Atomicorp WAF Research Notes
Research Update - 2026-05-29
Atomicorp WAF Research Notes document selected engineering observations, testing results, attack-pattern analysis, and WAF rule interactions.
The entries published in this update represent research notes produced during ongoing analysis activities.
These notes are not intended to represent the full set of vulnerabilities mitigated by Atomicorp products and should not be interpreted as a coverage matrix, certification list, or census of protected CVEs.
Atomicorp WAF protections are primarily designed around attack techniques and exploit behaviors rather than individual CVE identifiers. A published research note documents a positive research finding related to that CVE. If a CVE is absent from these notes, no conclusion should be drawn about protection status.
Presence means a positive research finding was published. Absence means no conclusion should be drawn.
CVE Notes Published in This Update
- CVE-2009-0545 - ZeroShell <= 1.0beta11 Remote Code Execution - rules observed: 347009
- CVE-2010-5286 - Joomla! Component Jstore - ‘Controller’ Local File Inclusion - rules observed: 347009
- CVE-2011-0518 - LotusCMS 3.0 - Remote Code Execution - rules observed: 393655
- CVE-2017-5638 - Apache Struts 2 - Remote Command Execution - rules observed: 390719
- CVE-2019-11510 - Pulse Connect Secure SSL VPN Arbitrary File Read - rules observed: 347009
- CVE-2019-7256 - eMerge E3 1.00-06 - Remote Code Execution - rules observed: 347009
- CVE-2021-44228 - Apache Log4j2 Remote Code Injection - rules observed: 345115
- CVE-2022-22536 - SAP Memory Pipes (MPI) Desynchronization - rules observed: 392301
- CVE-2024-10081 - CodeChecker <= 6.24.1 - Authentication Bypass - rules observed: 392301
- CVE-2024-21650 - XWiki < 4.10.20 - Remote code execution - rules observed: 340130
- CVE-2024-50603 - Aviatrix Controller - Remote Code Execution - rules observed: 344360
- CVE-2025-20281 - Cisco ISE - Remote Code Execution - rules observed: 392301
- CVE-2025-2473 - Company Visitor Management System 1.0 - SQL Injection - rules observed: 340145
- CVE-2025-31324 - SAP NetWeaver Visual Composer Metadata Uploader - Deserialization - rules observed: 330791
- CVE-2025-34030 - sar2html <=3.2.2 Plot Parameter - Remote Code Execution - rules observed: 340014
- CVE-2025-34035 - EnGenius EnShare IoT Gigabit Cloud Service 1.4.11 Root Remote Code Execution - rules observed: 341245
- CVE-2025-49132 - Pterodactyl Panel - Remote Code Execution - rules observed: 340007
- CVE-2025-53833 - LaRecipe < 2.8.1 Remote Code Execution via SSTI - rules observed: 340087
- CVE-2025-55182 - React Server Components - Remote Code Execution - rules observed: 393655
- CVE-2025-7160 - Zoo Management System 1.0 - SQL Injection - rules observed: 340145
- CVE-2025-9744 - Loan Management System 1.0 - SQL Injection - rules observed: 340156
- CVE-2019-10758 - mongo-express Remote Code Execution - rules observed: 380026
- CVE-2021-21881 - Lantronix PremierWave 2050 8.9.0.0R4 - Remote Command Injection - rules observed: 340014
- CVE-2021-33690 - SAP NetWeaver Development Infrastructure - Server Side Request Forgery - rules observed: 340162
- CVE-2022-45808 - LearnPress Plugin < 4.2.0 - Unauthenticated Time-Based Blind SQLi - rules observed: 380122
- CVE-2024-27956 - WordPress Automatic Plugin <= 3.92.0 - SQL Injection - rules observed: 390614
- CVE-2010-4239 - Tiki Wiki CMS Groupware 5.2 - Local File Inclusion - rules observed: 340007
- CVE-2014-1203 - Eyou E-Mail <3.6 - Remote Code Execution - rules observed: 344360
- CVE-2014-3206 - Seagate BlackArmor NAS - Command Injection - rules observed: 340014
- CVE-2014-6271 - ShellShock - Remote Code Execution - rules observed: 330701
- CVE-2014-6287 - HTTP File Server <2.3c - Remote Command Execution - rules observed: 390614
- CVE-2014-9614 - Netsweeper 4.0.5 - Default Weak Account - rules observed: 392301
- CVE-2015-4455 - WordPress Plugin Aviary Image Editor Addon For Gravity Forms 3.0 Beta - Arbitrary File Upload - rules observed: 340007
- CVE-2016-10134 - Zabbix - SQL Injection - rules observed: 340159
- CVE-2016-15042 - WordPress Frontend File Manager < 4.0 & N-Media Post Frontend < 1.1 - Arbitrary File Upload - rules observed: 382238
- CVE-2016-15043 - WP Mobile Detector <= 3.5 - Unrestricted File Upload - rules observed: 340162
- CVE-2016-1555 - NETGEAR WNAP320 Access Point Firmware - Remote Command Injection - rules observed: 340014
- CVE-2016-3088 - Apache ActiveMQ Fileserver - Arbitrary File Write - rules observed: 392301
- CVE-2017-11444 - Subrion CMS <4.1.5.10 - SQL Injection - rules observed: 341245
- CVE-2017-12611 - Apache Struts2 S2-053 - Remote Code Execution - rules observed: 347009
- CVE-2017-12635 - Apache CouchDB 1.7.0 / 2.x < 2.1.1 - Remote Privilege Escalation - rules observed: 392301
- CVE-2017-8917 - Joomla! <3.7.1 - SQL Injection - rules observed: 340159
- CVE-2017-9791 - Apache Struts2 S2-053 - Remote Code Execution - rules observed: 337207
- CVE-2017-9841 - PHPUnit - Remote Code Execution - rules observed: 393782
- CVE-2018-0127 - Cisco RV132W/RV134W Router - Information Disclosure - rules observed: 312863
- CVE-2018-10562 - Dasan GPON Devices - Remote Code Execution - rules observed: 392301
- CVE-2018-11511 - ASUSTOR ADM 3.1.0.RFQ3 - SQL Injection - rules observed: 380122
- CVE-2018-11686 - FlexPaper/FlowPaper 2.3.6 - Remote Code Execution - rules observed: 340029
- CVE-2018-12031 - Eaton Intelligent Power Manager 1.6 - Directory Traversal - rules observed: 347009, 340007
- CVE-2018-1273 - Spring Data Commons - Remote Code Execution - rules observed: 344360
- CVE-2018-13379 - Fortinet FortiOS - Credentials Disclosure - rules observed: 340007
- CVE-2018-14064 - VelotiSmart Wifi - Directory Traversal - rules observed: 347009
- CVE-2018-14728 - Responsive filemanager 9.13.1 Server-Side Request Forgery - rules observed: 392301
- CVE-2018-16159 - WordPress Gift Voucher <4.1.8 - Blind SQL Injection - rules observed: 380122
- CVE-2018-16167 - LogonTracer <=1.2.0 - Remote Command Injection - rules observed: 340014
- CVE-2018-16283 - WordPress Plugin Wechat Broadcast 1.2.0 - Local File Inclusion - rules observed: 347009
- CVE-2018-16763 - FUEL CMS 1.4.1 - Remote Code Execution - rules observed: 347009
- CVE-2018-16836 - Rubedo CMS <=3.4.0 - Directory Traversal - rules observed: 347009
- CVE-2018-17173 - LG Supersign EZ CMS - Remote Code Execution - rules observed: 340014
- CVE-2018-17246 - Kibana - Local File Inclusion - rules observed: 347009
- CVE-2018-17254 - Joomla! JCK Editor SQL Injection - rules observed: 340016
- CVE-2018-18925 - Gogs (Go Git Service) 0.11.66 - Remote Code Execution - rules observed: 344360
- CVE-2018-20985 - WordPress Payeezy Pay <=2.97 - Local File Inclusion - rules observed: 392301
- CVE-2018-3810 - Oturia WordPress Smart Google Code Inserter <3.5 - Authentication Bypass - rules observed: 380026
- CVE-2018-6605 - Joomla! Component Zh BaiduMap 3.0.0.1 - SQL Injection - rules observed: 340016
- CVE-2018-7314 - Joomla! Component PrayerCenter 3.0.2 - SQL Injection - rules observed: 340157
- CVE-2019-10068 - Kentico CMS Insecure Deserialization Remote Code Execution - rules observed: 341256
- CVE-2019-10232 - Teclib GLPI <= 9.3.3 - Unauthenticated SQL Injection - rules observed: 340155
- CVE-2019-10647 - ZZZCMS ZZZPHP 1.6.3 – Remote PHP Code Execution (RCE) - rules observed: 340162
- CVE-2019-11581 - Atlassian Jira Server-Side Template Injection - rules observed: 311299
- CVE-2019-12314 - Deltek Maconomy 2.2.5 - Local File Inclusion - rules observed: 347009
- CVE-2019-12725 - Zeroshell 3.9.0 - Remote Command Execution - rules observed: 347009
- CVE-2019-12985 - Citrix SD-WAN Center - Remote Command Injection - rules observed: 340014
- CVE-2019-12986 - Citrix SD-WAN Center - Remote Command Injection - rules observed: 340014
- CVE-2019-12987 - Citrix SD-WAN Center - Remote Command Injection - rules observed: 340014
- CVE-2019-12988 - Citrix SD-WAN Center - Remote Command Injection - rules observed: 393655
- CVE-2019-15107 - Webmin <= 1.920 - Unauthenticated Remote Command Execution - rules observed: 344360
- CVE-2019-16278 - nostromo 1.9.6 - Remote Code Execution - rules observed: 392301
- CVE-2019-16662 - rConfig 3.9.2 - Remote Code Execution - rules observed: 347009
- CVE-2019-16759 - vBulletin 5.0.0-5.5.4 - Remote Command Execution - rules observed: 341245
- CVE-2019-16920 - D-Link Routers - Remote Code Execution - rules observed: 344360
- CVE-2019-17270 - Yachtcontrol Webapplication 1.0 - Remote Command Injection - rules observed: 347009
- CVE-2019-17564 - Apache Dubbo 2.5.x-2.7.4 - Insecure Deserialization - rules observed: 390626
- CVE-2019-25213 - WordPress Advanced Access Manager - Path Traversal - rules observed: 344360
- CVE-2019-3396 - Atlassian Confluence Server - Path Traversal - rules observed: 392301
- CVE-2019-9194 - elFinder <= 2.1.47 - Command Injection - rules observed: 390700
- CVE-2019-9618 - WordPress GraceMedia Media Player 1.0 - Local File Inclusion - rules observed: 347009
- CVE-2019-9762 - PHPSHE 1.7 - SQL Injection - rules observed: 340016
- CVE-2020-10148 - SolarWinds Orion API - Auth Bypass - rules observed: 390709
- CVE-2020-10189 - ManageEngine Desktop Central Java Deserialization - rules observed: 347019
- CVE-2020-10220 - rConfig 3.9 - SQL Injection - rules observed: 340016
- CVE-2020-10546 - rConfig 3.9.4 - SQL Injection - rules observed: 380123
- CVE-2020-10547 - rConfig 3.9.4 - SQL Injection - rules observed: 380123
- CVE-2020-10548 - rConfig 3.9.4 - SQL Injection - rules observed: 380123
- CVE-2020-10549 - rConfig <=3.9.4 - SQL Injection - rules observed: 380123
- CVE-2020-11455 - LimeSurvey 4.1.11 - Local File Inclusion - rules observed: 347009
- CVE-2020-11530 - WordPress Chop Slider 3 - Blind SQL Injection - rules observed: 380122
- CVE-2020-11546 - SuperWebmailer 7.21.0.01526 - Remote Code Execution - rules observed: 393655
- CVE-2020-11984 - Apache HTTP Server - Remote Code Execution - rules observed: 390626
- CVE-2020-12641 - Roundcube Webmail - Command Injection - rules observed: 340014
- CVE-2020-12720 - vBulletin SQL Injection - rules observed: 340155
- CVE-2020-13117 - Wavlink Multiple AP - Remote Command Injection - rules observed: 340014
- CVE-2020-13167 - Netsweeper <=6.4.3 - Python Code Injection - rules observed: 340095
- CVE-2020-13640 - wpDiscuz <= 5.3.5 - SQL Injection - rules observed: 340155
- CVE-2020-14750 - Oracle WebLogic Server - Remote Command Execution - rules observed: 340014
- CVE-2020-15415 - DrayTek Vigor - Command Injection - rules observed: 390700
- CVE-2020-15568 - TerraMaster TOS <.1.29 - Remote Code Execution - rules observed: 347009
- CVE-2020-15920 - Mida eFramework <=2.9.0 - Remote Command Execution - rules observed: 347009
- CVE-2020-17456 - SEOWON INTECH SLC-130 & SLR-120S - Unauthenticated Remote Code Execution - rules observed: 340014
- CVE-2020-17463 - Fuel CMS 1.4.7 - SQL Injection - rules observed: 380122
- CVE-2020-17496 - vBulletin 5.5.4 - 5.6.2- Remote Command Execution - rules observed: 344360
- CVE-2020-17506 - Artica Web Proxy 4.30 - Authentication Bypass/SQL Injection - rules observed: 340017
- CVE-2020-17530 - Apache Struts 2.0.0-2.5.25 - Remote Code Execution - rules observed: 347009
- CVE-2020-19625 - Gridx 1.3 - Remote Code Execution - rules observed: 341250
- CVE-2020-20300 - WeiPHP 5.0 - SQL Injection - rules observed: 340159
- CVE-2020-21224 - Inspur ClusterEngine 4.0 - Remote Code Execution - rules observed: 344360
- CVE-2020-22208 - 74cms - ajax_street.php ‘x’ SQL Injection - rules observed: 340016
- CVE-2020-22209 - 74cms - ajax_common.php SQL Injection - rules observed: 341250
- CVE-2020-22210 - 74cms - ajax_officebuilding.php SQL Injection - rules observed: 340145
- CVE-2020-22211 - 74cms - ajax_street.php ‘key’ SQL Injection - rules observed: 340016
- CVE-2020-24391 - Mongo-Express - Remote Code Execution - rules observed: 380026
- CVE-2020-25213 - WordPress File Manager Plugin - Remote Code Execution - rules observed: 393781
- CVE-2020-25506 - D-Link DNS-320 - Unauthenticated Remote Code Execution - rules observed: 392301
- CVE-2020-26919 - NETGEAR ProSAFE Plus - Unauthenticated Remote Code Execution - rules observed: 392301
- CVE-2020-27481 - Good Layers LMS Plugin <= 2.1.4 - SQL Injection - rules observed: 380122
- CVE-2020-28188 - TerraMaster TOS - Unauthenticated Remote Command Execution - rules observed: 340014
- CVE-2020-29214 - Alumni Management System 1.0 - SQL Injection - rules observed: 340156
- CVE-2020-29227 - Car Rental Management System 1.0 - Local File Inclusion - rules observed: 347009
- CVE-2020-29279 - 74CMS - Remote File Inclusion - rules observed: 340128
- CVE-2020-29390 - Zeroshell 3.9.3 - Command Injection - rules observed: 347009
- CVE-2020-35476 - OpenTSDB <=2.4.0 - Remote Code Execution - rules observed: 340014
- CVE-2020-35713 - Belkin Linksys RE6500 <1.0.012.001 - Remote Command Execution - rules observed: 392301
