IPS Signature Database Update
| Name | ips.sig | |||
| Version | 2.1.579 | |||
| StoneOS | StoneOS 5.0R4F3.1 or above | |||
| Release Date | 2024-10-21 | |||
| New Signature (42) |
Rule ID | Rule Name | StonesOS | Detail |
| 338466 | Palo Alto Networks Expedition SQL Injection Vulnerability (CVE-2024-9465) | 5.5R5 or above | click for more information | |
| 105379 | Ransomware Activity: TeslaCrypt/AlphaCrypt Payment DNS Lookup | 5.5R5 or above | click for more information | |
| 105356 | Ransomware Activity: TeslaCrypt/AlphaCrypt Variant .onion Proxy Domain (iq3ahijcfeont3xx) | 5.5R5 or above | click for more information | |
| 105572 | Trojan Activity: LYCEUM CnC Domain Observed in DNS Query | 5.5R5 or above | click for more information | |
| 105362 | Ransomware Activity: DNS Query to Cerber Domain | 5.5R5 or above | click for more information | |
| 338463 | Lobe Chat Server-Side Request Forgery Vulnerability (CVE-2024-32964) | 5.0R4 or above | click for more information | |
| 105382 | Ransomware Activity: Ransomware/Cerber Onion Domain Lookup | 5.5R5 or above | click for more information | |
| 105374 | Trojan Activity: FatDuke Domain Observed | 5.5R5 or above | click for more information | |
| 332571 | Ransomware Activity: Quant Loader Download Response | 5.5R5 or above | click for more information | |
| 338469 | WordPress Plugin WP Booking Calendar SQL Injection Vulnerability (CVE-2024-1207) | 5.0R4 or above | click for more information | |
| 105378 | Ransomware Activity: Win32/Teslacrypt Ransomware .onion domain (7tno4hib47vlep5o) | 5.5R5 or above | click for more information | |
| 505893 | Zimbra Collaboration Remote Code Execution Vulnerability (CVE-2024-45519) | 5.0R4 or above | click for more information | |
| 338465 | Wanhu OA GeneralWeb XXE Vulnerability | 5.0R4 or above | click for more information | |
| 338462 | BerqWP Arbitrary File Upload Vulnerability (CVE-2024-43160) | 5.5R5 or above | click for more information | |
| 105359 | Trojan Activity: Glupteba CnC Domain in DNS Lookup | 5.5R5 or above | click for more information | |
| 338472 | pgAdmin OAuth2 Sensitive Information Leakage Vulnerability (CVE-2024-9014) | 5.5R5 or above | click for more information | |
| 105381 | Ransomware Activity: DNS Query to Cerber Domain | 5.5R5 or above | click for more information | |
| 105355 | Ransomware Activity: Cerber Domain Observed | 5.5R5 or above | click for more information | |
| 338468 | Palo Alto Networks Expedition Arbitrary Command Execution Vulnerability (CVE-2024-9464) | 5.5R5 or above | click for more information | |
| 105377 | Ransomware Activity: ABUSE.CH Ransomware/Cerber Onion Domain Lookup | 5.5R5 or above | click for more information | |
| ...... | ||||
| Updated Signature (0) |
Rule ID | Rule Name | StonesOS | Detail |
| No update. | ||||