Network Content Inspection Rules
Default Rule:
Enable
Disable
| Rule ID | Rule Description | Confidence Level | DDI Default Rule | Network Content Inspection Pattern Release Date | ||
|---|---|---|---|---|---|---|
| DDI RULE 934 | MARADE HTTP Request | 2026/10/10 | DDI RULE 934 | /vinfo/us/threat-encyclopedia/network/ddi-rule-934 | ||
| DDI RULE 935 | WUPIED HTTP Request | 2026/10/10 | DDI RULE 935 | /vinfo/us/threat-encyclopedia/network/ddi-rule-935 | ||
| DDI RULE 938 | LEPCA HTTP Request | 2026/10/10 | DDI RULE 938 | /vinfo/us/threat-encyclopedia/network/ddi-rule-938 | ||
| DDI RULE 939 | MOFANGSHE HTTP Request | 2026/10/10 | DDI RULE 939 | /vinfo/us/threat-encyclopedia/network/ddi-rule-939 | ||
| DDI RULE 940 | APT - WATERBEAR - TCP (Request) | 2026/10/10 | DDI RULE 940 | /vinfo/us/threat-encyclopedia/network/ddi-rule-940 | ||
| DDI RULE 942 | APT - SALENI - TCP (Request) | 2026/10/10 | DDI RULE 942 | /vinfo/us/threat-encyclopedia/network/ddi-rule-942 | ||
| DDI RULE 943 | APT - SALENI - TCP (Response) | 2026/10/10 | DDI RULE 943 | /vinfo/us/threat-encyclopedia/network/ddi-rule-943 | ||
| DDI RULE 944 | APT - ZACOM - HTTP (Request) - Variant 6 | 2026/10/10 | DDI RULE 944 | /vinfo/us/threat-encyclopedia/network/ddi-rule-944 | ||
| DDI RULE 672 | PHER - HTTP (Request) | 2026/10/10 | DDI RULE 672 | /vinfo/us/threat-encyclopedia/network/ddi-rule-672 | ||
| DDI RULE 673 | RAMNIT - TCP | 2026/10/10 | DDI RULE 673 | /vinfo/us/threat-encyclopedia/network/ddi-rule-673 | ||
| DDI RULE 680 | KOLWEB - HTTP (Request) | 2026/10/10 | DDI RULE 680 | /vinfo/us/threat-encyclopedia/network/ddi-rule-680 | ||
| DDI RULE 682 | PONYDOS - HTTP (Request) | 2026/10/10 | DDI RULE 682 | /vinfo/us/threat-encyclopedia/network/ddi-rule-682 | ||
| DDI RULE 684 | APT - ZEGOST - TCP | 2026/10/10 | DDI RULE 684 | /vinfo/us/threat-encyclopedia/network/ddi-rule-684 | ||
| DDI RULE 686 | TDSS - HTTP (Request) - Variant 7 | 2026/10/10 | DDI RULE 686 | /vinfo/us/threat-encyclopedia/network/ddi-rule-686 | ||
| DDI RULE 696 | TURKOJAN TCP Request - Class 1 | 2026/10/10 | DDI RULE 696 | /vinfo/us/threat-encyclopedia/network/ddi-rule-696 | ||
| DDI RULE 697 | APT - PLUGX - HTTP (Request) | 2026/10/10 | DDI RULE 697 | /vinfo/us/threat-encyclopedia/network/ddi-rule-697 | ||
| DDI RULE 699 | SIMDA - HTTP (Request) | 2026/10/10 | DDI RULE 699 | /vinfo/us/threat-encyclopedia/network/ddi-rule-699 | ||
| DDI RULE 88 | File with malware-related file name - HTTP (Request) | 2026/10/10 | DDI RULE 88 | /vinfo/us/threat-encyclopedia/network/ddi-rule-88 | ||
| DDI RULE 905 | INJECT - HTTP (Request) | 2026/10/10 | DDI RULE 905 | /vinfo/us/threat-encyclopedia/network/ddi-rule-905 | ||
| DDI RULE 922 | APT - PLUGX - HTTP (Request) - Variant 3 | 2026/10/10 | DDI RULE 922 | /vinfo/us/threat-encyclopedia/network/ddi-rule-922 | ||
| DDI RULE 923 | TROJAN TCP Request - Class 1 | 2026/10/10 | DDI RULE 923 | /vinfo/us/threat-encyclopedia/network/ddi-rule-923 | ||
| DDI RULE 926 | KERU TCP Request | 2026/10/10 | DDI RULE 926 | /vinfo/us/threat-encyclopedia/network/ddi-rule-926 | ||
| DDI RULE 927 | SISPROC TCP Request | 2026/10/10 | DDI RULE 927 | /vinfo/us/threat-encyclopedia/network/ddi-rule-927 | ||
| DDI RULE 928 | SVPROXY HTTP Request | 2026/10/10 | DDI RULE 928 | /vinfo/us/threat-encyclopedia/network/ddi-rule-928 | ||
| DDI RULE 930 | TROJSMALL HTTP Request | 2026/10/10 | DDI RULE 930 | /vinfo/us/threat-encyclopedia/network/ddi-rule-930 | ||
| DDI RULE 634 | APT - DARKCOMET - HTTP (Request) | 2026/10/10 | DDI RULE 634 | /vinfo/us/threat-encyclopedia/network/ddi-rule-634 | ||
| DDI RULE 642 | MSPOSER - HTTP (Request) | 2026/10/10 | DDI RULE 642 | /vinfo/us/threat-encyclopedia/network/ddi-rule-642 | ||
| DDI RULE 643 | KGANY - HTTP (Request) | 2026/10/10 | DDI RULE 643 | /vinfo/us/threat-encyclopedia/network/ddi-rule-643 | ||
| DDI RULE 647 | WOLYX - HTTP (Request) | 2026/10/10 | DDI RULE 647 | /vinfo/us/threat-encyclopedia/network/ddi-rule-647 | ||
| DDI RULE 649 | ZEUS - HTTP (Request) | 2026/10/10 | DDI RULE 649 | /vinfo/us/threat-encyclopedia/network/ddi-rule-649 | ||
| DDI RULE 650 | APT - LURID - HTTP (Request) | 2026/10/10 | DDI RULE 650 | /vinfo/us/threat-encyclopedia/network/ddi-rule-650 | ||
| DDI RULE 651 | BREDOLAB - HTTP (Request) - Variant 6 | 2026/10/10 | DDI RULE 651 | /vinfo/us/threat-encyclopedia/network/ddi-rule-651 | ||
| DDI RULE 655 | SHIZ - HTTP (Request) | 2026/10/10 | DDI RULE 655 | /vinfo/us/threat-encyclopedia/network/ddi-rule-655 | ||
| DDI RULE 659 | KEYLOGGER - HTTP (Request) | 2026/10/10 | DDI RULE 659 | /vinfo/us/threat-encyclopedia/network/ddi-rule-659 | ||
| DDI RULE 661 | MORCUT - HTTP (Request) | 2026/10/10 | DDI RULE 661 | /vinfo/us/threat-encyclopedia/network/ddi-rule-661 | ||
| DDI RULE 662 | HORSEBEAT - HTTP (Request) | 2026/10/10 | DDI RULE 662 | /vinfo/us/threat-encyclopedia/network/ddi-rule-662 | ||
| DDI RULE 663 | TREPOR - HTTP (Request) | 2026/10/10 | DDI RULE 663 | /vinfo/us/threat-encyclopedia/network/ddi-rule-663 | ||
| DDI RULE 664 | MEDIANA - HTTP (Request) | 2026/10/10 | DDI RULE 664 | /vinfo/us/threat-encyclopedia/network/ddi-rule-664 | ||
| DDI RULE 666 | NEOJIT - HTTP (Request) | 2026/10/10 | DDI RULE 666 | /vinfo/us/threat-encyclopedia/network/ddi-rule-666 | ||
| DDI RULE 669 | POISON HTTP Request | 2026/10/10 | DDI RULE 669 | /vinfo/us/threat-encyclopedia/network/ddi-rule-669 | ||
| DDI RULE 670 | STARTPAGE - HTTP (Request) - Variant 2 | 2026/10/10 | DDI RULE 670 | /vinfo/us/threat-encyclopedia/network/ddi-rule-670 | ||
| DDI RULE 5961 | CVE-2026-23869 - React DDoS Exploit - HTTP(Request) | 2026/10/10 | DDI RULE 5961 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5961 | ||
| DDI RULE 5977 | CVE-2026-21962 - Oracle RCE Exploit - HTTP(Request) | 2026/10/10 | DDI RULE 5977 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5977 | ||
| DDI RULE 5978 | CVE-2026-85046 - Google Chrome RCE Exploit - HTTP(Request) | 2026/10/10 | DDI RULE 5978 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5978 | ||