- CVE-2020-35729 - Klog Server <=2.41 - Unauthenticated Command Injection - rules observed: 392301
- CVE-2020-5307 - PHPGurukul Dairy Farm Shop Management System 1.0 - SQL Injection - rules observed: 340145
- CVE-2020-5722 - Grandstream UCM6200 - SQL Injection - rules observed: 340145
- CVE-2020-5902 - F5 BIG-IP TMUI - Remote Code Execution - rules observed: 392301, 347009, 390709
- CVE-2020-7209 - LinuxKI Toolset <= 6.01 - Remote Command Execution - rules observed: 347009
- CVE-2020-8515 - DrayTek - Remote Code Execution - rules observed: 392301
- CVE-2020-8656 - EyesOfNetwork - Hardcoded API Key & SQL Injection - rules observed: 380122, 340016
- CVE-2020-8771 - WordPress Time Capsule < 1.21.16 - Authentication Bypass - rules observed: 392301
- CVE-2020-9054 - Zyxel NAS Firmware 5.21- Remote Code Execution - rules observed: 347009
- CVE-2021-1472 - Cisco Small Business RV Series - OS Command Injection - rules observed: 340014
- CVE-2021-1498 - Cisco HyperFlex HX Data Platform - Remote Command Execution - rules observed: 340014
- CVE-2021-20038 - SonicWall SMA100 Stack - Buffer Overflow/Remote Code Execution - rules observed: 340193
- CVE-2021-20158 - Trendnet AC2600 TEW-827DRU 2.08B01 - Admin Password Change - rules observed: 392301
- CVE-2021-20617 - Acmailer - Improper Access Control to OS Command Injection - rules observed: 340014
- CVE-2021-21307 - Lucee Admin - Remote Code Execution - rules observed: 340149
- CVE-2021-24212 - WooCommerce Help Scout - Arbitrary File Upload - rules observed: 382238
- CVE-2021-24284 - WordPress Kaswara Modern VC Addons <=3.0.1 - Arbitrary File Upload - rules observed: 382238
- CVE-2021-24285 - WordPress Car Seller - Auto Classifieds Script - SQL Injection - rules observed: 340016
- CVE-2021-24442 - Wordpress Polls Widget < 1.5.3 - SQL Injection - rules observed: 380122
- CVE-2021-24472 - Onair2 < 3.9.9.2 & KenthaRadio < 2.0.2 - Remote File Inclusion/Server-Side Request Forgery - rules observed: 340162
- CVE-2021-24499 - WordPress Workreap - Remote Code Execution - rules observed: 382238
- CVE-2021-24527 - Profile Builder < 3.4.9 - Improper Authentication - rules observed: 340130
- CVE-2021-24666 - WordPress Podlove Podcast Publisher <3.5.6 - SQL Injection - rules observed: 340016
- CVE-2021-24731 - Pie Register < 3.7.1.6 - SQL Injection - rules observed: 380122
- CVE-2021-24762 - WordPress Perfect Survey <1.5.2 - SQL Injection - rules observed: 380122
- CVE-2021-24827 - WordPress Asgaros Forum <1.15.13 - SQL Injection - rules observed: 380122
- CVE-2021-24915 - Contest Gallery < 13.1.0.6 - SQL injection - rules observed: 340017
- CVE-2021-24931 - WordPress Secure Copy Content Protection and Content Locking <2.8.2 - SQL Injection - rules observed: 380122
- CVE-2021-24943 - Registrations for the Events Calendar < 2.7.6 - SQL Injection - rules observed: 380122
- CVE-2021-24946 - WordPress Modern Events Calendar <6.1.5 - Blind SQL Injection - rules observed: 380122
- CVE-2021-25114 - WordPress Paid Memberships Pro <2.6.7 - Blind SQL Injection - rules observed: 380122
- CVE-2021-27132 - Sercomm VD625 Smart Modems - CRLF Injection - rules observed: 330708
- CVE-2021-27314 - Doctor Appointment System 1.0 - SQL Injection - rules observed: 380122
- CVE-2021-30118 - Kaseya VSA < 9.5.7 - Arbitrary File Upload to Remote Code Execution - rules observed: 392301
- CVE-2021-3110 - PrestaShop 1.7.7.0 - SQL Injection - rules observed: 380122
- CVE-2021-31755 - Tenda Router AC11 - Remote Command Injection - rules observed: 340014
- CVE-2021-31805 - Apache Struts2 S2-062 - Remote Code Execution - rules observed: 330791
- CVE-2021-31856 - Layer5 Meshery 0.5.2 - SQL Injection - rules observed: 341245
- CVE-2021-32305 - Websvn <2.6.1 - Remote Code Execution - rules observed: 340014
- CVE-2021-34187 - Chamilo model.ajax.php - SQL Injection - rules observed: 340016
- CVE-2021-34624 - WordPress ProfilePress 3.0-3.1.3 - Arbitrary File Upload - rules observed: 382238
- CVE-2021-35395 - RealTek Jungle SDK - Arbitrary Command Injection - rules observed: 340014
- CVE-2021-36260 - Hikvision IP camera/NVR - Remote Command Execution - rules observed: 393655
- CVE-2021-36380 - Sunhillo SureLine <8.7.0.1.1 - Unauthenticated OS Command Injection - rules observed: 392301
- CVE-2021-37291 - KevinLAB BEMS 1.0 - SQL Injection - rules observed: 340156
- CVE-2021-37538 - PrestaShop SmartBlog <4.0.6 - SQL Injection - rules observed: 340016
- CVE-2021-40870 - Aviatrix Controller 6.x before 6.5-1804.1922 - Remote Command Execution - rules observed: 340007
- CVE-2021-40960 - Galera WebTemplate 1.0 Directory Traversal - rules observed: 347009
- CVE-2021-41649 - PuneethReddyHC Online Shopping System homeaction.php SQL Injection - rules observed: 392301
- CVE-2021-41749 - CraftCMS SEOmatic - Server-Side Template Injection - rules observed: 390719
- CVE-2021-42013 - Apache 2.4.49/2.4.50 - Path Traversal and Remote Code Execution - rules observed: 347009
- CVE-2021-43421 - Studio-42 elFinder <2.1.60 - Arbitrary File Upload - rules observed: 393781
- CVE-2021-43510 - Sourcecodester Simple Client Management System 1.0 - SQL Injection - rules observed: 340145
- CVE-2021-45382 - D-Link - Remote Command Execution - rules observed: 392301
- CVE-2021-45428 - Telesquare TLR-2005KSH 1.0.0 - Arbitrary File Upload - rules observed: 392301
- CVE-2022-0169 - Photo Gallery by 10Web < 1.6.0 - SQL Injection - rules observed: 340016
- CVE-2022-0349 - WordPress NotificationX <2.3.9 - SQL Injection - rules observed: 380122
- CVE-2022-0412 - WordPress TI WooCommerce Wishlist <1.40.1 - SQL Injection - rules observed: 380122
- CVE-2022-0434 - WordPress Page Views Count <2.4.15 - SQL Injection - rules observed: 340016
- CVE-2022-0592 - MapSVG < 6.2.20 - Unauthenticated SQLi - rules observed: 380122
- CVE-2022-0658 - CommonsBooking < 2.6.8 - SQL Injection - rules observed: 380122
- CVE-2022-0679 - WordPress Narnoo Distributor <=2.5.1 - Local File Inclusion - rules observed: 344360
- CVE-2022-0693 - WordPress Master Elements <=8.0 - SQL Injection - rules observed: 380122
- CVE-2022-0747 - Infographic Maker iList < 4.3.8 - SQL Injection - rules observed: 380122
- CVE-2022-0760 - WordPress Simple Link Directory <7.7.2 - SQL injection - rules observed: 380122
- CVE-2022-0769 - Users Ultra <= 3.1.0 - SQL Injection - rules observed: 380122
- CVE-2022-0773 - Documentor <= 1.5.3 - Unauthenticated SQL Injection - rules observed: 380122
- CVE-2022-0781 - WordPress Nirweb Support <2.8.2 - SQL Injection - rules observed: 340016
- CVE-2022-0784 - WordPress Title Experiments Free <9.0.1 - SQL Injection - rules observed: 380122
- CVE-2022-0785 - WordPress Daily Prayer Time <2022.03.01 - SQL Injection - rules observed: 380122
- CVE-2022-0786 - WordPress KiviCare <2.3.9 - SQL Injection - rules observed: 380122
- CVE-2022-0787 - Limit Login Attempts (Spam Protection) < 5.1 - SQL Injection - rules observed: 380122
- CVE-2022-0814 - Ubigeo de Peru < 3.6.4 - SQL Injection - rules observed: 340016
- CVE-2022-0817 - WordPress BadgeOS <=3.7.0 - SQL Injection - rules observed: 340016
- CVE-2022-0826 - WordPress WP Video Gallery <=1.7.1 - SQL Injection - rules observed: 380122
- CVE-2022-0827 - WordPress Best Books <=2.6.3 - SQL Injection - rules observed: 380122
- CVE-2022-0846 - SpeakOut Email Petitions < 2.14.15.1 - SQL Injection - rules observed: 380122
- CVE-2022-0867 - WordPress ARPrice <3.6.1 - SQL Injection - rules observed: 380122
- CVE-2022-0949 - WordPress Stop Bad Bots <6.930 - SQL Injection - rules observed: 380122
- CVE-2022-1013 - WordPress Personal Dictionary <1.3.4 - Blind SQL Injection - rules observed: 380122
- CVE-2022-1057 - WordPress Pricing Deals for WooCommerce <=2.0.2.02 - SQL Injection - rules observed: 380122
- CVE-2022-1388 - F5 BIG-IP iControl - REST Auth Bypass RCE - rules observed: 392767
- CVE-2022-1390 - WordPress Admin Word Count Column 2.2 - Local File Inclusion - rules observed: 347009
- CVE-2022-1391 - WordPress Cab fare calculator < 1.0.4 - Local File Inclusion - rules observed: 347009
- CVE-2022-1453 - RSVPMaker <= 9.2.5 - SQL Injection - rules observed: 380122
- CVE-2022-1574 - WordPress HTML2WP <=1.0.0 - Arbitrary File Upload - rules observed: 382238
- CVE-2022-1609 - The School Management < 9.9.7 - Remote Code Execution - rules observed: 340095
- CVE-2022-1950 - Youzify < 1.2.0 - Unauthenticated SQLi - rules observed: 380122
- CVE-2022-22897 - PrestaShop AP Pagebuilder <= 2.4.4 - SQL Injection - rules observed: 341145, 380122, 340156
- CVE-2022-22954 - VMware Workspace ONE Access - Server-Side Template Injection - rules observed: 344360
- CVE-2022-23898 - MCMS 5.2.5 - SQL Injection - rules observed: 340159
- CVE-2022-24223 - Atom CMS v2.0 - SQL Injection - rules observed: 380122
- CVE-2022-24260 - VoipMonitor - Pre-Auth SQL Injection - rules observed: 340016
- CVE-2022-2467 - Garage Management System 1.0 - SQL Injection - rules observed: 380122
- CVE-2022-2486 - Wavlink WN535K2/WN535K3 - OS Command Injection - rules observed: 340014
- CVE-2022-2488 - Wavlink WN535K2/WN535K3 - OS Command Injection - rules observed: 340014
- CVE-2022-25125 - MCMS 5.2.4 - SQL Injection - rules observed: 340159
- CVE-2022-25488 - Atom CMS v2.0 - SQL Injection - rules observed: 340016
- CVE-2022-26134 - Confluence - Remote Code Execution - rules observed: 337211, 340087
- CVE-2022-26585 - Mingsoft MCMS v5.2.7 - SQL Injection - rules observed: 340156
- CVE-2022-27927 - Microfinance Management System 1.0 - SQL Injection - rules observed: 340016
- CVE-2022-28032 - Atom CMS v2.0 - SQL Injection - rules observed: 380122
- CVE-2022-29006 - Directory Management System 1.0 - SQL Injection - rules observed: 340145
- CVE-2022-29007 - Dairy Farm Shop Management System 1.0 - SQL Injection - rules observed: 340145
- CVE-2022-29078 - Node.js Embedded JavaScript 3.1.6 - Template Injection - rules observed: 340014
- CVE-2022-29303 - SolarView Compact 6.00 - OS Command Injection - rules observed: 344360
- CVE-2022-29383 - NETGEAR ProSafe SSL VPN firmware - SQL Injection - rules observed: 340156
- CVE-2022-31137 - Roxy-WI < 6.1.1.0 - Remote Code Execution - rules observed: 344360
- CVE-2022-31976 - Online Fire Reporting System v1.0 - SQL injection - rules observed: 380122
- CVE-2022-31977 - Online Fire Reporting System v1.0 - SQL injection - rules observed: 380122
- CVE-2022-31978 - Online Fire Reporting System v1.0 - SQL injection - rules observed: 380122
- CVE-2022-32094 - Hospital Management System 1.0 - SQL Injection - rules observed: 340145
- CVE-2022-32409 - Portal do Software Publico Brasileiro i3geo 7.0.5 - Local File Inclusion - rules observed: 347009
- CVE-2022-33965 - WordPress Visitor Statistics <=5.7 - SQL Injection - rules observed: 380122
- CVE-2022-35405 - Zoho ManageEngine - Remote Code Execution - rules observed: 392301
- CVE-2022-35914 - GLPI <=10.0.2 - Remote Command Execution - rules observed: 344360
- CVE-2022-36553 - Hytec Inter HWL-2511-SS - Remote Command Execution - rules observed: 347009
- CVE-2022-36642 - Omnia MPX 1.5.0+r1 - Local File Inclusion - rules observed: 347009, 340007
- CVE-2022-37042 - Zimbra Collaboration Suite 8.8.15/9.0 - Remote Code Execution - rules observed: 390626
- CVE-2022-38627 - Nortek Linear eMerge E3-Series - SQL Injection - rules observed: 340016
- CVE-2022-38637 - Hospital Management System 1.0 - SQL Injection - rules observed: 340145
- CVE-2022-40032 - Simple Task Managing System v1.0 - SQL Injection - rules observed: 380122
- CVE-2022-4050 - WordPress JoomSport <5.2.8 - SQL Injection - rules observed: 380122
- CVE-2022-4059 - Cryptocurrency Widgets Pack < 2.0 - SQL Injection - rules observed: 380122
- CVE-2022-4060 - WordPress User Post Gallery <=2.19 - Remote Code Execution - rules observed: 347009
- CVE-2022-40881 - SolarView 6.00 - Remote Command Execution - rules observed: 344360
- CVE-2022-4117 - WordPress IWS Geo Form Fields <=1.0 - SQL Injection - rules observed: 380122
- CVE-2022-41840 - Welcart eCommerce <=2.7.7 - Local File Inclusion - rules observed: 347009
- CVE-2022-4328 - WooCommerce Checkout Field Manager < 18.0 - Arbitrary File Upload - rules observed: 382238
- CVE-2022-4447 - WordPress Fontsy <=1.8.6 - SQL Injection - rules observed: 340016
- CVE-2022-44588 - Cryptocurrency Widgets Pack <= 1.8.1 - SQL Injection - rules observed: 380122
- CVE-2022-44877 - CentOS Web Panel 7 <0.9.8.1147 - Remote Code Execution - rules observed: 393655
- CVE-2022-46071 - Helmet Store Showroom v1.0 - SQL Injection - rules observed: 340145
- CVE-2022-47615 - LearnPress Plugin < 4.2.0 - Local File Inclusion - rules observed: 347009
- CVE-2022-47945 - Thinkphp Lang - Local File Inclusion - rules observed: 340007
- CVE-2022-48323 - Sunflower Simple and Personal 1.0.1.43315 - Remote Code Execution - rules observed: 392301
- CVE-2023-0037 - WordPress 10Web Map Builder < 1.0.73 - Unauthenticated SQL Injection - rules observed: 380122
- CVE-2023-0297 - PyLoad 0.5.0 - Pre-auth Remote Code Execution (RCE) - rules observed: 340095
- CVE-2023-0562 - Bank Locker Management System v1.0 - SQL Injection - rules observed: 340156
