclosure (old rule) 1059729 WEB Wordpress MailPoet Newsletters (wysija-newsletters) Unauthenticated File Upload (old rule) 1059768 DNS PHP php_parserr DNS_TXT Heap Buffer Overflow (CVE-2014-4049) (old rule) 1059776 WEB-ACTIVEX National Instruments Installer Framework Multiple ActiveX Arbitrary File Creation (OSVDB-94425) (old rule) 1059780 WEB AlienVault OSSIM av-centerd Util.pm Request Arbitrary Command Execution -1 (CVE-2014-3805) (old rule) 1059788 WEB Oracle Event Processing FileUploadServlet Directory Traversal (CVE-2014-2424) (old rule) 1059807 WEB Directory Traversal -10 (old rule)