| DDI RULE 5996 | CVE-2026-20316 - Cisco Secure FMC Software Static/Hard-coded Credentials Exploit - HTTP(Request) | 2026/10/10 | DDI RULE 5996 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5996 | ||
| DDI RULE 6001 | CVE-2026-19490 - CITRIX NETSCALER SAML AUTHENTICATION BYPASS EXPLOIT - HTTP(Request) | 2026/10/10 | DDI RULE 6001 | /vinfo/us/threat-encyclopedia/network/ddi-rule-6001 | ||
| DDI RULE 6002 | CVE-2026-32475 - WORDPRESS REMOTE CODE EXECUTION EXPLOIT - HTTP(Request) | 2026/10/10 | DDI RULE 6002 | /vinfo/us/threat-encyclopedia/network/ddi-rule-6002 | ||
| DDI RULE 6003 | CVE-2023-49105 - OWNCLOUD AUTHENTICATION BYPASS EXPLOIT - HTTP(Request) | 2026/10/10 | DDI RULE 6003 | /vinfo/us/threat-encyclopedia/network/ddi-rule-6003 | ||
| DDI RULE 6004 | CVE-2026-8452 - CITRIX NETSCALER BUFFER OVERFLOW EXPLOIT - HTTP(Request) | 2026/10/10 | DDI RULE 6004 | /vinfo/us/threat-encyclopedia/network/ddi-rule-6004 | ||
| DDI RULE 619 | APT - ZEGOST - HTTP (Request) - Variant 2 | 2026/10/10 | DDI RULE 619 | /vinfo/us/threat-encyclopedia/network/ddi-rule-619 | ||
| DDI RULE 621 | ZEROACCESS - HTTP (Request) - Variant 4 | 2026/10/10 | DDI RULE 621 | /vinfo/us/threat-encyclopedia/network/ddi-rule-621 | ||
| DDI RULE 622 | MADI - HTTP (Request) | 2026/10/10 | DDI RULE 622 | /vinfo/us/threat-encyclopedia/network/ddi-rule-622 | ||
| DDI RULE 623 | CUTWAIL - HTTP (Request) - Variant 4 | 2026/10/10 | DDI RULE 623 | /vinfo/us/threat-encyclopedia/network/ddi-rule-623 | ||
| DDI RULE 627 | SPYEYE - HTTP (Request) - Variant 6 | 2026/10/10 | DDI RULE 627 | /vinfo/us/threat-encyclopedia/network/ddi-rule-627 | ||
| DDI RULE 628 | IRCBOT - HTTP (Request) | 2026/10/10 | DDI RULE 628 | /vinfo/us/threat-encyclopedia/network/ddi-rule-628 | ||
| DDI RULE 629 | ZEROACCESS - HTTP (Request) - Variant 5 | 2026/10/10 | DDI RULE 629 | /vinfo/us/threat-encyclopedia/network/ddi-rule-629 | ||
| DDI RULE 5896 | CVE-2026-9772 - Unraid Web Server FileUpload Command Injection Exploit - HTTP (Request) | 2026/10/10 | DDI RULE 5896 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5896 | ||
| DDI RULE 5903 | CVE-2025-48827 - vBulletin RCE Exploit - HTTP(Request) | 2026/10/10 | DDI RULE 5903 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5903 | ||
| DDI RULE 5904 | CVE-2025-24971 - Dumbdrop CMD Injection Exploit - HTTP(Request) | 2026/10/10 | DDI RULE 5904 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5904 | ||
| DDI RULE 5905 | CVE-2026-54350 - Budibase SQL Injection Exploit - HTTP(Request) | 2026/10/10 | DDI RULE 5905 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5905 | ||
| DDI RULE 5906 | CVE-2025-34322 - Nagios CMD Injection Exploit - HTTP(Request) | 2026/10/10 | DDI RULE 5906 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5906 | ||
| DDI RULE 5907 | CVE-2024-29895 - Cacti CMD Injection Exploit - HTTP(Request) | 2026/10/10 | DDI RULE 5907 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5907 | ||
| DDI RULE 5908 | CVE-2026-22444 - Apache SSRF Exploit - HTTP(Request) | 2026/10/10 | DDI RULE 5908 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5908 | ||
| DDI RULE 5923 | CVE-2026-63030 - Wordpress REST API Plugin SQL Injection Exploit - HTTP(Request) | 2026/10/10 | DDI RULE 5923 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5923 | ||
| DDI RULE 594 | ZEROACCESS - HTTP (Request) - Variant 2 | 2026/10/10 | DDI RULE 594 | /vinfo/us/threat-encyclopedia/network/ddi-rule-594 | ||
| DDI RULE 5954 | DICOM STOW-RS Polyglot File Upload - HTTP(Request) | 2026/10/10 | DDI RULE 5954 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5954 | ||
| DDI RULE 5955 | CVE-2024-36104 -Apache OFBiz Directory Traversal Exploit- HTTP(Response ) | 2026/10/10 | DDI RULE 5955 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5955 | ||
| DDI RULE 5956 | Mllp Illegal Control Character Exploit - HL7(Request) | 2026/10/10 | DDI RULE 5956 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5956 | ||
| DDI RULE 5957 | CVE-2026-42033 - Axios Prototype Pollution Exploit - HTTP(Request) | 2026/10/10 | DDI RULE 5957 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5957 | ||
| DDI RULE 5958 | CVE-2026-63077 - Jetbrains Deserialization Exploit - HTTP(Request) | 2026/10/10 | DDI RULE 5958 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5958 | ||
| DDI RULE 5670 | CVE-2026-1470 - N8N RCE Exploit - HTTP(Request) | 2026/10/10 | DDI RULE 5670 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5670 | ||
| DDI RULE 5671 | CVE-2025-20303 - CISCO XSS EXPLOIT - HTTP(Request) | 2026/10/10 | DDI RULE 5671 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5671 | ||
| DDI RULE 5674 | CVE-2021-1292 - CISCO COMMAND INJECTION - HTTP (Request) | 2026/10/10 | DDI RULE 5674 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5674 | ||
| DDI RULE 5675 | CVE-2025-62507 - REDIS BUFFER OVERFLOW - TCP (Request) | 2026/10/10 | DDI RULE 5675 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5675 | ||
| DDI RULE 5676 | OPENCLAW INSTALLATION SCRIPT DOWNLOAD - HTTP (Response) | 2026/10/10 | DDI RULE 5676 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5676 | ||
| DDI RULE 572 | NETPASS - HTTP (Request) | 2026/10/10 | DDI RULE 572 | /vinfo/us/threat-encyclopedia/network/ddi-rule-572 | ||
| DDI RULE 581 | APT - POISONIVY - HTTP (Request) | 2026/10/10 | DDI RULE 581 | /vinfo/us/threat-encyclopedia/network/ddi-rule-581 | ||
| DDI RULE 582 | APT - POISONIVY - HTTP (Request) - Variant 2 | 2026/10/10 | DDI RULE 582 | /vinfo/us/threat-encyclopedia/network/ddi-rule-582 | ||
| DDI RULE 584 | METEIT - HTTP (Request) | 2026/10/10 | DDI RULE 584 | /vinfo/us/threat-encyclopedia/network/ddi-rule-584 | ||
| DDI RULE 5849 | Malicious JA4 Fingerprint SSL Client Connection | 2026/10/10 | DDI RULE 5849 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5849 | ||
| DDI RULE 586 | GEDDEL TCP Request - Class 1 | 2026/10/10 | DDI RULE 586 | /vinfo/us/threat-encyclopedia/network/ddi-rule-586 | ||