- CVE-2023-1020 - Steveas WP Live Chat Shoutbox <= 1.4.2 - SQL Injection - rules observed: 340016
- CVE-2023-1389 - TP-Link Archer AX21 (AX1800) - Unauthenticated Command Injection - rules observed: 393655
- CVE-2023-1719 - Bitrix Component - Cross-Site Scripting - rules observed: 347198
- CVE-2023-1730 - SupportCandy < 3.1.5 - Unauthenticated SQL Injection - rules observed: 380122
- CVE-2023-2130 - Purchase Order Management v1.0 - SQL Injection - rules observed: 380122
- CVE-2023-22463 - KubePi JwtSigKey - Admin Authentication Bypass - rules observed: 392301
- CVE-2023-22527 - Atlassian Confluence - Remote Code Execution - rules observed: 340095
- CVE-2023-23333 - SolarView Compact 6.00 - OS Command Injection - rules observed: 390614
- CVE-2023-23488 - WordPress Paid Memberships Pro <2.9.8 - Blind SQL Injection - rules observed: 380122
- CVE-2023-23489 - WordPress Easy Digital Downloads 3.1.0.2/3.1.0.3 - SQL Injection - rules observed: 380122
- CVE-2023-24000 - WordPress GamiPress <= 2.5.7 - SQL Injection - rules observed: 380122
- CVE-2023-2479 - Appium Desktop Server - Remote Code Execution - rules observed: 342259
- CVE-2023-25135 - vBulletin <= 5.6.9 - Pre-authentication Remote Code Execution - rules observed: 390614
- CVE-2023-25717 - Ruckus Wireless Admin - Remote Code Execution - rules observed: 393655
- CVE-2023-27637
- PrestaShop
tshirtecommerceModule - SQL Injection - rules observed: 380122 - CVE-2023-29300 - Adobe ColdFusion - Pre-Auth Remote Code Execution - rules observed: 350147
- CVE-2023-29827 - Embedded JavaScript(EJS) 3.1.6 - Template Injection - rules observed: 340014
- CVE-2023-30013 - TOTOLink - Unauthenticated Command Injection - rules observed: 392301
- CVE-2023-31465 - TimeKeeper by FSMLabs - Remote Code Execution - rules observed: 393655
- CVE-2023-32563 - Ivanti Avalanche - Remote Code Execution - rules observed: 340007
- CVE-2023-33338 - Old Age Home Management System v1.0 - SQL Injection - rules observed: 340145
- CVE-2023-34048 - VMware vCenter Server - Out-of-Bounds Write - rules observed: 392301
- CVE-2023-34124 - SonicWall GMS and Analytics Web Services - Shell Injection - rules observed: 380123
- CVE-2023-34362 - MOVEit Transfer - Remote Code Execution - rules observed: 340016
- CVE-2023-3643 - CAREL Boss Mini <= 1.4.0 - Local File Inclusion - rules observed: 344360
- CVE-2023-36845 - Juniper J-Web - Remote Code Execution - rules observed: 344360
- CVE-2023-37629 - Online Piggery Management System v1.0 - Unauthenticated File Upload - rules observed: 330791
- CVE-2023-38203 - Adobe ColdFusion - Deserialization of Untrusted Data - rules observed: 350147
- CVE-2023-39143 - PaperCut < 22.1.3 - Path Traversal - rules observed: 347019
- CVE-2023-39361 - Cacti 1.2.24 - SQL Injection - rules observed: 380122
- CVE-2023-39796 - WBCE 1.6.0 - SQL Injection - rules observed: 380122
- CVE-2023-40748 - PHPJabbers Food Delivery Script - SQL Injection - rules observed: 340156
- CVE-2023-40749 - PHPJabbers Food Delivery Script v3.0 - SQL Injection - rules observed: 340017
- CVE-2023-41109 - SmartNode SN200 Analog Telephone Adapter (ATA) & VoIP Gateway - Command Injection - rules observed: 392301
- CVE-2023-44353 - Adobe ColdFusion WDDX Deserialization Gadgets - rules observed: 350147
- CVE-2023-46347 - PrestaShop Step by Step products Pack - SQL Injection - rules observed: 341245, 340016
- CVE-2023-46359 - cPH2 Charging Station v1.87.0 - OS Command Injection - rules observed: 393655
- CVE-2023-46574 - TOTOLINK A3700R - Command Injection - rules observed: 392301
- CVE-2023-46747 - F5 BIG-IP - Unauthenticated RCE via AJP Smuggling - rules observed: 390626, 392767
- CVE-2023-47246 - SysAid Server - Remote Code Execution - rules observed: 390626
- CVE-2023-48022 - Anyscale Ray - Remote Code Execution - rules observed: 392301
- CVE-2023-48084 - Nagios XI < 5.11.3 - SQL Injection - rules observed: 380122, 340130
- CVE-2023-4974 - Academy LMS 6.2 - SQL Injection - rules observed: 380122
- CVE-2023-50839 - JS Help Desk <= 2.8.1 - SQL Injection - rules observed: 380122
- CVE-2023-5203 - WP Sessions Time Monitoring Full Automatic <= 1.0.8 - SQL Injection - rules observed: 380122
- CVE-2023-5204 - WordPress AI ChatBot (WPBot) <= 4.8.9 - SQL Injection - rules observed: 380122
- CVE-2023-5652 - WP Hotel Booking <= 2.0.7 - SQL Injection - rules observed: 380122
- CVE-2023-5991 - Hotel Booking Lite < 4.8.5 - Arbitrary File Download & Deletion - rules observed: 347009
- CVE-2023-6623 - Essential Blocks < 4.4.3 - Local File Inclusion - rules observed: 347009
- CVE-2023-6750 - WordPress WP Clone <= 2.4.2 - Database Backup Exposure - rules observed: 350590
- CVE-2023-6989 - Shield Security WP Plugin <= 18.5.9 - Local File Inclusion - rules observed: 340748
- CVE-2024-10571 - Chartify – WordPress Chart Plugin < 2.9.6 - Local File Inclusion - rules observed: 347006
- CVE-2024-1061 - WordPress HTML5 Video Player - SQL Injection - rules observed: 380122
- CVE-2024-10763 - WordPress Campress Theme <= 1.35 - Unauthenticated Local File Inclusion - rules observed: 340077
- CVE-2024-12987 - DrayTek Vigor - Command Injection - rules observed: 347009, 393655
- CVE-2024-1512 - MasterStudy LMS WordPress Plugin <= 3.2.5 - SQL Injection - rules observed: 380122
- CVE-2024-24112 - Exrick XMall - SQL Injection - rules observed: 340016
- CVE-2024-24328 - TotoLink Router setMacFilterRules - Command Injection - rules observed: 392301
- CVE-2024-24329 - TotoLink Router setPortForwardRules - Command Injection - rules observed: 392301
- CVE-2024-2667 - InstaWP Connect <= 0.1.0.22 - Unauthenticated Arbitrary File Upload - rules observed: 340162
- CVE-2024-27954 - WordPress Automatic Plugin <3.92.1 - Arbitrary File Download and SSRF - rules observed: 347009
- CVE-2024-30163 - IPS Community Suite - Unauthenticated SQL Injection - rules observed: 380026
- CVE-2024-36412 - SuiteCRM - SQL Injection - rules observed: 380122
- CVE-2024-37393 - SecurEnvoy Two Factor Authentication - LDAP Injection - rules observed: 392301
- CVE-2024-43360 - ZoneMinder - SQL Injection - rules observed: 380122
- CVE-2024-4443 - Business Directory Plugin <= 6.4.2 - SQL Injection - rules observed: 340156
- CVE-2024-45507 - Apache OFBiz - Remote Code Execution - rules observed: 340162
- CVE-2024-4577 - PHP CGI - Argument Injection - rules observed: 392301
- CVE-2024-51211 - openSIS Classic v9.1 - SQL Injection - rules observed: 380122
- CVE-2024-51978 - Brother Printers – Authentication Bypass via Default Admin Password - rules observed: 390709
- CVE-2024-5276 - Fortra FileCatalyst Workflow <= v5.1.6 - SQL Injection - rules observed: 341245
- CVE-2024-5522 - WordPress HTML5 Video Player < 2.5.27 - SQL Injection - rules observed: 340016
- CVE-2024-6205 - PayPlus Payment Gateway < 6.6.9 - SQL Injection - rules observed: 380122
- CVE-2024-7593 - Ivanti vTM - Authentication Bypass - rules observed: 392301
- CVE-2024-7954 - SPIP Porte Plume Plugin - Remote Code Execution - rules observed: 340023
- CVE-2024-8877 - Riello Netman 204 - SQL Injection - rules observed: 340156
- CVE-2024-9047 - WordPress File Upload <= 4.24.11 - Arbitrary File Read - rules observed: 344360
- CVE-2024-9193 - WHMpress <= 6.3-revision-0 - Unauthenticated Local File Inclusion to Arbitrary Options Update - rules observed: 340087, 347006
- CVE-2025-1661 - HUSKY – Products Filter Professional for WooCommerce <= 1.3.6.5 - Unauthenticated Local File Inclusion - rules observed: 340748
- CVE-2025-2294 - Kubio AI Page Builder <= 2.5.1 - Local File Inclusion - rules observed: 347009
- CVE-2025-24813 - Apache Tomcat Path Equivalence - Remote Code Execution - rules observed: 392301
- CVE-2025-24893 - XWiki Platform - Remote Code Execution - rules observed: 347009
- CVE-2025-25257 - Fortinet FortiWeb - SQL Injection - rules observed: 340156
- CVE-2025-2636 - InstaWP Connect < 0.1.0.86 - Local PHP File Inclusion - rules observed: 340007
- CVE-2025-29085 - Vipshop Saturn Console <= 3.5.1 - SQL Injection via ClusterKey Component - rules observed: 340159
- CVE-2025-29306 - FoxCMS v.1.2.5 - Remote Code Execution - rules observed: 347009, 393655
- CVE-2025-32814 - NetMRI Unauthenticated SQL Injection via skipjackUsername - rules observed: 340016
- CVE-2025-32969 - XWiki REST API Query - SQL Injection - rules observed: 380122
- CVE-2025-34085 - WordPress Simple File List <=4.2.2 - Remote Code Execution - rules observed: 382238
- CVE-2025-47812 - Wing FTP Server <= 7.4.3 - Remote Code Execution - rules observed: 390614
- CVE-2025-52472 - XWiki - HQL Injection - rules observed: 340159
- CVE-2025-53770 - Microsoft SharePoint Server - Remote Code Execution (ToolShell) - rules observed: 350147
- CVE-2025-5569 - IdeaCMS <= 1.7 - SQL Injection - rules observed: 341245
- CVE-2025-57819 - FreePBX - Remote Code Execution - rules observed: 340157, 341245
- CVE-2025-6403 - Code-Projects School Fees Payment System 1.0 - SQL Injection - rules observed: 340157, 380122
- CVE-2025-6970 - WordPress Events Manager <= 7.0.3 - SQL Injection - rules observed: 380122
- CVE-2026-6433 - FlipperCode Custom CSS, JS & PHP <= 2.0.7 - Remote Code Execution - rules observed: 340016
- CVE-2019-8982 - Wavemaker Studio 6.6 - Local File Inclusion/Server-Side Request Forgery - rules observed: 347009
- CVE-2020-20982 - shadoweb wdja v1.5.1 - Cross-Site Scripting - rules observed: 341266
- CVE-2021-32853 - Erxes <0.23.0 - Cross-Site Scripting - rules observed: 341266
- CVE-2013-1965 - Apache Struts2 S2-012 RCE - rules observed: 344360
- CVE-2013-2251 - Apache Struts 2 - DefaultActionMapper Prefixes OGNL Code Execution - rules observed: 393655
- CVE-2024-30498 - CRM Perks Forms <= 1.1.4 - SQL Injection - rules observed: 380122
- CVE-2024-32709 - WP-Recall <= 16.26.5 - SQL Injection - rules observed: 340016
- CVE-2025-48281 - MyStyle Custom Product Designer <= 3.21.1 - SQL Injection - rules observed: 380122
- CVE-2018-14916 - Loytec LGATE-902 <6.4.2 - Local File Inclusion - rules observed: 347009
- CVE-2018-16716 - NCBI ToolBox - Directory Traversal - rules observed: 347009
- CVE-2018-19365 - Wowza Streaming Engine Manager 4.7.4.01 - Directory Traversal - rules observed: 347009
- CVE-2019-13462 - Lansweeper Unauthenticated SQL Injection - rules observed: 340155
- CVE-2020-24589 - WSO2 API Manager <=3.1.0 - Blind XML External Entity Injection - rules observed: 380018
- CVE-2020-36333 - ThemeGrill Demo Importer < 1.6.2 - Database Reset - rules observed: 375357
- CVE-2021-21479 - SCIMono <0.0.19 - Remote Code Execution - rules observed: 340087
- CVE-2021-27931 - LumisXP <10.0.0 - Blind XML External Entity Attack - rules observed: 392301
- CVE-2021-28918 - Netmask NPM Package - Server-Side Request Forgery - rules observed: 347009
- CVE-2021-46419 - Telesquare TLR-2855KS6 - Arbitrary File Deletion - rules observed: 392301
- CVE-2022-26960 - elFinder <=2.1.60 - Local File Inclusion - rules observed: 347009
- CVE-2022-27593 - QNAP QTS Photo Station External Reference - Local File Inclusion - rules observed: 340007
- CVE-2023-36934 - MOVEit Transfer - SQL Injection - rules observed: 340016
- CVE-2024-53900 - Mongoose < 8.8.3 - Remote Code Execution - rules observed: 340095
- CVE-2025-4524 - WordPress Madara Theme < 2.2.2.1 - Local File Inclusion - rules observed: 344360
- CVE-2008-4668 - Joomla! Image Browser 0.1.5 rc2 - Local File Inclusion - rules observed: 347009
- CVE-2021-45046 - Apache Log4j2 - Remote Code Injection - rules observed: 345115
- CVE-2016-10960 - WordPress wSecure Lite < 2.4 - Remote Code Execution - rules observed: 392301
- CVE-2016-4977 - Spring Security OAuth2 Remote Command Execution - rules observed: 393655
- CVE-2016-6277 - NETGEAR Routers - Remote Code Execution - rules observed: 347009
- CVE-2017-14535 - Trixbox - 2.8.0.4 OS Command Injection - rules observed: 347009
- CVE-2017-6090 - PhpColl 2.5.1 Arbitrary File Upload - rules observed: 391746
- CVE-2018-10093 - AudioCodes 420HD - Remote Code Execution - rules observed: 347009
- CVE-2018-10823 - D-Link Routers - Remote Command Injection - rules observed: 347009
- CVE-2018-12613 - PhpMyAdmin <4.8.2 - Local File Inclusion - rules observed: 347009
- CVE-2018-7765 - Schneider Electric U.motion Builder - SQL Injection - rules observed: 341245
- CVE-2019-19824 - TOTOLINK Realtek SD Routers - Remote Command Injection - rules observed: 340014
- CVE-2019-9082 - ThinkPHP < 3.2.4 - Remote Code Execution - rules observed: 393753
- CVE-2020-13851 - Artica Pandora FMS 7.44 - Remote Code Execution - rules observed: 347009
- CVE-2020-17505 - Artica Web Proxy 4.30 - OS Command Injection - rules observed: 340017
- CVE-2020-24579 - D-Link DSL 2888a - Authentication Bypass/Remote Command Execution - rules observed: 347009, 392301
- CVE-2020-24949 - PHP-Fusion 9.03.50 - Remote Code Execution - rules observed: 393655
- CVE-2020-8163 - Ruby on Rails <5.0.1 - Remote Code Execution - rules observed: 347009
- CVE-2020-8641 - Lotus Core CMS 1.0.1 - Local File Inclusion - rules observed: 347009
- CVE-2020-8813 - Cacti v1.2.8 - Remote Code Execution - rules observed: 340014
- CVE-2021-20086 - Odoo Apps - Cross-Site Scripting via Prototype Pollution - rules observed: 347198
- CVE-2021-22053 - Spring Cloud Netflix Hystrix Dashboard <2.2.10 - Remote Code Execution - rules observed: 340193, 340087
- CVE-2021-28151 - Hongdian H8922 3.0.5 - Remote Command Injection - rules observed: 392301
- CVE-2021-32819 - Nodejs Squirrelly - Remote Code Execution - rules observed: 340014
- CVE-2021-3577 - Motorola Baby Monitors - Remote Command Execution - rules observed: 393655
- CVE-2022-1883 - Terraboard <2.2.0 - SQL Injection - rules observed: 341245
- CVE-2022-28079 - College Management System 1.0 - SQL Injection - rules observed: 340016
- CVE-2023-23492 - Login with Phone Number - Cross-Site Scripting - rules observed: 347198
- CVE-2023-30625 - Rudder Server < 1.3.0-rc.1 - SQL Injection - rules observed: 392301
- CVE-2023-37462 - XWiki Platform - Remote Code Execution - rules observed: 340130
- CVE-2023-4169 - Ruijie RG-EW1200G Router - Password Reset - rules observed: 392301
- CVE-2023-4415 - Ruijie RG-EW1200G Router Background - Login Bypass - rules observed: 392301
- CVE-2024-7340 - W&B Weave Server - Remote Arbitrary File Leak - rules observed: 347009
- CVE-2015-4694 - WordPress Zip Attachments <= 1.1.4 - Arbitrary File Retrieval - rules observed: 347009
- CVE-2018-16288 - LG SuperSign EZ CMS 2.5 - Local File Inclusion - rules observed: 347009
- CVE-2019-25246 - BEWARD N100 H.264 VGA IP Camera M2.1.6 - Arbitrary File Disclosure - rules observed: 347009
- CVE-2021-32820 - Express-handlebars - Local File Inclusion - rules observed: 347009
- CVE-2022-0783 - Multiple Shipping Address Woocommerce < 2.0 - SQL Injection - rules observed: 380122
- CVE-2022-24900 - Piano LED Visualizer 1.3 - Local File Inclusion - rules observed: 347009
- CVE-2022-41412 - perfSONAR 4.x <= 4.4.4 - Server-Side Request Forgery - rules observed: 340007
- CVE-2023-26360 - Adobe ColdFusion - Local File Read - rules observed: 344360, 340007
- CVE-2023-28787 - Quiz and Survey Master <= 8.1.4 - SQL Injection - rules observed: 380122
- CVE-2023-3722 - Avaya Aura Device Services - OS Command Injection - rules observed: 392301
- CVE-2023-4490 - WordPress Job Portal < 2.0.6 - SQL Injection - rules observed: 380122
- CVE-2023-47105 - Chaosblade < 1.7.4 - Remote Code Execution - rules observed: 393655
- CVE-2024-21136 - Oracle Retail Xstore Suite - Pre-authenticated Path Traversal - rules observed: 347019
- CVE-2024-23167 - GestSup - Cross-Site Scripting - rules observed: 333141
- CVE-2024-24919 - Check Point Quantum Gateway - Information Disclosure - rules observed: 392301
- CVE-2024-48766 - NetAlert X - Arbitary File Read - rules observed: 344360
- CVE-2025-10897 - WooCommerce Designer Pro <= 1.9.28 - Arbitrary File Read - rules observed: 344360
- CVE-2025-31131 - Yeswiki < 4.5.2 - Unauthenticated Path Traversal - rules observed: 347009
- CVE-2025-34045 - WeiPHP 5.0 - Path Traversal - rules observed: 344360
- CVE-2015-2996 - SysAid Help Desk <15.2 - Local File Inclusion - rules observed: 347009
- CVE-2024-5420 - SEH utnserver Pro/ProMAX/INU-100 20.1.22 - Cross-Site Scripting - rules observed: 340147
- CVE-2017-10075 - Oracle Content Server - Cross-Site Scripting - rules observed: 347198
- CVE-2020-13379 - Grafana 3.0.1-7.0.1 - Server-Side Request Forgery - rules observed: 340165
- CVE-2020-26248 - PrestaShop Product Comments <4.2.0 - SQL Injection - rules observed: 380122
- CVE-2022-2633 - All-In-One Video Gallery <=2.6.0 - Server-Side Request Forgery - rules observed: 340163
- CVE-2024-21893 - Ivanti SAML - Server Side Request Forgery (SSRF) - rules observed: 392301
- CVE-2025-2609 - MagnusBilling Login Logs - Cross-Site Scripting - rules observed: 333141
- CVE-2025-44177 - White Star Software ProTop - Directory Traversal - rules observed: 347009
- CVE-2016-3081 - Apache S2-032 Struts - Remote Code Execution - rules observed: 347009
- CVE-2017-12615 - Apache Tomcat Servers - Remote Code Execution - rules observed: 380026, 347009
- CVE-2017-12617 - Apache Tomcat - Remote Code Execution - rules observed: 392301
- CVE-2018-11231 - Opencart Divido - Sql Injection - rules observed: 392301
- CVE-2018-11776 - Apache Struts2 S2-057 - Remote Code Execution - rules observed: 347009
- CVE-2018-6961 - VMware NSX SD-WAN Edge - Command Injection - rules observed: 393655
- CVE-2019-6340 - Drupal - Remote Code Execution - rules observed: 392301
- CVE-2021-23394 - elFinder < 2.1.58 - Remote Code Execution - rules observed: 393781
- CVE-2023-26067 - Lexmark Printers - Command Injection - rules observed: 392301
- CVE-2023-5815 - News & Blog Designer Pack – WordPress Blog Plugin <= 3.4.1 - Unauthenticated Local File Inclusion - rules observed: 347006
- CVE-2023-6831 - mlflow - Path Traversal - rules observed: 390709
- CVE-2024-38473 - Apache HTTP Server - ACL Bypass - rules observed: 390709
- CVE-2025-48954 - Discourse OAuth Social Login - Cross-site Scripting - rules observed: 390712, 347198
- CVE-2026-1207 - Django RasterField - SQL Injection - rules observed: 341245
- CVE-2021-20167 - Netgear RAX43 1.0.3.96 - Command Injection/Authentication Bypass Buffer Overrun - rules observed: 392301
- CVE-2009-1558 - Cisco Linksys WVC54GCA 1.00R22/1.00R24 - Local File Inclusion - rules observed: 347009
- CVE-2010-4231 - Camtron CMNC-200 IP Camera - Directory Traversal - rules observed: 347009
- CVE-2011-3315 - Cisco CUCM, UCCX, and Unified IP-IVR- Directory Traversal - rules observed: 347009
- CVE-2014-2962 - Belkin N150 Router 1.00.08/1.00.09 - Path Traversal - rules observed: 347009
- CVE-2015-3035 - TP-LINK - Local File Inclusion - rules observed: 347009
- CVE-2021-21315 - Node.JS System Information Library <5.3.1 - Remote Command Injection - rules observed: 347009
- CVE-2022-25485 - Cuppa CMS v1.0 - Local File Inclusion - rules observed: 344360
- CVE-2022-25486 - Cuppa CMS v1.0 - Local File Inclusion - rules observed: 344360
- CVE-2021-21234 - Spring Boot Actuator Logview Directory Traversal - rules observed: 347009, 340007
- CVE-2021-43831 - Gradio < 2.5.0 - Arbitrary File Read - rules observed: 347009
- CVE-2002-1131 - SquirrelMail 1.2.6/1.2.7 - Cross-Site Scripting - rules observed: 341266
- CVE-2006-2842 - Squirrelmail <=1.4.6 - Local File Inclusion - rules observed: 347009
- CVE-2008-1059 - WordPress Sniplets 1.1.2 - Local File Inclusion - rules observed: 344360
- CVE-2009-1151 - PhpMyAdmin Scripts - Remote Code Execution - rules observed: 344360
- CVE-2009-2015 - Joomla! MooFAQ 1.0 - Local File Inclusion - rules observed: 347009
- CVE-2009-3318 - Joomla! Roland Breedveld Album 1.14 - Local File Inclusion - rules observed: 347009
- CVE-2009-4202 - Joomla! Omilen Photo Gallery 0.5b - Local File Inclusion - rules observed: 347009
- CVE-2009-4223 - KR-Web <=1.1b2 - Remote File Inclusion - rules observed: 340162
- CVE-2009-4679 - Joomla! Portfolio Nexus - Remote File Inclusion - rules observed: 347009
- CVE-2010-0157 - Joomla! Component com_biblestudy - Local File Inclusion - rules observed: 347009
- CVE-2010-0759 - Joomla! Plugin Core Design Scriptegrator - Local File Inclusion - rules observed: 347009
- CVE-2010-0972 - Joomla! Component com_gcalendar Suite 2.1.5 - Local File Inclusion - rules observed: 347009
- CVE-2010-0985 - Joomla! Component com_abbrev - Local File Inclusion - rules observed: 347009
- CVE-2010-1306 - Joomla! Component Picasa 2.0 - Local File Inclusion - rules observed: 347009
- CVE-2010-1470 - Joomla! Component Web TV 1.0 - Local File Inclusion - rules observed: 347009
- CVE-2010-1471 - Joomla! Component Address Book 1.5.0 - Local File Inclusion - rules observed: 347009
- CVE-2010-1472 - Joomla! Component Horoscope 1.5.0 - Local File Inclusion - rules observed: 347009
- CVE-2010-1495 - Joomla! Component Matamko 1.01 - Local File Inclusion - rules observed: 347009
- CVE-2010-1531 - Joomla! Component redSHOP 1.0 - Local File Inclusion - rules observed: 347009
- CVE-2010-1533 - Joomla! Component TweetLA 1.0.1 - Local File Inclusion - rules observed: 347009
- CVE-2010-1535 - Joomla! Component TRAVELbook 1.0.1 - Local File Inclusion - rules observed: 347009
- CVE-2010-1602 - Joomla! Component ZiMB Comment 0.8.1 - Local File Inclusion - rules observed: 347009
- CVE-2010-1603 - Joomla! Component ZiMBCore 0.1 - Local File Inclusion - rules observed: 347009
- CVE-2010-1653 - Joomla! Component Graphics 1.0.6 - Local File Inclusion - rules observed: 347009
- CVE-2010-1717 - Joomla! Component iF surfALERT 1.2 - Local File Inclusion - rules observed: 347009
- CVE-2010-1875 - Joomla! Component Property - Local File Inclusion - rules observed: 347009
- CVE-2010-1878 - Joomla! Component OrgChart 1.0.0 - Local File Inclusion - rules observed: 347009
- CVE-2010-1952 - Joomla! Component BeeHeard 1.0 - Local File Inclusion - rules observed: 347009
- CVE-2010-1953 - Joomla! Component iNetLanka Multiple Map 1.0 - Local File Inclusion - rules observed: 347009
- CVE-2010-1954 - Joomla! Component iNetLanka Multiple root 1.0 - Local File Inclusion - rules observed: 347009
- CVE-2010-1955 - Joomla! Component Deluxe Blog Factory 1.1.2 - Local File Inclusion - rules observed: 347009
- CVE-2010-1956 - Joomla! Component Gadget Factory 1.0.0 - Local File Inclusion - rules observed: 347009
- CVE-2010-1957 - Joomla! Component Love Factory 1.3.4 - Local File Inclusion - rules observed: 347009
- CVE-2010-1977 - Joomla! Component J!WHMCS Integrator 1.5.0 - Local File Inclusion - rules observed: 347009
- CVE-2010-1980 - Joomla! Component Joomla! Flickr 1.0 - Local File Inclusion - rules observed: 347009
- CVE-2010-1983 - Joomla! Component redTWITTER 1.0 - Local File Inclusion - rules observed: 347009
- CVE-2010-2018 - Lokomedia CMS - Local File Inclusion - rules observed: 347009
- CVE-2010-2033 - Joomla! Percha Categories Tree 0.6 - Local File Inclusion - rules observed: 347009
- CVE-2010-2034 - Joomla! Component Percha Image Attach 1.1 - Directory Traversal - rules observed: 347009
- CVE-2010-2035 - Joomla! Component Percha Gallery 1.6 Beta - Directory Traversal - rules observed: 347009
- CVE-2010-2036 - Joomla! Component Percha Fields Attach 1.0 - Directory Traversal - rules observed: 347009
- CVE-2010-2037 - Joomla! Component Percha Downloads Attach 1.1 - Directory Traversal - rules observed: 347009
- CVE-2010-2045 - Joomla! Component FDione Form Wizard 1.0.2 - Local File Inclusion - rules observed: 347009
- CVE-2010-2050 - Joomla! Component MS Comment 0.8.0b - Local File Inclusion - rules observed: 347009
- CVE-2010-2128 - Joomla! Component JE Quotation Form 1.0b1 - Local File Inclusion - rules observed: 347009
- CVE-2010-2259 - Joomla! Component com_bfsurvey - Local File Inclusion - rules observed: 347009
- CVE-2010-2682 - Joomla! Component Realtyna Translator 1.0.15 - Local File Inclusion - rules observed: 347009
- CVE-2010-2861 - Adobe ColdFusion 8.0/8.0.1/9.0/9.0.1 LFI - rules observed: 390614
- CVE-2010-2918 - Joomla! Component Visites 1.1 - MosConfig_absolute_path Remote File Inclusion - rules observed: 347009
- CVE-2010-3426 - Joomla! Component Jphone 1.0 Alpha 3 - Local File Inclusion - rules observed: 347009
- CVE-2010-4282 - phpShowtime 2.0 - Directory Traversal - rules observed: 347009
- CVE-2010-4719 - Joomla! Component JRadio - Local File Inclusion - rules observed: 347009
- CVE-2010-4769 - Joomla! Component Jimtawl 1.0.2 - Local File Inclusion - rules observed: 347009
- CVE-2010-4977 - Joomla! Component Canteen 1.0 - Local File Inclusion - rules observed: 347009
- CVE-2010-5028 - Joomla! Component JE Job 1.0 - Local File Inclusion - rules observed: 347009
- CVE-2012-1226 - Dolibarr ERP/CRM 3.2 Alpha - Multiple Directory Traversal Vulnerabilities - rules observed: 347009
- CVE-2012-1823 - PHP CGI v5.3.12/5.4.2 Remote Code Execution - rules observed: 340165
- CVE-2014-10037 - DomPHP 0.83 - Directory Traversal - rules observed: 347009
- CVE-2014-3704 - Drupal SQL Injection - rules observed: 392301
- CVE-2014-3744 - Node.js st module Directory Traversal - rules observed: 347009
- CVE-2014-8682 - Gogs (Go Git Service) - SQL Injection - rules observed: 340016, 340017
- CVE-2014-9735 - WordPress RevSlider - Remote Code Execution via File Upload - rules observed: 337469
- CVE-2015-1000005 - WordPress Candidate Application Form <= 1.3 - Local File Inclusion - rules observed: 347009
- CVE-2015-1000010 - WordPress Simple Image Manipulator < 1.0 - Local File Inclusion - rules observed: 347009
- CVE-2015-1000012 - WordPress MyPixs <=0.3 - Local File Inclusion - rules observed: 347009
- CVE-2015-1427 - ElasticSearch - Remote Code Execution - rules observed: 344360
- CVE-2015-1503 - IceWarp Mail Server <11.1.1 - Directory Traversal - rules observed: 347009
- CVE-2015-2196 - WordPress Spider Calendar <=1.4.9 - SQL Injection - rules observed: 380122
- CVE-2015-3648 - ResourceSpace - Local File inclusion - rules observed: 347009
- CVE-2015-4074 - Joomla! Helpdesk Pro plugin <1.4.0 - Local File Inclusion - rules observed: 347009
- CVE-2015-4632 - Koha 3.20.1 - Directory Traversal - rules observed: 347009