| DDI RULE 587 | MURCY - HTTP (Request) | 2026/10/10 | DDI RULE 587 | /vinfo/us/threat-encyclopedia/network/ddi-rule-587 | ||
| DDI RULE 5873 | CVE-2026-10727 - Ivanti Endpoint Manager Command Injection Exploit - HTTP(Response) | 2026/10/10 | DDI RULE 5873 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5873 | ||
| DDI RULE 5888 | CVE-2025-1829 - TOTOLINK Command Injection Exploit - HTTP(Request) | 2026/10/10 | DDI RULE 5888 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5888 | ||
| DDI RULE 534 | KATUSHA - HTTP (Request) | 2026/10/10 | DDI RULE 534 | /vinfo/us/threat-encyclopedia/network/ddi-rule-534 | ||
| DDI RULE 5358 | CVE-2024-57727 - SIMPLEHELP DIRECTORY TRAVERSAL - HTTP (Request) | 2026/10/10 | DDI RULE 5358 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5358 | ||
| DDI RULE 541 | PLANKTON (Android) - HTTP (Request) | 2026/10/10 | DDI RULE 541 | /vinfo/us/threat-encyclopedia/network/ddi-rule-541 | ||
| DDI RULE 548 | APT - ZEGOST - HTTP (Request) | 2026/10/10 | DDI RULE 548 | /vinfo/us/threat-encyclopedia/network/ddi-rule-548 | ||
| DDI RULE 550 | APT - FAKEM - TCP - Variant 3 | 2026/10/10 | DDI RULE 550 | /vinfo/us/threat-encyclopedia/network/ddi-rule-550 | ||
| DDI RULE 552 | YAKES - HTTP (Request) - Variant 4 | 2026/10/10 | DDI RULE 552 | /vinfo/us/threat-encyclopedia/network/ddi-rule-552 | ||
| DDI RULE 559 | Successful log on to MySQL service | 2026/10/10 | DDI RULE 559 | /vinfo/us/threat-encyclopedia/network/ddi-rule-559 | ||
| DDI RULE 560 | A privileged user attempted to log on to MySQL service | 2026/10/10 | DDI RULE 560 | /vinfo/us/threat-encyclopedia/network/ddi-rule-560 | ||
| DDI RULE 561 | A default user attempted to log on to MySQL service | 2026/10/10 | DDI RULE 561 | /vinfo/us/threat-encyclopedia/network/ddi-rule-561 | ||
| DDI RULE 562 | Unsuccessful log on to MySQL service | 2026/10/10 | DDI RULE 562 | /vinfo/us/threat-encyclopedia/network/ddi-rule-562 | ||
| DDI RULE 5638 | CVE-2025-60021 - Apache bRPC Heap Profiler Command Injection Exploit - HTTP(Request) | 2026/10/10 | DDI RULE 5638 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5638 | ||
| DDI RULE 564 | MySQL service responded with more than 5 MB of data | 2026/10/10 | DDI RULE 564 | /vinfo/us/threat-encyclopedia/network/ddi-rule-564 | ||
| DDI RULE 5668 | CVE-2025-6934 - OPALESTATE WORDPRESS - HTTP (Request) | 2026/10/10 | DDI RULE 5668 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5668 | ||
| DDI RULE 5669 | CVE-2025-5965 - CENTREON BACKUP EXPLOIT - HTTP (Request) | 2026/10/10 | DDI RULE 5669 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5669 | ||
| DDI RULE 483 | IRCBOT - IRC | 2026/10/10 | DDI RULE 483 | /vinfo/us/threat-encyclopedia/network/ddi-rule-483 | ||
| DDI RULE 488 | MDMBOT - TCP | 2026/10/10 | DDI RULE 488 | /vinfo/us/threat-encyclopedia/network/ddi-rule-488 | ||
| DDI RULE 502 | HTran - TCP | 2026/10/10 | DDI RULE 502 | /vinfo/us/threat-encyclopedia/network/ddi-rule-502 | ||
| DDI RULE 513 | KRADDARE - HTTP (Request) | 2026/10/10 | DDI RULE 513 | /vinfo/us/threat-encyclopedia/network/ddi-rule-513 | ||
| DDI RULE 520 | ANSERVER - HTTP (Request) | 2026/10/10 | DDI RULE 520 | /vinfo/us/threat-encyclopedia/network/ddi-rule-520 | ||
| DDI RULE 5266 | CLICKFIXLOADER - HTTP (Request) | 2026/10/10 | DDI RULE 5266 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5266 | ||
| DDI RULE 527 | SPITMO - HTTP (Request) | 2026/10/10 | DDI RULE 527 | /vinfo/us/threat-encyclopedia/network/ddi-rule-527 | ||
| DDI RULE 5273 | CVE-2024-43363 - CACTI RCE EXPLOIT - HTTP (Request) | 2026/10/10 | DDI RULE 5273 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5273 | ||
| DDI RULE 530 | SPYEYE - HTTP (Request) - Variant 5 | 2026/10/10 | DDI RULE 530 | /vinfo/us/threat-encyclopedia/network/ddi-rule-530 | ||
| DDI RULE 531 | SALITY - HTTP (Request) | 2026/10/10 | DDI RULE 531 | /vinfo/us/threat-encyclopedia/network/ddi-rule-531 | ||
| DDI RULE 532 | ZEROACCESS - HTTP (Request) | 2026/10/10 | DDI RULE 532 | /vinfo/us/threat-encyclopedia/network/ddi-rule-532 | ||
| DDI RULE 5328 | Meterpreter Command Execution - HTTP (Response) | 2026/10/10 | DDI RULE 5328 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5328 | ||
| DDI RULE 533 | YAKES - HTTP (Request) - Variant 2 | 2026/10/10 | DDI RULE 533 | /vinfo/us/threat-encyclopedia/network/ddi-rule-533 | ||
| DDI RULE 372 | APT - GHOSTRAT - TCP | 2026/10/10 | DDI RULE 372 | /vinfo/us/threat-encyclopedia/network/ddi-rule-372 | ||
| DDI RULE 420 | PROXY - HTTP (Request) | 2026/10/10 | DDI RULE 420 | /vinfo/us/threat-encyclopedia/network/ddi-rule-420 | ||
| DDI RULE 422 | QAKBOT - HTTP (Request) | 2026/10/10 | DDI RULE 422 | /vinfo/us/threat-encyclopedia/network/ddi-rule-422 | ||
| DDI RULE 426 | SALITY - HTTP (Request) - Variant 6 | 2026/10/10 | DDI RULE 426 | /vinfo/us/threat-encyclopedia/network/ddi-rule-426 | ||
| DDI RULE 436 | CHIR - UDP | 2026/10/10 | DDI RULE 436 | /vinfo/us/threat-encyclopedia/network/ddi-rule-436 | ||
| DDI RULE 4388 | EDIMAX RCE EXPLOIT - HTTP (REQUEST) | 2026/10/10 | DDI RULE 4388 | /vinfo/us/threat-encyclopedia/network/ddi-rule-4388 | ||
| DDI RULE 443 | QDDOS - HTTP (Request) | 2026/10/10 | DDI RULE 443 | /vinfo/us/threat-encyclopedia/network/ddi-rule-443 | ||
| DDI RULE 445 | QDDOS - TCP | 2026/10/10 | DDI RULE 445 | /vinfo/us/threat-encyclopedia/network/ddi-rule-445 | ||
| DDI RULE 448 | QAKBOT - HTTP (Request) - Variant 2 | 2026/10/10 | DDI RULE 448 | /vinfo/us/threat-encyclopedia/network/ddi-rule-448 | ||
| DDI RULE 450 | FAKEAV - HTTP (Request) - Variant 31 | 2026/10/10 | DDI RULE 450 | /vinfo/us/threat-encyclopedia/network/ddi-rule-450 | ||
| DDI RULE 4600 | Default Malleable C2 Profiles - HTTP (REQUEST) - Variant 2 | 2026/10/10 | DDI RULE 4600 | /vinfo/us/threat-encyclopedia/network/ddi-rule-4600 | ||
| DDI RULE 468 | AUTORUN - HTTP (Request) - Variant 16 | 2026/10/10 | DDI RULE 468 | /vinfo/us/threat-encyclopedia/network/ddi-rule-468 | ||
| DDI RULE 474 | Malicious IP address - Variant 4 | 2026/10/10 | DDI RULE 474 | /vinfo/us/threat-encyclopedia/network/ddi-rule-474 | ||