- CVE-2015-5469 - WordPress MDC YouTube Downloader 2.1.0 - Local File Inclusion - rules observed: 347009
- CVE-2015-7245 - D-Link DVG-N5402SP - Local File Inclusion - rules observed: 392301
- CVE-2015-7297 - Joomla! Core SQL Injection - rules observed: 340159
- CVE-2015-9406 - mTheme Unus < 2.3 - Directory Traversal - rules observed: 344360
- CVE-2016-10367 - Opsview Monitor Pro - Local File Inclusion - rules observed: 390709
- CVE-2016-10924 - Wordpress Zedna eBook download <1.2 - Local File Inclusion - rules observed: 344360
- CVE-2016-10956 - WordPress Mail Masta 1.0 - Local File Inclusion - rules observed: 347009
- CVE-2016-2389 - SAP xMII 15.0 for SAP NetWeaver 7.4 - Local File Inclusion - rules observed: 347009
- CVE-2016-6601 - ZOHO WebNMS Framework <5.2 SP1 - Local File Inclusion - rules observed: 347009
- CVE-2017-1000028 - Oracle GlassFish Server Open Source Edition 4.1 - Local File Inclusion - rules observed: 347009
- CVE-2017-1000029 - Oracle GlassFish Server Open Source Edition 3.0.1 - Local File Inclusion - rules observed: 347009
- CVE-2017-1000170 - WordPress Delightful Downloads Jquery File Tree 2.1.5 - Local File Inclusion - rules observed: 392301
- CVE-2017-10974 - Yaws 1.91 - Local File Inclusion - rules observed: 350591
- CVE-2017-11512 - ManageEngine ServiceDesk 9.3.9328 - Arbitrary File Retrieval - rules observed: 340007, 347019
- CVE-2017-14849 - Node.js <8.6.0 - Directory Traversal - rules observed: 347009
- CVE-2017-15363 - Luracast Restler 3.0.1 via TYPO3 Restler 1.7.1 - Local File Inclusion - rules observed: 340007
- CVE-2017-15647 - FiberHome Routers - Local File Inclusion - rules observed: 347009
- CVE-2017-16806 - Ulterius Server < 1.9.5.0 - Directory Traversal - rules observed: 347009
- CVE-2017-16877 - Nextjs <2.4.1 - Local File Inclusion - rules observed: 347009
- CVE-2017-16894 - Laravel <5.5.21 - Information Disclosure - rules observed: 390709
- CVE-2017-9833 - BOA Web Server 0.94.14 - Arbitrary File Access - rules observed: 347009
- CVE-2018-10822 - D-Link Routers - Local File Inclusion - rules observed: 347009
- CVE-2018-10956 - IPConfigure Orchid Core VMS 2.0.5 - Local File Inclusion - rules observed: 347009
- CVE-2018-12054 - Schools Alert Management Script - Arbitrary File Read - rules observed: 344360
- CVE-2018-12909 - Webgrind <= 1.5 - Local File Inclusion - rules observed: 347009
- CVE-2018-14912 - cgit < 1.2.1 - Directory Traversal - rules observed: 347009
- CVE-2018-14918 - LOYTEC LGATE-902 6.3.2 - Local File Inclusion - rules observed: 347009
- CVE-2018-15138 - LG-Ericsson iPECS NMS 30M - Local File Inclusion - rules observed: 347009
- CVE-2018-15535 - Responsive FileManager <9.13.4 - Local File Inclusion - rules observed: 347009
- CVE-2018-15745 - Argus Surveillance DVR 4.0.0.0 - Local File Inclusion - rules observed: 340007
- CVE-2018-16299 - WordPress Localize My Post 1.0 - Local File Inclusion - rules observed: 347009
- CVE-2018-18323 - Centos Web Panel 0.9.8.480 - Local File Inclusion - rules observed: 347009
- CVE-2018-19326 - Zyxel VMG1312-B10D 5.13AAXA.8 - Local File Inclusion - rules observed: 347009
- CVE-2018-19458 - PHP Proxy 3.0.3 - Local File Inclusion - rules observed: 347009
- CVE-2018-19753 - Tarantella Enterprise <3.11 - Local File Inclusion - rules observed: 347009
- CVE-2018-20463 - WordPress JSmol2WP <=1.07 - Local File Inclusion - rules observed: 344360
- CVE-2018-20470 - Tyto Sahi pro 7.x/8.x - Local File Inclusion - rules observed: 340007
- CVE-2018-3760 - Ruby On Rails - Local File Inclusion - rules observed: 347009
- CVE-2018-6008 - Joomla! Jtag Members Directory 5.3.7 - Local File Inclusion - rules observed: 347009
- CVE-2018-6184 - Zeit Next.js < 4.2.3 - Local File Inclusion - rules observed: 347009
- CVE-2018-7422 - WordPress Site Editor <=1.1.1 - Local File Inclusion - rules observed: 347009, 344360
- CVE-2018-7490 - uWSGI PHP Plugin Local File Inclusion - rules observed: 347009
- CVE-2018-7719 - Acrolinx Server <5.2.5 - Local File Inclusion - rules observed: 347019
- CVE-2018-8033 - Apache OFBiz - XML External Entity Injection - rules observed: 341256
- CVE-2018-9118 - WordPress 99 Robots WP Background Takeover Advertisements <=4.1.4 - Local File Inclusion - rules observed: 344360
- CVE-2018-9205 - Drupal avatar_uploader v7.x-1.0-beta8 - Local File Inclusion - rules observed: 347009
- CVE-2019-12276 - GrandNode 4.40 - Local File Inclusion - rules observed: 347009
- CVE-2019-12593 - IceWarp Mail Server <=10.4.4 - Local File Inclusion - rules observed: 347019
- CVE-2019-14205 - WordPress Nevma Adaptive Images <0.6.67 - Local File Inclusion - rules observed: 344360
- CVE-2019-14251 - T24 Web Server - Local File Inclusion - rules observed: 347009
- CVE-2019-16123 - PilusCart <=1.4.1 - Local File Inclusion - rules observed: 347009
- CVE-2019-16469 - Adobe Experience Manager - Expression Language Injection - rules observed: 393655
- CVE-2019-17538 - Jiangnan Online Judge 0.8.0 - Local File Inclusion - rules observed: 347009
- CVE-2019-18371 - Xiaomi Mi WiFi R3G Routers - Local file Inclusion - rules observed: 347009
- CVE-2019-18665 - DOMOS 5.5 - Local File Inclusion - rules observed: 347009
- CVE-2019-18922 - Allied Telesis AT-GS950/8 - Local File Inclusion - rules observed: 347009
- CVE-2019-5418 - Rails File Content Disclosure - rules observed: 390719
- CVE-2019-7254 - eMerge E3 1.00-06 - Local File Inclusion - rules observed: 347009
- CVE-2019-7315 - Genie Access WIP3BVAF IP Camera - Local File Inclusion - rules observed: 347009
- CVE-2019-7481 - SonicWall SRA 4600 VPN - SQL Injection - rules observed: 340016
- CVE-2019-9922 - Joomla! Harmis Messenger 1.2.2 - Local File Inclusion - rules observed: 347009
- CVE-2020-11738 - WordPress Duplicator 1.3.24 & 1.3.26 - Local File Inclusion - rules observed: 347009, 344360
- CVE-2020-12447 - Onkyo TX-NR585 Web Interface - Directory Traversal - rules observed: 347009
- CVE-2020-13158 - Artica Proxy Community Edition <4.30.000000 - Local File Inclusion - rules observed: 347009
- CVE-2020-13886 - Intelbras TIP 200/200 LITE/300 - Local File Inclusion - rules observed: 347009
- CVE-2020-14864 - Oracle Fusion - Directory Traversal/Local File Inclusion - rules observed: 347009
- CVE-2020-17519 - Apache Flink - Local File Inclusion - rules observed: 390709
- CVE-2020-19360 - FHEM 6.0 - Local File Inclusion - rules observed: 347009
- CVE-2020-23575 - Kyocera Printer d-COPIA253MF - Directory Traversal - rules observed: 347009
- CVE-2020-24285 - INTELBRAS TELEFONE IP TIP200 60.61.75.22 - Local File Inclusion - rules observed: 347009
- CVE-2020-27191 - LionWiki <3.2.12 - Local File Inclusion - rules observed: 347009
- CVE-2020-27467 - Processwire CMS <2.7.1 - Local File Inclusion - rules observed: 347009
- CVE-2020-35580 - SearchBlox <9.2.2 - Local File Inclusion - rules observed: 347009
- CVE-2020-35598 - Advanced Comment System 1.0 - Local File Inclusion - rules observed: 347009
- CVE-2020-35736 - GateOne 1.1 - Local File Inclusion - rules observed: 347009
- CVE-2020-5410 - Spring Cloud Config Server - Local File Inclusion - rules observed: 390709
- CVE-2020-8209 - Citrix XenMobile Server - Local File Inclusion - rules observed: 347009
- CVE-2020-8982 - Citrix ShareFile StorageZones <=5.10.x - Arbitrary File Read - rules observed: 340007
- CVE-2021-20123 - Draytek VigorConnect 1.6.0-B - Local File Inclusion - rules observed: 340007, 347009
- CVE-2021-20124 - Draytek VigorConnect 6.0-B3 - Local File Inclusion - rules observed: 347009
- CVE-2021-24227 - Patreon WordPress <1.7.0 - Unauthenticated Local File Inclusion - rules observed: 347009
- CVE-2021-24340 - WordPress Statistics <13.0.8 - Blind SQL Injection - rules observed: 380122
- CVE-2021-25864 - Hue Magic 3.0.0 - Local File Inclusion - rules observed: 347009
- CVE-2021-25899 - Void Aural Rec Monitor 9.0.0.1 - SQL Injection - rules observed: 380122
- CVE-2021-27316 - Doctor Appointment System 1.0 - SQL Injection - rules observed: 380122
- CVE-2021-27319 - Doctor Appointment System 1.0 - SQL Injection - rules observed: 380122
- CVE-2021-27320 - Doctor Appointment System 1.0 - SQL Injection - rules observed: 380122
- CVE-2021-3223 - Node RED Dashboard <2.26.2 - Local File Inclusion - rules observed: 347009
- CVE-2021-32789 - WooCommerce Blocks 2.5 to 5.5 - Unauthenticated SQL Injection - rules observed: 360150
- CVE-2021-33807 - Cartadis Gespage 8.2.1 - Directory Traversal - rules observed: 344360
- CVE-2021-34805 - FAUST iServer 9.0.018.018.4 - Local File Inclusion - rules observed: 347019
- CVE-2021-35250 - SolarWinds Serv-U 15.3 - Directory Traversal - rules observed: 340007
- CVE-2021-35380 - TermTalk Server 3.24.0.2 - Local File Inclusion - rules observed: 340007
- CVE-2021-36748 - PrestaHome Blog for PrestaShop <1.7.8 - SQL Injection - rules observed: 341245
- CVE-2021-39312 - WordPress True Ranker <2.2.4 - Local File Inclusion - rules observed: 344360
- CVE-2021-39316 - WordPress DZS Zoomsounds <=6.50 - Local File Inclusion - rules observed: 347009
- CVE-2021-39433 - BIQS IT Biqs-drive v1.83 Local File Inclusion - rules observed: 347009
- CVE-2021-40661 - IND780 - Local File Inclusion - rules observed: 340007
- CVE-2021-40978 - MKdocs 1.2.2 - Directory Traversal - rules observed: 347009
- CVE-2021-41277 - Metabase - Local File Inclusion - rules observed: 340165, 347009
- CVE-2021-41291 - ECOA Building Automation System - Directory Traversal Content Disclosure - rules observed: 347009
- CVE-2021-41293 - ECOA Building Automation System - Arbitrary File Retrieval - rules observed: 392301
- CVE-2021-41460 - ECShop 4.1.0 - SQL Injection - rules observed: 340159
- CVE-2021-41569 - SAS/Internet 9.4 1520 - Local File Inclusion - rules observed: 347009
- CVE-2021-41648 - PuneethReddyHC action.php SQL Injection - rules observed: 392301
- CVE-2021-41773 - Apache 2.4.49 - Path Traversal and Remote Code Execution - rules observed: 347009
- CVE-2021-43287 - Pre-Auth Takeover of Build Pipelines in GoCD - rules observed: 347009
- CVE-2021-43495 - AlquistManager Local File Inclusion - rules observed: 347009
- CVE-2021-43496 - Clustering Local File Inclusion - rules observed: 347009
- CVE-2021-43734 - kkFileview v4.0.0 - Local File Inclusion - rules observed: 347009, 340165
- CVE-2021-43778 - GLPI plugin Barcode < 2.6.1 - Path Traversal Vulnerability. - rules observed: 347009
- CVE-2021-43798 - Grafana v8.x - Arbitrary File Read - rules observed: 347009
- CVE-2021-4463 - Longjing Technology BEMS API 1.21 - Unauthenticated Arbitrary File Download - rules observed: 347009
- CVE-2021-45043 - HD-Network Realtime Monitoring System 2.0 - Local File Inclusion - rules observed: 344360
- CVE-2021-46104 - webp_server_go 0.4.0 - Path Traversal - rules observed: 390709
- CVE-2021-46107 - Ligeo Archives Ligeo Basics - Server Side Request Forgery - rules observed: 347009, 340162
- CVE-2021-46381 - D-Link DAP-1620 - Local File Inclusion - rules observed: 392301
- CVE-2021-46417 - Franklin Fueling Systems Colibri Controller Module 1.8.19.8580 - Local File Inclusion - rules observed: 347009
- CVE-2021-46418 - Telesquare TLR-2855KS6 - Arbitrary File Creation - rules observed: 392301
- CVE-2022-0656 - uDraw <3.3.3 - Local File Inclusion - rules observed: 344360
- CVE-2022-0666 - Microweber < 1.2.11 - CRLF Injection - rules observed: 330708
- CVE-2022-1119 - WordPress Simple File List <3.2.8 - Local File Inclusion - rules observed: 344360
- CVE-2022-1768 - WordPress RSVPMaker <=9.3.2 - SQL Injection - rules observed: 380122
- CVE-2022-23347 - BigAnt Server v5.6.06 - Local File Inclusion - rules observed: 340007
- CVE-2022-24124 - Casdoor 1.13.0 - Unauthenticated SQL Injection - rules observed: 341245
- CVE-2022-24716 - Icinga Web 2 - Arbitrary File Disclosure - rules observed: 347009
- CVE-2022-26233 - Barco Control Room Management Suite <=2.9 Build 0275 - Local File Inclusion - rules observed: 347019
- CVE-2022-26271 - 74cmsSE v3.4.1 - Arbitrary File Read - rules observed: 340007
- CVE-2022-27043 - Yearning - Directory Traversal - rules observed: 347009, 347019
- CVE-2022-29014 - Razer Sila Gaming Router 2.0.441_api-2.0.418 - Local File Inclusion - rules observed: 344360
- CVE-2022-29298 - SolarView Compact 6.00 - Local File Inclusion - rules observed: 347009
- CVE-2022-31474 - BackupBuddy - Local File Inclusion - rules observed: 347009
- CVE-2022-33901 - WordPress MultiSafepay for WooCommerce <=4.13.1 - Arbitrary File Read - rules observed: 347009
- CVE-2022-34121 - CuppaCMS v1.0 - Local File Inclusion - rules observed: 344360
- CVE-2022-37122 - Carel pCOWeb HVAC BACnet Gateway 2.1.0 - Path Traversal - rules observed: 347009
- CVE-2022-38794 - Zaver - Local File Inclusion - rules observed: 347009
- CVE-2022-38840 - Güralp MAN-EAM-0003 3.2.4 - XML External Entity (XXE) - rules observed: 344360
- CVE-2022-4140 - WordPress Welcart e-Commerce <2.8.5 - Arbitrary File Access - rules observed: 347009
- CVE-2022-47501 - Apache OFBiz < 18.12.07 - Local File Inclusion - rules observed: 340165, 347009