| DDI RULE 4810 | CVE-2022-35690 - Adobe ColdFusion BUFFER OVERFLOW EXPLOIT - TCP(REQUEST) | 2026/10/10 | DDI RULE 4810 | /vinfo/us/threat-encyclopedia/network/ddi-rule-4810 | ||
| DDI RULE 4813 | WINEXE REMOTE COMMAND EXECUTION - SMB(REQUEST) | 2026/10/10 | DDI RULE 4813 | /vinfo/us/threat-encyclopedia/network/ddi-rule-4813 | ||
| DDI RULE 1805 | Possible CVE-2015-0240 - NULL Session in ServerPasswordSet | 2026/10/10 | DDI RULE 1805 | /vinfo/us/threat-encyclopedia/network/ddi-rule-1805 | ||
| DDI RULE 189 | GUMBLAR - HTTP (Request) - Variant 2 | 2026/10/10 | DDI RULE 189 | /vinfo/us/threat-encyclopedia/network/ddi-rule-189 | ||
| DDI RULE 2001 | LSASS Dump File Upload | 2026/10/10 | DDI RULE 2001 | /vinfo/us/threat-encyclopedia/network/ddi-rule-2001 | ||
| DDI RULE 2058 | CVE-2016-0128 - Windows Downgrade Vulnerability - DCE-RPC | 2026/10/10 | DDI RULE 2058 | /vinfo/us/threat-encyclopedia/network/ddi-rule-2058 | ||
| DDI RULE 2059 | CVE-2016-0128 - Unencrypted Authentication Level - SAMR (Request) | 2026/10/10 | DDI RULE 2059 | /vinfo/us/threat-encyclopedia/network/ddi-rule-2059 | ||
| DDI RULE 211 | PRORAT - HTTP (Request) | 2026/10/10 | DDI RULE 211 | /vinfo/us/threat-encyclopedia/network/ddi-rule-211 | ||
| DDI RULE 212 | NYXEM - HTTP (Request) | 2026/10/10 | DDI RULE 212 | /vinfo/us/threat-encyclopedia/network/ddi-rule-212 | ||
| DDI RULE 240 | HUPIGON - HTTP (Request) - Variant 3 | 2026/10/10 | DDI RULE 240 | /vinfo/us/threat-encyclopedia/network/ddi-rule-240 | ||
| DDI RULE 2688 | WEBLOGIC T3 JAVA DESERIALIZATION REMOTE CODE EXECUTION - TCP(Request) - Variant 2 | 2026/10/10 | DDI RULE 2688 | /vinfo/us/threat-encyclopedia/network/ddi-rule-2688 | ||
| DDI RULE 2721 | UNDERMINER- Exploit kit - HTTP (Request) | 2026/10/10 | DDI RULE 2721 | /vinfo/us/threat-encyclopedia/network/ddi-rule-2721 | ||
| DDI RULE 2727 | MAGNITUDE - Exploit Kit - HTTP (Response) - Variant 2 | 2026/10/10 | DDI RULE 2727 | /vinfo/us/threat-encyclopedia/network/ddi-rule-2727 | ||
| DDI RULE 2733 | APT - MARADE - HTTP (Request) - Variant 2 | 2026/10/10 | DDI RULE 2733 | /vinfo/us/threat-encyclopedia/network/ddi-rule-2733 | ||
| DDI RULE 306 | BANKER - HTTP (Request) - Variant 3 | 2026/10/10 | DDI RULE 306 | /vinfo/us/threat-encyclopedia/network/ddi-rule-306 | ||
| DDI RULE 309 | DAGGER - TCP | 2026/10/10 | DDI RULE 309 | /vinfo/us/threat-encyclopedia/network/ddi-rule-309 | ||
| DDI RULE 351 | ZLOB - HTTP (Request) | 2026/10/10 | DDI RULE 351 | /vinfo/us/threat-encyclopedia/network/ddi-rule-351 | ||
| DDI RULE 1307 | SMB or SMB2 PE file Upload detected | 2026/10/10 | DDI RULE 1307 | /vinfo/us/threat-encyclopedia/network/ddi-rule-1307 | ||
| DDI RULE 1310 | SMB CreateService request detected | 2026/10/10 | DDI RULE 1310 | /vinfo/us/threat-encyclopedia/network/ddi-rule-1310 | ||
| DDI RULE 1311 | SMB DeleteService request detected | 2026/10/10 | DDI RULE 1311 | /vinfo/us/threat-encyclopedia/network/ddi-rule-1311 | ||
| DDI RULE 1318 | File Download From known CNC Server detected | 2026/10/10 | DDI RULE 1318 | /vinfo/us/threat-encyclopedia/network/ddi-rule-1318 | ||
| DDI RULE 1670 | Successful log on to Network Share | 2026/10/10 | DDI RULE 1670 | /vinfo/us/threat-encyclopedia/network/ddi-rule-1670 | ||
| DDI RULE 1751 | Possible PsExec Tool Detected | 2026/10/10 | DDI RULE 1751 | /vinfo/us/threat-encyclopedia/network/ddi-rule-1751 | ||
| DDI RULE 1792 | Remote Schedule Tasks through SMB2 protocol detected - Create Command | 2026/10/10 | DDI RULE 1792 | /vinfo/us/threat-encyclopedia/network/ddi-rule-1792 | ||
| DDI RULE 1793 | Remote Schedule Tasks through SMB2 protocol detected - Run Command | 2026/10/10 | DDI RULE 1793 | /vinfo/us/threat-encyclopedia/network/ddi-rule-1793 | ||
| DDI RULE 1794 | Remote Schedule Tasks through SMB2 protocol detected - Delete Command | 2026/10/10 | DDI RULE 1794 | /vinfo/us/threat-encyclopedia/network/ddi-rule-1794 | ||
| DDI RULE 1000 | KIRPICH - HTTP (Request) | 2026/10/10 | DDI RULE 1000 | /vinfo/us/threat-encyclopedia/network/ddi-rule-1000 | ||
| DDI RULE 5998 | Possible DGA - DNS (Response) - Variant 3 | 2026/10/07 | DDI RULE 5998 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5998 | ||
| DDI RULE 5863 | Oracle PeopleSoft HubMBeanPersistance Deserialization of Untrusted Data RCE Exploit - HTTP (Request) | 2026/10/04 | DDI RULE 5863 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5863 | ||
| DDI RULE 5988 | CVE-2026-88771 - CITRIX NETSCALER COMMAND INJECTION EXPLOIT - HTTP(Request) | 2026/10/01 | DDI RULE 5988 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5988 | ||
| DDI RULE 5989 | CVE-2025-62593 - ANYSCALE CODE INJECTION EXPLOIT - HTTP(Request) | 2026/10/01 | DDI RULE 5989 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5989 | ||
| DDI RULE 5990 | CVE-2026-7298 - METABASE SQL INJECTION EXPLOIT - HTTP(Request) | 2026/10/01 | DDI RULE 5990 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5990 | ||
| DDI RULE 5991 | CVE-2021-20021 - SONICWALL IMPROPER PRIVILEGE MANAGEMENT EXPLOIT - HTTP(Request) | 2026/10/01 | DDI RULE 5991 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5991 | ||
| DDI RULE 5992 | CVE-2026-55255 - LANGFLOW INSECURE DIRECT OBJECT REFERENCE EXPLOIT - HTTP(Request) | 2026/10/01 | DDI RULE 5992 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5992 | ||
| DDI RULE 5993 | CVE-2019-9875 - SITECORE INSECURE DESERIALIZATION EXPLOIT - HTTP(Request) | 2026/10/01 | DDI RULE 5993 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5993 | ||
| DDI RULE 5994 | CVE-2026-64849 - MLFLOW SSRF EXPLOIT - HTTP(Request) | 2026/10/01 | DDI RULE 5994 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5994 | ||
| DDI RULE 5995 | CVE-2026-13086 - WATCHGUARD BUFFER OVERFLOW EXPLOIT - HTTP(REQUEST) | 2026/10/01 | DDI RULE 5995 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5995 | ||
| DDI RULE 4462 | Metasploit (Payload) - RC4 Encrypted Reverse TCP - TCP (Request) | 2026/10/01 | DDI RULE 4462 | /vinfo/us/threat-encyclopedia/network/ddi-rule-4462 | ||
| DDI RULE 5973 | CVE-2026-34486 - Apache Tomcat Tribes EncryptInterceptor AuthBypass Exploit - TCP (Request) | 2026/09/28 | DDI RULE 5973 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5973 | ||
| DDI RULE 5974 | CVE-2026-49869 - Kestra RCE Exploit - HTTP(Request) | 2026/09/28 | DDI RULE 5974 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5974 | ||
| DDI RULE 5975 | CVE-2021-27137 - DD-WRT UPnP SSDP Buffer Overflow Exploit - UDP (Request) | 2026/09/28 | DDI RULE 5975 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5975 | ||
| DDI RULE 5976 | CVE-2026-44756 - Overpass Buffer Overflow Exploit - HTTP(Request) | 2026/09/28 | DDI RULE 5976 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5976 | ||
| DDI RULE 5979 | CVE-2026-13050 - WATCHGUARD WIRELESS BUFFER OVERFLOW EXPLOIT - HTTP(Request) | 2026/09/28 | DDI RULE 5979 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5979 | ||
| DDI RULE 5980 | CVE-2026-13054 - WATCHGUARD SIGIMPORT DIRECTORY TRAVERSAL EXPLOIT - HTTP(Request) | 2026/09/28 | DDI RULE 5980 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5980 | ||
| DDI RULE 5981 | CVE-2026-18265 - QSTOR KAPACITOR SSRF EXPLOIT - HTTP(Request) | 2026/09/28 | DDI RULE 5981 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5981 | ||
| DDI RULE 5982 | CVE-2026-59689 - KEMP ENABLEXROOT BACKDOOR EXPLOIT - HTTP(Request) | 2026/09/28 | DDI RULE 5982 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5982 | ||
| DDI RULE 5984 | CVE-2026-69256 - FLOWISE CUSTOMCSV RCE EXPLOIT - HTTP(Request) | 2026/09/28 | DDI RULE 5984 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5984 | ||
| DDI RULE 5985 | CVE-2026-85706 - GITLAB DIRECTORY TRAVERSAL EXPLOIT - HTTP(Request) | 2026/09/28 | DDI RULE 5985 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5985 | ||
| DDI RULE 5986 | CVE-2026-75650 - ADOBE COMMERCE SERVER-SIDE TEMPLATE INJECTION EXPLOIT - HTTP(Request) | 2026/09/28 | DDI RULE 5986 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5986 | ||
| DDI RULE 5987 | CVE-2026-21643 - FORTICLIENT EMS SQL INJECTION EXPLOIT - HTTP(Request) | 2026/09/28 | DDI RULE 5987 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5987 | ||
| DDI RULE 5960 | MCP Server/Discover Communication - HTTP (Response) | 2026/09/28 | DDI RULE 5960 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5960 | ||
| DDI RULE 5962 | CVE-2026-64638 - Wordpress XSS Exploit - HTTP(Request) | 2026/09/28 | DDI RULE 5962 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5962 | ||
| DDI RULE 5963 | CVE-2026-9198 - IBM Langflow RCE Exploit - HTTP(Request) | 2026/09/28 | DDI RULE 5963 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5963 | ||
| DDI RULE 5964 | CVE-2026-15409 - SonicWall SMA1000 SSRF Exploit - HTTP (Request) | 2026/09/28 | DDI RULE 5964 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5964 | ||
| DDI RULE 5965 | Syslog Directory Traversal - UDP(Request) | 2026/09/28 | DDI RULE 5965 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5965 | ||
| DDI RULE 5966 | Papercut MF/NG RCE Exploit - HTTP(Request) | 2026/09/28 | DDI RULE 5966 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5966 | ||
| DDI RULE 5967 | CVE-2014-0094 - APACHE AUTHBYPASS EXPLOIT - HTTP(Request) | 2026/09/28 | DDI RULE 5967 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5967 | ||
| DDI RULE 5968 | CVE-2026-9586 - Sangoma Switchvox SQL Injection Exploit - HTTP(Request ) | 2026/09/28 | DDI RULE 5968 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5968 | ||
| DDI RULE 5969 | CVE-2026-60004 - Gitea Command Injection Exploit - HTTP(Request) | 2026/09/28 | DDI RULE 5969 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5969 | ||
| DDI RULE 5970 | CVE-2026-73678 - Mindsdb RCE Exploit - HTTP(Request) | 2026/09/28 | DDI RULE 5970 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5970 | ||
| DDI RULE 5971 | CVE-2026-82329 - Jfrog Authentication Bypass Exploit - HTTP(Request) | 2026/09/28 | DDI RULE 5971 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5971 | ||
| DDI RULE 5972 | CVE-2026-69623 - WINDOWS IPP HEAP BUFFER OVERFLOW EXPLOIT - HTTP(Response) | 2026/09/28 | DDI RULE 5972 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5972 | ||
| DDI RULE 5959 | CVE-2025-49132 - Pterodactyl RCE Exploit - HTTP(Request) | 2026/09/28 | DDI RULE 5959 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5959 | ||
| DDI RULE 5939 | CVE-2026-56291 - JOOMLA BALBOOA FILE UPLOAD EXPLOIT - HTTP(Request) | 2026/09/28 | DDI RULE 5939 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5939 | ||
| DDI RULE 5953 | Malformed PDU Length - DICOM(Request) | 2026/08/20 | DDI RULE 5953 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5953 | ||
| DDI RULE 5950 | CVE-2026-20181 - Cisco ISE zipFiles Traversal Exploit - HTTP(Request) | 2026/08/17 | DDI RULE 5950 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5950 | ||
| DDI RULE 5951 | CVE-2022-24816 - Jai-Ext Remote Code Execution Exploit - HTTP(Request) | 2026/08/17 | DDI RULE 5951 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5951 | ||
| DDI RULE 5949 | Empty Called AE Title - DICOM(Request) | 2026/08/13 | DDI RULE 5949 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5949 | ||
| DDI RULE 5946 | CVE-2014-0130 - Redhat Directory Traversal Exploit - HTTP(Request) | 2026/08/12 | DDI RULE 5946 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5946 | ||
| DDI RULE 5945 | CVE-2026-58048 - Cpanel SQL Injection Exploit - HTTP(Request) | 2026/08/11 | DDI RULE 5945 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5945 | ||
| DDI RULE 5947 | CVE-2026-15410 - Sonicwall Command Injection Exploit - HTTP(Request) | 2026/08/11 | DDI RULE 5947 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5947 | ||
| DDI RULE 5948 | CVE-2021-21315 - Systeminform Command Injection Exploit - HTTP(Request) | 2026/08/11 | DDI RULE 5948 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5948 | ||