- CVE-2023-0126 - SonicWall SMA1000 LFI - rules observed: 347009
- CVE-2023-0159 - Extensive VC Addons for WPBakery page builder < 1.9.1 - Unauthenticated RCE - rules observed: 344360
- CVE-2023-22047 - Oracle Peoplesoft - Unauthenticated File Read - rules observed: 340165, 347009
- CVE-2023-23063 - Cellinx NVT Web Server - Local File Disclosure - rules observed: 347009
- CVE-2023-26256 - STAGIL Navigation for Jira Menu & Themes <2.0.52 - Local File Inclusion - rules observed: 347009
- CVE-2023-27639 - PrestaShop TshirteCommerce - Directory Traversal - rules observed: 340007
- CVE-2023-27640 - PrestaShop tshirtecommerce - Directory Traversal - rules observed: 340007
- CVE-2023-29887 - Nuovo Spreadsheet Reader 0.5.11 - Local File Inclusion - rules observed: 347009
- CVE-2023-31059 - Repetier Server - Directory Traversal - rules observed: 347019
- CVE-2023-33510 - Jeecg P3 Biz Chat - Local File Inclusion - rules observed: 347009
- CVE-2023-34092 - Vite Dev Server - Information Exposure - rules observed: 390709
- CVE-2023-34133 - SonicWall GMS and Analytics - SQL Injection - rules observed: 380123
- CVE-2023-34843 - Traggo Server - Local File Inclusion - rules observed: 347019
- CVE-2023-35843 - NocoDB version <= 0.106.1 - Arbitrary File Read - rules observed: 347009
- CVE-2023-35844 - Lightdash version <= 0.510.3 Arbitrary File Read - rules observed: 347009
- CVE-2023-37474 - Copyparty <= 1.8.2 - Directory Traversal - rules observed: 347009
- CVE-2023-38879 - openSIS v9.0 - Path Traversal - rules observed: 347009
- CVE-2023-38950 - ZKTeco BioTime v8.5.5 - Path Traversal - rules observed: 340007
- CVE-2023-39026 - FileMage Gateway - Directory Traversal - rules observed: 347019
- CVE-2023-39141 - Aria2 WebUI - Path traversal - rules observed: 347009
- CVE-2023-40924 - SolarView Compact < 6.00 - Directory Traversal - rules observed: 347009
- CVE-2023-6020 - Ray Static File - Local File Inclusion - rules observed: 347009
- CVE-2023-6023 - VertaAI ModelDB - Path Traversal - rules observed: 347009
- CVE-2023-6038 - H2O ImportFiles - Local File Inclusion - rules observed: 347009, 344360
- CVE-2023-6567 - LearnPress <= 4.2.5.7 - SQL Injection - rules observed: 380122
- CVE-2023-6909 - Mlflow <2.9.2 - Path Traversal - rules observed: 392301
- CVE-2023-6977 - Mlflow <2.8.0 - Local File Inclusion - rules observed: 344360
- CVE-2024-11303 - Korenix JetPort 5601v3 - Path Traversal - rules observed: 347009
- CVE-2024-12025 - WordPress Collapsing Categories <= 3.0.8 - SQL Injection - rules observed: 380122
- CVE-2024-13322 - Ads Pro Plugin <= 4.88 - Unauthenticated SQL Injection - rules observed: 380122
- CVE-2024-23334 - aiohttp - Directory Traversal - rules observed: 347009
- CVE-2024-26291 - Avid NEXIS Agent - Arbitrary File Read - rules observed: 347009
- CVE-2024-27292 - Docassemble - Local File Inclusion - rules observed: 347009
- CVE-2024-28995 - SolarWinds Serv-U - Directory Traversal - rules observed: 340007, 347019
- CVE-2024-32736 - CyberPower < v2.8.3 - SQL Injection - rules observed: 340016
- CVE-2024-32737 - CyberPower - SQL Injection - rules observed: 340016
- CVE-2024-32738 - CyberPower - SQL Injection - rules observed: 340016
- CVE-2024-32739 - CyberPower < v2.8.3 - SQL Injection - rules observed: 340016
- CVE-2024-38816 - WebMvc.fn/WebFlux.fn - Path Traversal - rules observed: 347009
- CVE-2024-38819 - Spring Framework Path Traversal in Functional Web Frameworks - rules observed: 347009
- CVE-2024-45241 - CentralSquare CryWolf - Path Traversal - rules observed: 340007
- CVE-2024-45388 - Hoverfly < 1.10.3 - Arbitrary File Read - rules observed: 344360
- CVE-2024-4956 - Sonatype Nexus Repository Manager 3 - Local File Inclusion - rules observed: 347009
- CVE-2024-5334 - Devika - Local File Inclusion - rules observed: 347009
- CVE-2024-6250 - LOLLMS WebUI - Absolute Path Traversal - rules observed: 392301
- CVE-2024-6893 - Journyx - XML External Entities Injection (XXE) - rules observed: 344360
- CVE-2024-8522 - LearnPress < 4.2.7.1 - SQL Injection - rules observed: 380122
- CVE-2024-8752 - WebIQ 2.15.9 - Directory Traversal - rules observed: 347019
- CVE-2024-9362 - Polyaxon - Unauthenticated Directory Traversal - rules observed: 347009
- CVE-2025-10162 - WordPress OrderConvo < 14 - Path Traversal - rules observed: 344360
- CVE-2025-2011 - Slider & Popup Builder by Depicter <= 3.6.1 - Unauthenticated SQL Injection - rules observed: 340016
- CVE-2025-30567 - WordPress WP01 - Path Traversal - rules observed: 390709
- CVE-2025-34023 - Karel IP Phone IP1211 Web Management Panel - Local File Inclusion - rules observed: 347009
- CVE-2025-34031 - Moodle Jmol Filter 6.1 - Local File Inclusion - rules observed: 347009
- CVE-2025-4008 - MeteoBridge <= 6.1 - Remote Code Execution - rules observed: 393655
- CVE-2025-4396 - Relevanssi <= 4.24.4 (Free) - Unauthenticated SQL Injection - rules observed: 380122
- CVE-2025-44137 - MapTiler Tileserver-php v2.0 - Unauthenticated File Read - rules observed: 347009
- CVE-2025-47445 - WordPress Eventin (Themewinter) ≤ 4.0.26 - Arbitrary File Download - rules observed: 347009
- CVE-2025-5287 - Likes and Dislikes Plugin <= 1.0.0 - Unauthenticated SQL Injection - rules observed: 380122
- CVE-2025-54726 - WordPress JS Archive List <= 6.1.5 - SQL Injection - rules observed: 380122
- CVE-2025-55523 - Agent-Zero 0.8.0 - 0.9.4 - Arbitrary File Download - rules observed: 347009
- CVE-2025-55748 - XWiki Platform - Path Traversal - rules observed: 340007
- CVE-2025-59049 - Mockoon < 9.2.0 - Path Traversal - rules observed: 347009
- CVE-2025-61884 - Oracle E-Business Suite - Server-Side Request Forgery - rules observed: 342259
- CVE-2025-66744 - Yonyou YonBIP - Path Traversal - rules observed: 340007
- CVE-2026-1557 - WP Responsive Images <= 1.0 - Arbitrary File Read - rules observed: 344360
- CVE-2026-1581 - wpForo Forum <= 2.4.14 - SQL Injection - rules observed: 380122
- CVE-2026-2413 - Ally – Web Accessibility & Usability <= 4.0.3 - SQL Injection - rules observed: 380122
- CVE-2026-39364 - Vite Dev Server - Directory Traversal - rules observed: 390709
- CVE-2024-48259 - Cloudlog - SQL Injection - rules observed: 340016
- CVE-2024-7188 - Bylancer Quicklancer 2.4 G - SQL Injection - rules observed: 380122
- CVE-2025-10090 - Jinher OA - SQL Injection - rules observed: 361149
- CVE-2007-2449 - Apache Tomcat 4.x-7.x - Cross-Site Scripting - rules observed: 341266
- CVE-2018-10735
- NagiosXI <= 5.4.12
commandline.phpSQL injection - rules observed: 340016 - CVE-2018-10736 - NagiosXI <= 5.4.12 - SQL injection - rules observed: 340016
- CVE-2018-10737 - NagiosXI <= 5.4.12 logbook.php SQL injection - rules observed: 340155
- CVE-2018-10738 - NagiosXI <= 5.4.12 menuaccess.php - SQL injection - rules observed: 340155
- CVE-2019-16996 - Metinfo 7.0.0 beta - SQL Injection - rules observed: 340016
- CVE-2019-16997 - Metinfo 7.0.0 beta - SQL Injection - rules observed: 340016
- CVE-2019-17418 - MetInfo 7.0.0 beta - SQL Injection - rules observed: 340016
- CVE-2019-2767 - Oracle Business Intelligence Publisher - XML External Entity Injection - rules observed: 380018
- CVE-2019-9041 - ZZZCMS 1.6.1 - Remote Code Execution - rules observed: 380026
- CVE-2020-14883 - Oracle Fusion Middleware WebLogic Server Administration Console - Remote Code Execution - rules observed: 380026
- CVE-2021-30203 - Dzzoffice 2.02.1 - Cross-Site Scripting - rules observed: 333141
- CVE-2021-33544 - Geutebruck - Remote Command Injection - rules observed: 393655
- CVE-2022-29316 - Complete Online Job Search System 1.0 - Cross-Site Scripting - rules observed: 340147
- CVE-2022-31974 - Online Fire Reporting System v1.0 - SQL injection - rules observed: 340016
- CVE-2022-31975 - Online Fire Reporting System v1.0 - SQL injection - rules observed: 340016
- CVE-2022-31984 - Online Fire Reporting System v1.0 - SQL injection - rules observed: 340016
- CVE-2022-32015 - Complete Online Job Search System 1.0 - SQL Injection - rules observed: 340016
- CVE-2022-32018 - Complete Online Job Search System 1.0 - SQL Injection - rules observed: 340016
- CVE-2022-32022 - Car Rental Management System 1.0 - SQL Injection - rules observed: 340156
- CVE-2022-32024 - Car Rental Management System 1.0 - SQL Injection - rules observed: 340016
- CVE-2022-32025 - Car Rental Management System 1.0 - SQL Injection - rules observed: 340016
- CVE-2022-32026 - Car Rental Management System 1.0 - SQL Injection - rules observed: 340016
- CVE-2022-32028 - Car Rental Management System 1.0 - SQL Injection - rules observed: 340016
- CVE-2022-34590 - Hospital Management System 1.0 - SQL Injection - rules observed: 340145
- CVE-2023-33629 - H3C Magic R300-2100M - Remote Code Execution - rules observed: 392301
- CVE-2025-32813 - Infoblox NetMRI < 7.6.1 - Unauthenticated Command Injection in get_saml_request - rules observed: 393655
- CVE-2019-10717 - BlogEngine.NET 3.3.7.0 - Local File Inclusion - rules observed: 340007
- CVE-2024-35694 - Wordpress WPMobile.App >= 11.42 - Cross-Site Scripting - rules observed: 341266
- CVE-2019-6793 - GitLab Enterprise Edition - Server-Side Request Forgery - rules observed: 390616
- CVE-2018-3238 - Oracle Fusion Middleware WebCenter Sites 11.1.1.8.0 - Cross-Site Scripting - rules observed: 341266
- CVE-2004-0519 - SquirrelMail 1.4.x - Folder Name Cross-Site Scripting - rules observed: 341266
- CVE-2007-0885 - Jira Rainbow.Zen - Cross-Site Scripting - rules observed: 341266
- CVE-2007-4556 - OpenSymphony XWork/Apache Struts2 - Remote Code Execution - rules observed: 344360
- CVE-2008-2650 - CMSimple 3.1 - Local File Inclusion - rules observed: 347009
- CVE-2008-6172 - Joomla! Component RWCards 3.0.11 - Local File Inclusion - rules observed: 347009
- CVE-2009-3053 - Joomla! Agora 3.0.0b - Local File Inclusion - rules observed: 347009
- CVE-2010-1056 - Joomla! Component com_rokdownloads - Local File Inclusion - rules observed: 347009
- CVE-2010-1219 - Joomla! Component com_janews - Local File Inclusion - rules observed: 347009
- CVE-2010-1469 - Joomla! Component JProject Manager 1.0 - Local File Inclusion - rules observed: 347009
- CVE-2010-1473 - Joomla! Component Advertising 0.25 - Local File Inclusion - rules observed: 347009
- CVE-2010-1474 - Joomla! Component Sweetykeeper 1.5 - Local File Inclusion - rules observed: 347009
- CVE-2010-1475 - Joomla! Component Preventive And Reservation 1.0.5 - Local File Inclusion - rules observed: 347009
- CVE-2010-1476 - Joomla! Component AlphaUserPoints 1.5.5 - Local File Inclusion - rules observed: 347009
- CVE-2010-1478 - Joomla! Component Jfeedback 1.2 - Local File Inclusion - rules observed: 347009
- CVE-2010-1607 - Joomla! Component WMI 1.5.0 - Local File Inclusion - rules observed: 347009
- CVE-2010-1715 - Joomla! Component Online Exam 1.5.0 - Local File Inclusion - rules observed: 347009
- CVE-2010-1718 - Joomla! Component Archery Scores 1.0.6 - Local File Inclusion - rules observed: 347009
- CVE-2010-1719 - Joomla! Component MT Fire Eagle 1.2 - Local File Inclusion - rules observed: 347009
- CVE-2010-1722 - Joomla! Component Online Market 2.x - Local File Inclusion - rules observed: 347009
- CVE-2010-1723 - Joomla! Component iNetLanka Contact Us Draw Root Map 1.1 - Local File Inclusion - rules observed: 347009
- CVE-2010-1979 - Joomla! Component Affiliate Datafeeds 880 - Local File Inclusion - rules observed: 347009
- CVE-2010-1981 - Joomla! Component Fabrik 2.0 - Local File Inclusion - rules observed: 347009
- CVE-2010-2122 - Joomla! Component simpledownload <=0.9.5 - Arbitrary File Retrieval - rules observed: 347009
- CVE-2010-2507 - Joomla! Component Picasa2Gallery 1.2.8 - Local File Inclusion - rules observed: 347009
- CVE-2010-2680 - Joomla! Component jesectionfinder - Local File Inclusion - rules observed: 347009
- CVE-2010-2857 - Joomla! Component Music Manager - Local File Inclusion - rules observed: 347009
- CVE-2010-2920 - Joomla! Component Foobla Suggestions 1.5.1.2 - Local File Inclusion - rules observed: 347009
- CVE-2010-4617 - Joomla! Component JotLoader 2.2.1 - Local File Inclusion - rules observed: 347009
- CVE-2011-2744 - Chyrp 2.x - Local File Inclusion - rules observed: 347009
- CVE-2012-0392 - Apache Struts2 S2-008 RCE - rules observed: 347009
- CVE-2014-2383 - Dompdf < v0.6.0 - Local File Inclusion - rules observed: 347009
- CVE-2014-3120 - ElasticSearch v1.1.1/1.2 RCE - rules observed: 344360
- CVE-2017-14537 - Trixbox 2.8.0 - Path Traversal - rules observed: 344360, 347009
- CVE-2017-9416 - Odoo 8.0/9.0/10.0 - Local File Inclusion - rules observed: 347009
- CVE-2018-18809 - TIBCO JasperReports Library - Directory Traversal - rules observed: 340007
- CVE-2018-3714 - node-srv - Local File Inclusion - rules observed: 347009
- CVE-2019-11013 - Nimble Streamer <=3.5.4-9 - Local File Inclusion - rules observed: 347009
- CVE-2019-14312 - Aptana Jaxer 1.0.3.4547 - Local File inclusion - rules observed: 347009
- CVE-2019-3799 - Spring Cloud Config Server - Local File Inclusion - rules observed: 347009
- CVE-2020-5405 - Spring Cloud Config - Local File Inclusion - rules observed: 390709