| DDI RULE 5934 | Default or Tooling AE Title Exploit - DICOM(Request) | 2026/08/10 | DDI RULE 5934 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5934 | ||
| DDI RULE 5941 | CVE-2026-48282 - Adobe ColdFusion Directory Traversal Exploit - HTTP(Request) | 2026/08/10 | DDI RULE 5941 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5941 | ||
| DDI RULE 5942 | CVE-2026-8451 - Citrix Netscaler Out of Bounds Read Exploit - HTTP(Request) | 2026/08/10 | DDI RULE 5942 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5942 | ||
| DDI RULE 5943 | CVE-2025-54068 - Laravel Livewire Code Injection Exploit - HTTP(Request) | 2026/08/10 | DDI RULE 5943 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5943 | ||
| DDI RULE 5944 | CVE-2022-37055 - Dlink Command Injection Exploit - HTTP(Request) | 2026/08/10 | DDI RULE 5944 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5944 | ||
| DDI RULE 5938 | Mirth Connect XStream Deserialization Exploit - HTTP(Request) | 2026/08/05 | DDI RULE 5938 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5938 | ||
| DDI RULE 5935 | CVE-2020-25223 - Sophos CMD Injection Exploit - HTTP(Request) | 2026/08/04 | DDI RULE 5935 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5935 | ||
| DDI RULE 5937 | CVE-2026-26026 - GLPI-Project Server-Side Template Injection Exploit - HTTP(Request) | 2026/08/04 | DDI RULE 5937 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5937 | ||
| DDI RULE 5909 | CVE-2026-9256 - NGINX Buffer Overflow Exploit - HTTP(Request) | 2026/07/30 | DDI RULE 5909 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5909 | ||
| DDI RULE 5931 | CVE-2026-8247 - WatchGuard admd TS Agent Username Overflow Exploit - TCP (Response) | 2026/07/30 | DDI RULE 5931 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5931 | ||
| DDI RULE 5932 | CVE-2026-33721 - MapServer Buffer Overflow SLD Exploit - HTTP(Request) | 2026/07/30 | DDI RULE 5932 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5932 | ||
| DDI RULE 5933 | CVE-2026-29202 - CPANEL WMH RCE EXPLOIT - HTTP(Request) | 2026/07/30 | DDI RULE 5933 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5933 | ||
| DDI RULE 5928 | CVE-2026-39938 - Cacti LFI Exploit - HTTP(Request) | 2026/07/29 | DDI RULE 5928 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5928 | ||
| DDI RULE 5927 | CVE-2025-5086 - Delmia RCE Exploit - HTTP(Request) | 2026/07/28 | DDI RULE 5927 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5927 | ||
| DDI RULE 5929 | CVE-2026-48908 - JoomShaper SP Page Builder RCE Exploit - HTTP(Request) | 2026/07/28 | DDI RULE 5929 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5929 | ||
| DDI RULE 5924 | CVE-2024-13161 - Ivanti Directory Traversal Exploit - HTTP(Request) | 2026/07/27 | DDI RULE 5924 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5924 | ||
| DDI RULE 5925 | CVE-2020-15415 - DrayTek CMD Injection Exploit - HTTP(Request) | 2026/07/27 | DDI RULE 5925 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5925 | ||
| DDI RULE 5926 | CVE-2020-10181 - Sumavision CSRF Exploit - HTTP(Request) | 2026/07/27 | DDI RULE 5926 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5926 | ||
| DDI RULE 5920 | Possible Encrypted Random Domain - DNS (Response) | 2026/07/22 | DDI RULE 5920 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5920 | ||
| DDI RULE 5913 | CVE-2025-47851 - JETBRAINS XSS EXPLOIT - HTTP(Request) | 2026/07/21 | DDI RULE 5913 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5913 | ||
| DDI RULE 5921 | CVE-2026-21627 - Joomla plugin Arbitrary File Upload Exploit - HTTP(Request) | 2026/07/21 | DDI RULE 5921 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5921 | ||
| DDI RULE 5922 | CVE-2026-49049 - Joomla Helix3 plugin Path Traversal Exploit - HTTP(Request) | 2026/07/21 | DDI RULE 5922 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5922 | ||
| DDI RULE 5910 | CVE-2025-56769 - JAVAX RCE EXPLOIT - HTTP(Request) | 2026/07/20 | DDI RULE 5910 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5910 | ||
| DDI RULE 5911 | CVE-2025-57819 - FREEPBX SQL INJECTION EXPLOIT - HTTP(Request) | 2026/07/20 | DDI RULE 5911 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5911 | ||
| DDI RULE 5912 | CVE-2025-20362 - CISCO TRAVERSAL EXPLOIT - HTTP(Request) | 2026/07/20 | DDI RULE 5912 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5912 | ||
| DDI RULE 5914 | CVE-2025-34152 - SHENZHEN AITEMI RCE EXPLOIT - HTTP(Request) | 2026/07/20 | DDI RULE 5914 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5914 | ||
| DDI RULE 5915 | Quest NetVault SQL Injection Exploit- HTTP (Request) | 2026/07/20 | DDI RULE 5915 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5915 | ||
| DDI RULE 5916 | CVE-2026-9787 - Quest NetVault Command Injection Exploit - HTTP (Request) | 2026/07/20 | DDI RULE 5916 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5916 | ||
| DDI RULE 5917 | CVE-2026-50518 - Microsoft Windows DHCP Client-FQDN Punycode Buffer Overflow Exploit - UDP (Request) | 2026/07/20 | DDI RULE 5917 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5917 | ||
| DDI RULE 5918 | CVE-2026-54992 - MSMQ PGM Multicast Heap Buffer Overflow Exploit - PGM (Request) | 2026/07/20 | DDI RULE 5918 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5918 | ||
| DDI RULE 5919 | CVE-2026-56188 - SMB2 Session Setup Request DoS Exploit - SMB2 (Request) | 2026/07/20 | DDI RULE 5919 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5919 | ||
| DDI RULE 5898 | CVE-2026-50522 - Sharepoint RCE Exploit - HTTP(Request) | 2026/07/15 | DDI RULE 5898 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5898 | ||
| DDI RULE 5899 | CVE-2026-56164 - Sharepoint Elevation Exploit - HTTP(Request) | 2026/07/15 | DDI RULE 5899 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5899 | ||
| DDI RULE 5900 | CVE-2026-48907 - Joomla Content Editor (JCE) RCE Exploit - HTTP(Request) | 2026/07/15 | DDI RULE 5900 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5900 | ||