- CVE-2020-6950 - Eclipse Mojarra - Local File Read - rules observed: 340007
- CVE-2021-21402 - Jellyfin <10.7.0 - Local File Inclusion - rules observed: 347019
- CVE-2021-27124 - Doctor Appointment System 1.0 - SQL Injection - rules observed: 340016
- CVE-2021-28149 - Hongdian H8922 3.0.5 Devices - Local File Inclusion - rules observed: 347009
- CVE-2021-31195 - Microsoft Exchange Server - Cross-Site Scripting - rules observed: 350148
- CVE-2021-31249 - CHIYU TCP/IP Converter - Carriage Return Line Feed Injection - rules observed: 341266
- CVE-2021-39165 - Cachet <=2.3.18 - SQL Injection - rules observed: 380122
- CVE-2021-41349 - Microsoft Exchange Server Pre-Auth POST Based Cross-Site Scripting - rules observed: 340147
- CVE-2022-37299 - Shirne CMS 1.2.0 - Local File Inclusion - rules observed: 347009
- CVE-2022-38812 - AeroCMS 0.1.1 - SQL Injection - rules observed: 340016
- CVE-2022-40734 - Laravel Filemanager v2.5.1 - Local File Inclusion - rules observed: 340007
- CVE-2023-3188 - Owncast - Server Side Request Forgery - rules observed: 392301
- CVE-2024-55457 - MasterSAM Star Gate v11 - Local File Inclusion - rules observed: 347009
- CVE-2025-28367 - mojoPortal <=2.9.0.1 - Directory Traversal - rules observed: 344360
- CVE-2025-32430 - XWiki Platform - Cross-Site Scripting - rules observed: 347198
- CVE-2025-32815 - NetMRI < 7.6.1 - Authentication Bypass via Hardcoded Credentials - rules observed: 344360
- CVE-2025-4388 - Liferay Portal - Cross-Site Scripting - rules observed: 347198
- CVE-2025-53771 - Microsoft SharePoint Server - Authentication Bypass (ToolShell) - rules observed: 350147
- CVE-2000-0760 - Jakarta Tomcat 3.1 and 3.0 - Information Disclosure - rules observed: 310094
- CVE-2009-0932 - Horde/Horde Groupware - Local File Inclusion - rules observed: 390614
- CVE-2012-3153 - Oracle Forms & Reports RCE (CVE-2012-3152 & CVE-2012-3153) - rules observed: 340165
- CVE-2012-4940 - Axigen Mail Server Filename Directory Traversal - rules observed: 347019
- CVE-2024-11305 - Altenergy Power Control Software - SQL Injection - rules observed: 340016
- CVE-2024-2330 - NS-ASG Application Security Gateway 6.3 - Sql Injection - rules observed: 340157
- CVE-2024-2621 - Fujian Kelixin Communication - Command Injection - rules observed: 380122
- CVE-2025-10210 - ChanCMS <= 3.3.0 - SQL Injection - rules observed: 340159
- CVE-2025-54589 - Copyparty <=1.18.6 - Cross-Site Scripting - rules observed: 341266
- CVE-2025-11371 - Gladinet CentreStack & TrioFox - Local File Inclusion - rules observed: 347019
- CVE-2011-4336 - Tiki Wiki CMS Groupware 7.0 Cross-Site Scripting - rules observed: 341266
- CVE-2014-100004 - Sitecore CMS - Cross-Site Scripting - rules observed: 347198
- CVE-2014-4544 - Podcast Channels < 0.28 - Cross-Site Scripting - rules observed: 341266
- CVE-2014-4592 - WP Planet <= 0.1 - Cross-Site Scripting - rules observed: 341266
- CVE-2014-9606 - Netsweeper 4.0.8 - Cross-Site Scripting - rules observed: 341266
- CVE-2014-9607 - Netsweeper 4.0.4 - Cross-Site Scripting - rules observed: 341266
- CVE-2014-9608 - Netsweeper 4.0.3 - Cross-Site Scripting - rules observed: 341266
- CVE-2014-9615 - Netsweeper 4.0.4 - Cross-Site Scripting - rules observed: 341266
- CVE-2015-6544 - Combodo iTop <2.2.0-2459 - Cross-Site Scripting - rules observed: 341266
- CVE-2015-8349 - SourceBans <2.0 - Cross-Site Scripting - rules observed: 341266
- CVE-2016-4975 - Apache mod_userdir CRLF injection - rules observed: 330708
- CVE-2016-7981 - SPIP <3.1.2 - Cross-Site Scripting - rules observed: 341266
- CVE-2016-8527 - Aruba Airwave <8.2.3.1 - Cross-Site Scripting - rules observed: 341266
- CVE-2017-11629 - FineCMS <=5.0.10 - Cross-Site Scripting - rules observed: 341266
- CVE-2017-12583 - DokuWiki - Cross-Site Scripting - rules observed: 347198
- CVE-2017-12794 - Django Debug Page - Cross-Site Scripting - rules observed: 341266
- CVE-2017-15287 - Dreambox WebControl 2.0.0 - Cross-Site Scripting - rules observed: 341266
- CVE-2017-18024 - AvantFAX 3.3.3 - Cross-Site Scripting - rules observed: 340147
- CVE-2017-18536 - WordPress Stop User Enumeration <=1.3.7 - Cross-Site Scripting - rules observed: 341266
- CVE-2017-3132 - Fortinet FortiOS < 5.6.0 - Cross-Site Scripting - rules observed: 341266
- CVE-2017-5631 - KMCIS CaseAware - Cross-Site Scripting - rules observed: 341266
- CVE-2017-5868 - OpenVPN Access Server 2.1.4 - CRLF Injection - rules observed: 330708
- CVE-2017-6478 - MaNGOSWebV4 < 4.0.8 - Cross-Site Scripting - rules observed: 341266
- CVE-2017-7391 - Magmi 0.7.22 - Cross-Site Scripting - rules observed: 341266
- CVE-2017-7855 - IceWarp WebMail 11.3.1.5 - Cross-Site Scripting - rules observed: 347198
- CVE-2017-9140 - Reflected XSS - Telerik Reporting Module - rules observed: 333141
- CVE-2017-9506 - Atlassian Jira IconURIServlet - Cross-Site Scripting/Server-Side Request Forgery - rules observed: 382291
- CVE-2018-1000129 - Jolokia 1.3.7 - Cross-Site Scripting - rules observed: 347198
- CVE-2018-10095 - Dolibarr <7.0.2 - Cross-Site Scripting - rules observed: 341266
- CVE-2018-10230 - Zend Server <9.13 - Cross-Site Scripting - rules observed: 341266
- CVE-2018-11227 - Monstra CMS <=3.0.4 - Cross-Site Scripting - rules observed: 333141
- CVE-2018-11709 - WordPress wpForo Forum <= 1.4.11 - Cross-Site Scripting - rules observed: 341266
- CVE-2018-12300 - Seagate NAS OS 4.3.15.1 - Open Redirect - rules observed: 340163
- CVE-2018-12998 - Zoho manageengine - Cross-Site Scripting - rules observed: 341266
- CVE-2018-13380 - Fortinet FortiOS - Cross-Site Scripting - rules observed: 347198, 341266
- CVE-2018-14013 - Synacor Zimbra Collaboration Suite Collaboration <8.8.11 - Cross-Site Scripting - rules observed: 341266
- CVE-2018-16139 - BIBLIOsoft BIBLIOpac 2008 - Cross-Site Scripting - rules observed: 341266
- CVE-2018-16979 - Monstra CMS 3.0.4 - HTTP Header Injection - rules observed: 330708
- CVE-2018-17082 - Apache2 - Transfer-Encoding Chunked XSS - rules observed: 392301
- CVE-2018-18069 - WordPress sitepress-multilingual-cms 3.6.3 - Cross-Site Scripting - rules observed: 392301
- CVE-2018-18570 - Planon <Live Build 41 - Cross-Site Scripting - rules observed: 341266
- CVE-2018-18608 - DedeCMS 5.7 SP2 - Cross-Site Scripting - rules observed: 341266
- CVE-2018-18775 - Microstrategy Web 7 - Cross-Site Scripting - rules observed: 341266
- CVE-2018-19439 - Oracle Secure Global Desktop Administration Console 4.4 - Cross-Site Scripting - rules observed: 341266
- CVE-2018-19877 - Adiscon LogAnalyzer <4.1.7 - Cross-Site Scripting - rules observed: 341266
- CVE-2018-20824 - Atlassian Jira WallboardServlet <7.13.1 - Cross-Site Scripting - rules observed: 347198
- CVE-2018-5230 - Atlassian Jira Confluence - Cross-Site Scripting - rules observed: 340112
- CVE-2018-5233 - Grav CMS <1.3.0 - Cross-Site Scripting - rules observed: 341266
- CVE-2018-5316 - WordPress SagePay Server Gateway for WooCommerce <1.0.9 - Cross-Site Scripting - rules observed: 341266
- CVE-2018-5715 - SugarCRM 3.5.1 - Cross-Site Scripting - rules observed: 341266
- CVE-2018-7653 - YzmCMS v3.6 - Cross-Site Scripting - rules observed: 347198
- CVE-2018-8006 - Apache ActiveMQ <=5.15.5 - Cross-Site Scripting - rules observed: 341266
- CVE-2018-8024 - Apache Spark UI - Cross-Site Scripting - rules observed: 341266
- CVE-2019-0221 - Apache Tomcat - Cross-Site Scripting - rules observed: 341266
- CVE-2019-1010287 - Timesheet Next Gen <=1.5.3 - Cross-Site Scripting - rules observed: 340147
- CVE-2019-10475 - Jenkins build-metrics 1.3 - Cross-Site Scripting - rules observed: 347198
- CVE-2019-12461 - WebPort 1.19.1 - Cross-Site Scripting - rules observed: 341266
- CVE-2019-12581 - Zyxel ZyWal/USG/UAG Devices - Cross-Site Scripting - rules observed: 341266
- CVE-2019-13392 - MindPalette NateMail 3.0.15 - Cross-Site Scripting - rules observed: 342259
- CVE-2019-14950 - WP Live Chat Support <= 8.0.27 — Stored Cross-Site Scripting - rules observed: 380026
- CVE-2019-14974 - SugarCRM Enterprise 9.0.0 - Cross-Site Scripting - rules observed: 340112
- CVE-2019-15501 - L-Soft LISTSERV <16.5-2018a - Cross-Site Scripting - rules observed: 341266
- CVE-2019-18957 - MicroStrategy Library <11.1.3 - Cross-Site Scripting - rules observed: 347198
- CVE-2019-19134 - WordPress Hero Maps Premium <=2.2.1 - Cross-Site Scripting - rules observed: 341266
- CVE-2019-19368 - Rumpus FTP Web File Manager 8.2.9.1 - Cross-Site Scripting - rules observed: 342259
- CVE-2019-19908 - phpMyChat-Plus 1.98 - Cross-Site Scripting - rules observed: 341266
- CVE-2019-20141 - WordPress Laborator Neon Theme 2.0 - Cross-Site Scripting - rules observed: 347198
- CVE-2019-20210 - WordPress CTHthemes - Cross-Site Scripting - rules observed: 341266
- CVE-2019-3402 - Jira < 8.1.1 - Cross-Site Scripting - rules observed: 341266
- CVE-2019-3911 - LabKey Server Community Edition <18.3.0 - Cross-Site Scripting - rules observed: 341266
- CVE-2019-6112 - WordPress Sell Media 2.4.1 - Cross-Site Scripting - rules observed: 341266
- CVE-2019-6802 - Pypiserver <1.2.5 - Carriage Return Line Feed Injection - rules observed: 330708
- CVE-2019-7219 - Zarafa WebApp <=2.0.1.47791 - Cross-Site Scripting - rules observed: 347198
- CVE-2019-7255 - Linear eMerge E3 - Cross-Site Scripting - rules observed: 341266
- CVE-2019-8937 - HotelDruid 2.3.0 - Cross-Site Scripting - rules observed: 341266
- CVE-2020-11930 - WordPress GTranslate <2.8.52 - Cross-Site Scripting - rules observed: 341266
- CVE-2020-12054 - WordPress Catch Breadcrumb <1.5.4 - Cross-Site Scripting - rules observed: 347198
- CVE-2020-13258 - Contentful <=2020-05-21 - Cross-Site Scripting - rules observed: 341266
- CVE-2020-13820 - Extreme Management Center 8.4.1.24 - Cross-Site Scripting - rules observed: 333141
- CVE-2020-14413 - NeDi 1.9C - Cross-Site Scripting - rules observed: 347198
- CVE-2020-15500 - TileServer GL <=3.0.0 - Cross-Site Scripting - rules observed: 333141
- CVE-2020-15718 - RosarioSIS 6.7.2 - Cross-Site Scripting - rules observed: 347198
- CVE-2020-17362 - Nova Lite < 1.3.9 - Cross-Site Scripting - rules observed: 341266
- CVE-2020-19282 - Jeesns 1.4.2 - Cross-Site Scripting - rules observed: 341266
- CVE-2020-19283 - Jeesns 1.4.2 - Cross-Site Scripting - rules observed: 341266
- CVE-2020-19295 - Jeesns 1.4.2 - Cross-Site Scripting - rules observed: 341266
- CVE-2020-1943 - Apache OFBiz <=16.11.07 - Cross-Site Scripting - rules observed: 347198
- CVE-2020-19515 - qdPM 9.1 - Cross-site Scripting - rules observed: 347198
- CVE-2020-2096 - Jenkins Gitlab Hook <=1.4.2 - Cross-Site Scripting - rules observed: 341266
- CVE-2020-23517 - Aryanic HighMail (High CMS) - Cross-Site Scripting - rules observed: 341266
- CVE-2020-24223 - Mara CMS 7.5 - Cross-Site Scripting - rules observed: 341266
- CVE-2020-24701 - OX Appsuite - Cross-Site Scripting - rules observed: 341266
- CVE-2020-24902 - Quixplorer <=2.4.1 - Cross-Site Scripting - rules observed: 341266
- CVE-2020-24903 - Cute Editor for ASP.NET 6.4 - Cross-Site Scripting - rules observed: 341266
- CVE-2020-25495 - Xinuo Openserver 5/6 - Cross-Site scripting - rules observed: 341266
- CVE-2020-25864 - HashiCorp Consul/Consul Enterprise <=1.9.4 - Cross-Site Scripting - rules observed: 392301
- CVE-2020-27735 - Wing FTP 6.4.4 - Cross-Site Scripting - rules observed: 350148
- CVE-2020-27982 - IceWarp WebMail 11.4.5.0 - Cross-Site Scripting - rules observed: 347198
- CVE-2020-29164 - PacsOne Server <7.1.1 - Cross-Site Scripting - rules observed: 333141
- CVE-2020-3580 - Cisco ASA/FTD Software - Cross-Site Scripting - rules observed: 333141
- CVE-2020-6171 - CLink Office 2.0 - Cross-Site Scripting - rules observed: 341266
- CVE-2020-8115 - Revive Adserver <=5.0.3 - Cross-Site Scripting - rules observed: 350148
- CVE-2020-8191 - Citrix ADC/Gateway - Cross-Site Scripting - rules observed: 340147
- CVE-2020-8512 - IceWarp WebMail Server <=11.4.4.1 - Cross-Site Scripting - rules observed: 347198
- CVE-2020-9344 - Jira Subversion ALM for Enterprise <8.8.2 - Cross-Site Scripting - rules observed: 341266
- CVE-2021-20137 - Gryphon Tower - Cross-Site Scripting - rules observed: 347198
- CVE-2021-21799 - Advantech R-SeeNet 2.4.12 - Cross-Site Scripting - rules observed: 341266
- CVE-2021-21800 - Advantech R-SeeNet 2.4.12 - Cross-Site Scripting - rules observed: 341266
- CVE-2021-21801 - Advantech R-SeeNet - Cross-Site Scripting - rules observed: 347198
- CVE-2021-21802 - Advantech R-SeeNet - Cross-Site Scripting - rules observed: 347198
- CVE-2021-21803 - Advantech R-SeeNet - Cross-Site Scripting - rules observed: 347198
- CVE-2021-24210 - WordPress PhastPress <1.111 - Open Redirect - rules observed: 340162
- CVE-2021-24235 - WordPress Goto Tour & Travel Theme <2.0 - Cross-Site Scripting - rules observed: 347198
- CVE-2021-24237 - WordPress Realteo <=1.2.3 - Cross-Site Scripting - rules observed: 347198
- CVE-2021-24275 - Popup by Supsystic <1.10.5 - Cross-Site scripting - rules observed: 341266