| DDI RULE 5901 | CVE-2026-45087 - Dalfox XSS Scanner RCE Exploit - HTTP(Request) | 2026/07/15 | DDI RULE 5901 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5901 | ||
| DDI RULE 5902 | CVE-2026-20262 - Cisco Catalyst SD-WAN Manager Directory Traversal Exploit- HTTP(Request) | 2026/07/15 | DDI RULE 5902 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5902 | ||
| DDI RULE 5897 | CVE-2026-9773 - Unraid Web Server ToggleState Command Injection RCE Exploit - HTTP (Request) | 2026/07/09 | DDI RULE 5897 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5897 | ||
| DDI RULE 5850 | Malicious JA4S Fingerprint SSL Server Connection | 2026/07/02 | DDI RULE 5850 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5850 | ||
| DDI RULE 5851 | Malicious JA4H Fingerprint HTTP(Request) | 2026/07/02 | DDI RULE 5851 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5851 | ||
| DDI RULE 5871 | CVE-2026-8037 - Progress Kemp LoadMaster dolistapikeys SQLi RCE - HTTP (Request) | 2026/07/02 | DDI RULE 5871 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5871 | ||
| DDI RULE 5889 | CVE-2026-42208 - LITELLM SQL INJECTION EXPLOIT - HTTP(Request) | 2026/07/02 | DDI RULE 5889 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5889 | ||
| DDI RULE 5890 | CVE-2025-55296 - LIBRENMS XSS EXPLOIT - HTTP(Request) | 2026/07/02 | DDI RULE 5890 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5890 | ||
| DDI RULE 5891 | CVE-2025-6970 - WORDPRESS SQL Injection Exploit - HTTP(Request) | 2026/07/02 | DDI RULE 5891 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5891 | ||
| DDI RULE 5892 | CVE-2025-14499 - ICEWARP XSS EXPLOIT - HTTP(Request) | 2026/07/02 | DDI RULE 5892 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5892 | ||
| DDI RULE 5893 | CVE-2026-49373 - JetBrains TeamCity Command Injection Exploit - HTTP(Request) | 2026/07/02 | DDI RULE 5893 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5893 | ||
| DDI RULE 5894 | CVE-2025-52577 - Advantech SQL Injection Exploit - HTTP(Request) | 2026/07/02 | DDI RULE 5894 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5894 | ||
| DDI RULE 5895 | CVE-2024-12856 - Four Faith CMD Injection Exploit - HTTP(Request) | 2026/07/02 | DDI RULE 5895 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5895 | ||
| DDI RULE 5875 | CVE-2025-2775 - SysAid XXE Exploit - HTTP(Request) | 2026/06/29 | DDI RULE 5875 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5875 | ||
| DDI RULE 5876 | CVE-2026-10520 - Ivanti RCE Exploit - HTTP(Request) | 2026/06/29 | DDI RULE 5876 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5876 | ||
| DDI RULE 5877 | CVE-2015-8979 DICOM BUFFER OVERFLOW EXPLOIT TCP(REQUEST) | 2026/06/29 | DDI RULE 5877 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5877 | ||
| DDI RULE 5878 | DICOM WADO-RS Authentication Bypass Exploit - HTTP(Request) | 2026/06/29 | DDI RULE 5878 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5878 | ||
| DDI RULE 5879 | DICOM WADO URI - HTTP(Request) | 2026/06/29 | DDI RULE 5879 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5879 | ||
| DDI RULE 5880 | DICOM QIDORS - HTTP(Request) | 2026/06/29 | DDI RULE 5880 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5880 | ||
| DDI RULE 5881 | CVE-2024-42845 - DICOM Invesalius Exploit - HTTP(Response) | 2026/06/29 | DDI RULE 5881 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5881 | ||
| DDI RULE 5882 | DICOM STOWRS - HTTP(Request) | 2026/06/29 | DDI RULE 5882 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5882 | ||
| DDI RULE 5883 | CVE-2014-3861 - HL7 CDA XSL XSS EXPLOIT - HTTP(Request) | 2026/06/29 | DDI RULE 5883 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5883 | ||
| DDI RULE 5884 | CVE-2014-5452 - HL7 ONMOUSEOVER XSS EXPLOIT - HTTP(Request) | 2026/06/29 | DDI RULE 5884 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5884 | ||
| DDI RULE 5885 | CVE-2014-3862 - HL7 RENDER MULTIMEDIA XSS EXPLOIT - HTTP(Request) | 2026/06/29 | DDI RULE 5885 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5885 | ||
| DDI RULE 5886 | CVE-2014-1635 - Belkin Overflow Exploit - HTTP(Request) | 2026/06/29 | DDI RULE 5886 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5886 | ||
| DDI RULE 5887 | CVE-2026-46586 - Apache OFBiz Code Injection Exploit - HTTP(Request) | 2026/06/29 | DDI RULE 5887 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5887 | ||
| DDI RULE 5862 | CVE-2024-7399 - Samsung Traversal Exploit - HTTP(Request) | 2026/06/25 | DDI RULE 5862 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5862 | ||
| DDI RULE 5869 | CVE-2026-11443 - Allegra downloadAttachment Cross-Site Scripting Exploit - HTTP (Request) | 2026/06/25 | DDI RULE 5869 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5869 | ||
| DDI RULE 5870 | CVE-2026-8037 - Progress Software Kemp LoadMaster Uninitialized Memory RCE Exploit - HTTP (Request) | 2026/06/25 | DDI RULE 5870 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5870 | ||
| DDI RULE 5872 | Oracle PeopleSoft PSEMHUB ExecuteProcessActivityCommand File Write RCE - HTTP (Request) | 2026/06/23 | DDI RULE 5872 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5872 | ||
| DDI RULE 5860 | CVE-2019-9670 - Zimbra XXE Exploit - HTTP(Request) | 2026/06/18 | DDI RULE 5860 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5860 | ||
| DDI RULE 5861 | Possible DGA - DNS (Response) - Variant 2 | 2026/06/17 | DDI RULE 5861 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5861 | ||
| DDI RULE 5855 | CVE-2026-35273 - PeopleSoft PeopleTools Environment Management Hub (PSEMHUB) SSRF Exploit- HTTP(Request) | 2026/06/16 | DDI RULE 5855 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5855 | ||
| DDI RULE 5868 | CVE-2026-39813 - Fortinet Authentication Bypass Exploit - HTTP(Request) | 2026/06/16 | DDI RULE 5868 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5868 | ||
| DDI RULE 5864 | CVE-2026-49160 - IIS HTTP/2 HPACK Decompression Bomb DDOS Exploit - HTTP/2 (Request) | 2026/06/15 | DDI RULE 5864 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5864 | ||
| DDI RULE 5865 | CVE-2026-9082 - Drupal Core SQL Injection Exploit - HTTP(Response) | 2026/06/15 | DDI RULE 5865 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5865 | ||
| DDI RULE 5866 | CVE-2026-20148 - Cisco Identity Services Engine Directory Traversal Exploit - HTTP(Request) | 2026/06/15 | DDI RULE 5866 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5866 | ||
| DDI RULE 5867 | CVE-2026-50751 - Checkpoint IKEv1 Authentication Bypass SEN - UDP(Request) | 2026/06/15 | DDI RULE 5867 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5867 | ||
| DDI RULE 5856 | CVE-2025-3836 - ZOHO SQL INJECTION EXPLOIT - HTTP(Request) | 2026/06/10 | DDI RULE 5856 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5856 | ||
| DDI RULE 5857 | CVE-2025-52367 - PIVOTX XSS EXPLOIT - HTTP(Request) | 2026/06/10 | DDI RULE 5857 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5857 | ||
| DDI RULE 5853 | CVE-2026-21902 - Juniper RCE Exploit - HTTP(Request) | 2026/06/09 | DDI RULE 5853 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5853 | ||
| DDI RULE 5854 | CVE-2023-26801 - LB-Link CMD Injection Exploit - HTTP(Request) | 2026/06/09 | DDI RULE 5854 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5854 | ||
| DDI RULE 5847 | Langflow Code Injection RCE Exploit - HTTP (Request) | 2026/06/02 | DDI RULE 5847 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5847 | ||
| DDI RULE 5846 | CVE-2026-23921 - Zabbix API SQL Injection Exploit - HTTP(Request) | 2026/06/01 | DDI RULE 5846 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5846 | ||
| DDI RULE 5838 | CVE-2025-6978 - Artista NG Firewall Command Injection Exploit - HTTP(Request) | 2026/05/28 | DDI RULE 5838 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5838 | ||
| DDI RULE 5843 | CVE-2025-30208 - ViteJS Traversal Exploit - HTTP(Request) | 2026/05/28 | DDI RULE 5843 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5843 | ||
| DDI RULE 5844 | Apache RCE Exploit - HTTP(Request) | 2026/05/28 | DDI RULE 5844 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5844 | ||
| DDI RULE 5845 | CVE-2025-32813 - Inflobox RCE Exploit - HTTP(Request) | 2026/05/28 | DDI RULE 5845 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5845 | ||
| DDI RULE 5836 | CVE-2026-42945 - F5 NGINX Buffer Overflow Exploit - HTTP(Request) | 2026/05/26 | DDI RULE 5836 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5836 | ||
| DDI RULE 5837 | CVE-2026-3838 - Unraid Update and Authentication Request Path Traversal Exploit - HTTP (Request) | 2026/05/26 | DDI RULE 5837 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5837 | ||
| DDI RULE 5839 | CVE-2025-6979 - Artista NG Firewall Authentication Bypass Exploit - HTTP(Request) | 2026/05/26 | DDI RULE 5839 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5839 | ||
| DDI RULE 5840 | CVE-2025-6980 - Artista NG Firewall RCE Exploit - HTTP(Request) | 2026/05/26 | DDI RULE 5840 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5840 | ||
| DDI RULE 5841 | CVE-2026-20029 - Cisco ISE XXE Exploit - HTTP(Request) | 2026/05/26 | DDI RULE 5841 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5841 | ||
| DDI RULE 5842 | CVE-2024-20439 - CISCO CSLU RCE EXPLOIT - HTTP(Response) | 2026/05/26 | DDI RULE 5842 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5842 | ||
| DDI RULE 5829 | CVE-2026-20186 - UnrealIRCd RCE Exploit - TCP(Request) | 2026/05/25 | DDI RULE 5829 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5829 | ||
| DDI RULE 5832 | CVE-2020-24949 - PHPFusion RCE Exploit - HTTP(Request) | 2026/05/25 | DDI RULE 5832 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5832 | ||
| DDI RULE 5833 | CVE-2025-5777 - Citrix Buffer Exploit - HTTP(Request) | 2026/05/25 | DDI RULE 5833 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5833 | ||
| DDI RULE 5834 | CVE-2026-20186 - Cisco Traversal Exploit - HTTP(Request) | 2026/05/25 | DDI RULE 5834 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5834 | ||
| DDI RULE 5835 | CVE-2024-7029 - AVTech CMD Injection - HTTP(Request) | 2026/05/25 | DDI RULE 5835 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5835 | ||
| DDI RULE 5817 | REMUS STEALER - HTTP(Response) | 2026/05/18 | DDI RULE 5817 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5817 | ||
| DDI RULE 5823 | Oracle RCE Exploit - HTTP(Request) | 2026/05/18 | DDI RULE 5823 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5823 | ||
| DDI RULE 5824 | CVE-2025-27240 - Zabbix SQL Injection Exploit - HTTP(Request) | 2026/05/18 | DDI RULE 5824 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5824 | ||
| DDI RULE 5825 | CVE-2021-36260 - Hikvision CMD Injection Exploit - HTTP(Request) | 2026/05/18 | DDI RULE 5825 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5825 | ||
| DDI RULE 5826 | CVE-2026-3342 - WatchGuard Fireware OS Stack Buffer Overflow Exploit - HTTP(Request) | 2026/05/18 | DDI RULE 5826 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5826 | ||
| DDI RULE 5827 | CVE-2026-42897 - Microsoft Exchange Server OWA - HTTP (Response) | 2026/05/18 | DDI RULE 5827 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5827 | ||
| DDI RULE 5819 | CVE-2026-27876 - Grafana Labs Grafana SQL Expressions Exploit - HTTP(Request) | 2026/05/13 | DDI RULE 5819 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5819 | ||
| DDI RULE 5821 | Windows NetLogon Buffer Overflow Exploit - UDP (Request) | 2026/05/13 | DDI RULE 5821 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5821 | ||
| DDI RULE 5822 | Microsoft Office LineServices Layout Engine RCE Exploit - SMTP (Request) | 2026/05/13 | DDI RULE 5822 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5822 | ||
| DDI RULE 5801 | SHULUD GitHub Repository Exfiltration - HTTP (Request) | 2026/05/12 | DDI RULE 5801 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5801 | ||
| DDI RULE 5802 | Bun Package GitHub Download Sensor - HTTP (Request) | 2026/05/12 | DDI RULE 5802 | /vinfo/us/threat-encyclopedia/network/ddi-rule-5802 |