- CVE-2021-24276 - WordPress Supsystic Contact Form <1.7.15 - Cross-Site Scripting - rules observed: 341266
- CVE-2021-24291 - WordPress Photo Gallery by 10Web <1.5.69 - Cross-Site Scripting - rules observed: 347198
- CVE-2021-24316 - WordPress Mediumish Theme <=1.0.47 - Cross-Site Scripting - rules observed: 341266
- CVE-2021-24387 - WordPress Pro Real Estate 7 Theme <3.1.1 - Cross-Site Scripting - rules observed: 341266
- CVE-2021-24389 - WordPress FoodBakery <2.2 - Cross-Site Scripting - rules observed: 341266
- CVE-2021-24435 - WordPress Titan Framework plugin <= 1.12.1 - Cross-Site Scripting - rules observed: 333141, 347198
- CVE-2021-24495 - Wordpress Marmoset Viewer <1.9.3 - Cross-Site Scripting - rules observed: 347198
- CVE-2021-24498 - WordPress Calendar Event Multi View <1.4.01 - Cross-Site Scripting - rules observed: 347198
- CVE-2021-24838 - WordPress AnyComment <0.3.5 - Open Redirect - rules observed: 390145
- CVE-2021-24910 - WordPress Transposh Translation <1.0.8 - Cross-Site Scripting - rules observed: 347198
- CVE-2021-24987 - WordPress Super Socializer <7.13.30 - Cross-Site Scripting - rules observed: 347198
- CVE-2021-25016 - Chaty < 2.8.2 - Cross-Site Scripting - rules observed: 347198
- CVE-2021-25074 - WordPress WebP Converter for Media < 4.0.3 - Unauthenticated Open Redirect - rules observed: 340162
- CVE-2021-25085 - WOOF WordPress plugin - Cross-Site Scripting - rules observed: 347198
- CVE-2021-26247 - Cacti - Cross-Site Scripting - rules observed: 341266
- CVE-2021-26475 - EPrints 3.4.2 - Cross-Site Scripting - rules observed: 341266
- CVE-2021-26702 - EPrints 3.4.2 - Cross-Site Scripting - rules observed: 341266
- CVE-2021-26710 - Redwood Report2Web 4.3.4.5 & 4.5.3 - Cross-Site Scripting - rules observed: 341266
- CVE-2021-26723 - Jenzabar 9.2x-9.2.2 - Cross-Site Scripting - rules observed: 341266
- CVE-2021-26947 - Odoo <= 15.0 - Cross-Site Scripting - rules observed: 341266, 347198
- CVE-2021-27309 - Clansphere CMS 2011.4 - Cross-Site Scripting - rules observed: 341266
- CVE-2021-27310 - Clansphere CMS 2011.4 - Cross-Site Scripting - rules observed: 341266
- CVE-2021-27330 - Triconsole Datepicker Calendar <3.77 - Cross-Site Scripting - rules observed: 341266
- CVE-2021-27519 - FUDForum 3.1.0 - Cross-Site Scripting - rules observed: 347198
- CVE-2021-27520 - FUDForum 3.1.0 - Cross-Site Scripting - rules observed: 347198
- CVE-2021-29625 - Adminer <=4.8.0 - Cross-Site Scripting - rules observed: 341266
- CVE-2021-3002 - Seo Panel 4.8.0 - Cross-Site Scripting - rules observed: 333141
- CVE-2021-30049 - SysAid Technologies 20.3.64 b14 - Cross-Site Scripting - rules observed: 341266
- CVE-2021-30134 - Php-mod/curl Library <2.3.2 - Cross-Site Scripting - rules observed: 347198
- CVE-2021-30213 - Knowage Suite 7.3 - Cross-Site Scripting - rules observed: 341266
- CVE-2021-31537 - SIS Informatik REWE GO SP17 <7.7 - Cross-Site Scripting - rules observed: 341266
- CVE-2021-31589 - BeyondTrust Secure Remote Access Base <=6.0.1 - Cross-Site Scripting - rules observed: 347198
- CVE-2021-31682 - WebCTRL OEM <= 6.5 - Cross-Site Scripting - rules observed: 341266
- CVE-2021-31862 - SysAid 20.4.74 - Cross-Site Scripting - rules observed: 341266
- CVE-2021-32478 - Moodle 3.8-3.10.3 - Reflected XSS & Open Redirect - rules observed: 350148
- CVE-2021-34630 - GTranslate < 2.8.65 - Cross-Site Scripting - rules observed: 341266
- CVE-2021-35265 - MaxSite CMS > V106 - Cross-Site Scripting - rules observed: 347198
- CVE-2021-35488 - Thruk 2.40-2 - Cross-Site Scripting - rules observed: 341266
- CVE-2021-36450 - Verint Workforce Optimization 15.2.8.10048 - Cross-Site Scripting - rules observed: 350147
- CVE-2021-37416 - Zoho ManageEngine ADSelfService Plus <=6103 - Cross-Site Scripting - rules observed: 341266
- CVE-2021-37573 - Tiny Java Web Server - Cross-Site Scripting - rules observed: 347198
- CVE-2021-37833 - Hotel Druid 3.0.2 - Cross-Site Scripting - rules observed: 341266
- CVE-2021-38702 - Cyberoam NetGenie Cross-Site Scripting - rules observed: 341266
- CVE-2021-38704 - ClinicCases 7.3.3 Cross-Site Scripting - rules observed: 341266
- CVE-2021-40542 - Opensis-Classic 8.0 - Cross-Site Scripting - rules observed: 341266
- CVE-2021-40868 - Cloudron 6.2 Cross-Site Scripting - rules observed: 341266
- CVE-2021-41878 - i-Panel Administration System 2.0 - Cross-Site Scripting - rules observed: 347198
- CVE-2021-41951 - Resourcespace - Cross-Site Scripting - rules observed: 341266
- CVE-2021-42551 - NetBiblio WebOPAC - Cross-Site Scripting - rules observed: 341245
- CVE-2021-42565 - myfactory FMS - Cross-Site Scripting - rules observed: 341266
- CVE-2021-42567 - Apereo CAS Cross-Site Scripting - rules observed: 333141
- CVE-2021-43062 - Fortinet FortiMail 7.0.1 - Cross-Site Scripting - rules observed: 347198
- CVE-2021-43574 - Atmail 6.5.0 - Cross-Site Scripting - rules observed: 341266
- CVE-2021-43725 - Spotweb <= 1.5.1 - Cross Site Scripting (Reflected) - rules observed: 341266
- CVE-2021-43810 - Admidio - Cross-Site Scripting - rules observed: 340112
- CVE-2021-45380 - AppCMS - Cross-Site Scripting - rules observed: 341266
- CVE-2021-45422 - Reprise License Manager 14.2 - Cross-Site Scripting - rules observed: 341266
- CVE-2021-46387 - Zyxel ZyWALL 2 Plus Internet Security Appliance - Cross-Site Scripting - rules observed: 333141
- CVE-2022-0087 - Keystone 6 Login Page - Open Redirect and Cross-Site Scripting - rules observed: 333140
- CVE-2022-0201 - WordPress Permalink Manager <2.2.15 - Cross-Site Scripting - rules observed: 347198
- CVE-2022-0208 - WordPress Plugin MapPress <2.73.4 - Cross-Site Scripting - rules observed: 347198
- CVE-2022-0212 - WordPress Spider Calendar <=1.5.65 - Cross-Site Scripting - rules observed: 347198
- CVE-2022-0234 - WordPress WOOCS < 1.3.7.5 - Cross-Site Scripting - rules observed: 347198
- CVE-2022-0250 - Redirection for Contact Form 7 < 2.5.0 - Cross-Site Scripting - rules observed: 341266
- CVE-2022-0271 - LearnPress <4.1.6 - Cross-Site Scripting - rules observed: 347198
- CVE-2022-0346 - WordPress XML Sitemap Generator for Google <2.0.4 - Cross-Site Scripting/Remote Code Execution - rules observed: 347198, 340165
- CVE-2022-0429 - WP Cerber Security, Anti-spam & Malware Scan < 8.9.6 - Cross-Site Scripting - rules observed: 347198
- CVE-2022-0437 - karma-runner DOM-based Cross-Site Scripting - rules observed: 340112
- CVE-2022-0653 - Wordpress Profile Builder Plugin Cross-Site Scripting - rules observed: 340112
- CVE-2022-0678 - Microweber <1.2.11 - Cross-Site Scripting - rules observed: 341266
- CVE-2022-0879 - Caldera Forms < 1.9.7 - Reflected Cross-Site Scripting - rules observed: 347198
- CVE-2022-1168 - WordPress WP JobSearch <1.5.1 - Cross-Site Scripting - rules observed: 347198
- CVE-2022-1170 - JobMonster < 4.5.2.9 - Cross-Site Scripting - rules observed: 347198
- CVE-2022-1221 - WordPress Gwyn’s Imagemap Selector <=0.3.3 - Cross-Site Scripting - rules observed: 341266
- CVE-2022-1439 - Microweber <1.2.15 - Cross-Site Scripting - rules observed: 347198
- CVE-2022-1904 - WordPress Easy Pricing Tables <3.2.1 - Cross-Site Scripting - rules observed: 341266
- CVE-2022-1906 - WordPress Copyright Proof <=4.16 - Cross-Site-Scripting - rules observed: 341266
- CVE-2022-1910 - WordPress Shortcodes and Extra Features for Phlox <2.9.8 - Cross-Site Scripting - rules observed: 341266
- CVE-2022-1933 - WordPress CDI <5.1.9 - Cross Site Scripting - rules observed: 341266
- CVE-2022-1946 - WordPress Gallery <2.0.0 - Cross-Site Scripting - rules observed: 341266
- CVE-2022-2130 - Microweber < 1.2.17 - Cross-Site Scripting - rules observed: 341266
- CVE-2022-2174 - microweber 1.2.18 - Cross-site Scripting - rules observed: 341266
- CVE-2022-2187 - WordPress Contact Form 7 Captcha <0.1.2 - Cross-Site Scripting - rules observed: 341266
- CVE-2022-22242 - Juniper Web Device Manager - Cross-Site Scripting - rules observed: 341266
- CVE-2022-2290 - Trilium <0.52.4 - Cross-Site Scripting - rules observed: 347198
- CVE-2022-23397 - Cedar Gate EZ-NET <= 6.8.0 - Cross-Site Scripting - rules observed: 347198
- CVE-2022-23808 - phpMyAdmin < 5.1.2 - Cross-Site Scripting - rules observed: 341266
- CVE-2022-24384 - SmarterTools SmarterTrack - Cross-Site Scripting - rules observed: 347198
- CVE-2022-24899 - Contao <4.13.3 - Cross-Site Scripting - rules observed: 341266
- CVE-2022-25323 - ZEROF Web Server 2.0 - Cross-Site Scripting - rules observed: 347198
- CVE-2022-26564 - HotelDruid Hotel Management Software 3.0.3 - Cross-Site Scripting - rules observed: 341266
- CVE-2022-27926 - Zimbra Collaboration (ZCS) - Cross Site Scripting - rules observed: 347198
- CVE-2022-28290 - WordPress Country Selector <1.6.6 - Cross-Site Scripting - rules observed: 340130
- CVE-2022-28363 - Reprise License Manager 14.2 - Cross-Site Scripting - rules observed: 347198
- CVE-2022-28508 - MantisBT < 2.25.2 - Cross-Site Scripting - rules observed: 341266
- CVE-2022-30489 - Wavlink WN-535G3 - Cross-Site Scripting - rules observed: 340147
- CVE-2022-30776 - Atmail 6.5.0 - Cross-Site Scripting - rules observed: 341266
- CVE-2022-30777 - Parallels H-Sphere 3.6.1713 - Cross-Site Scripting - rules observed: 341266
- CVE-2022-31299 - Haraj 3.7 - Cross-Site Scripting - rules observed: 341266
- CVE-2022-31373 - SolarView Compact 6.00 - Cross-Site Scripting - rules observed: 341266
- CVE-2022-31798 - Nortek Linear eMerge E3-Series - Cross-Site Scripting - rules observed: 347198
- CVE-2022-32195 - Open edX <2022-06-06 - Cross-Site Scripting - rules observed: 333141
- CVE-2022-3242 - Microweber <1.3.2 - Cross-Site Scripting - rules observed: 341266
- CVE-2022-32770 - WWBN AVideo 11.6 - Cross-Site Scripting - rules observed: 341266
- CVE-2022-32771 - WWBN AVideo 11.6 - Cross-Site Scripting - rules observed: 341266
- CVE-2022-32772 - WWBN AVideo 11.6 - Cross-Site Scripting - rules observed: 341266
- CVE-2022-33119 - NUUO NVRsolo Video Recorder 03.06.02 - Cross-Site Scripting - rules observed: 340003
- CVE-2022-34048 - Wavlink WN-533A8 - Cross-Site Scripting - rules observed: 392301
- CVE-2022-34093 - Software Publico Brasileiro i3geo v7.0.5 - Cross-Site Scripting - rules observed: 341266
- CVE-2022-34094 - Software Publico Brasileiro i3geo v7.0.5 - Cross-Site Scripting - rules observed: 341266
- CVE-2022-34328 - PMB 7.3.10 - Cross-Site Scripting - rules observed: 341266
- CVE-2022-3484 - WordPress WPB Show Core - Cross-Site Scripting - rules observed: 341266
- CVE-2022-35416 - H3C SSL VPN <=2022-07-10 - Cross-Site Scripting - rules observed: 342259
- CVE-2022-35493 - eShop 3.0.4 - Cross-Site Scripting - rules observed: 347198
- CVE-2022-35653 - Moodle LTI module Reflected - Cross-Site Scripting - rules observed: 333141
- CVE-2022-37153 - Artica Proxy 4.30.000000 - Cross-Site Scripting - rules observed: 340147
- CVE-2022-3766 - phpMyFAQ < 3.1.8 - Cross-Site Scripting - rules observed: 333141
- CVE-2022-38463 - ServiceNow - Cross-Site Scripting - rules observed: 350148
- CVE-2022-38467 - CRM Perks Forms < 1.1.1 - Cross Site Scripting - rules observed: 347198
- CVE-2022-38553 - Academy Learning Management System <5.9.1 - Cross-Site Scripting - rules observed: 341266
- CVE-2022-39195 - LISTSERV 17 - Cross-Site Scripting - rules observed: 341266
- CVE-2022-40359 - Kae’s File Manager <=1.4.7 - Cross-Site Scripting - rules observed: 341266
- CVE-2022-41441 - ReQlogic v11.3 - Cross Site Scripting - rules observed: 341266
- CVE-2022-41473 - RPCMS 3.0.2 - Cross-Site Scripting - rules observed: 341266
- CVE-2022-42118 - Liferay Portal - Cross-site Scripting - rules observed: 341266
- CVE-2022-42746 - CandidATS 3.0.0 - Cross-Site Scripting. - rules observed: 341266
- CVE-2022-42747 - CandidATS 3.0.0 - Cross-Site Scripting. - rules observed: 341266
- CVE-2022-42748 - CandidATS 3.0.0 - Cross-Site Scripting. - rules observed: 341266
- CVE-2022-42749 - CandidATS 3.0.0 - Cross-Site Scripting - rules observed: 341266
- CVE-2022-4295 - Show all comments < 7.0.1 - Cross-Site Scripting - rules observed: 341266
- CVE-2022-4301 - WordPress Sunshine Photo Cart <2.9.15 - Cross-Site Scripting - rules observed: 341266
- CVE-2022-4320 - WordPress Events Calendar <1.4.5 - Cross-Site Scripting - rules observed: 341266
- CVE-2022-4321 - PDF Generator for WordPress < 1.1.2 - Cross Site Scripting - rules observed: 341266
- CVE-2022-46073 - Helmet Store Showroom - Cross Site Scripting - rules observed: 341266
- CVE-2022-46381 - Linear eMerge E3-Series - Cross-Site Scripting - rules observed: 333141
- CVE-2022-46888 - NexusPHP <1.7.33 - Cross-Site Scripting - rules observed: 341266
- CVE-2022-48197 - Yahoo User Interface library (YUI2) TreeView v2.8.2 - Cross-Site Scripting - rules observed: 341266
- CVE-2023-0334 - ShortPixel Adaptive Images < 3.6.3 - Cross Site Scripting - rules observed: 347198
- CVE-2023-0448 - WP Helper Lite < 4.3 - Cross-Site Scripting - rules observed: 347198
- CVE-2023-0527 - Online Security Guards Hiring System - Cross-Site Scripting - rules observed: 333141
- CVE-2023-1119 - WP-Optimize WordPress plugin < 3.2.13 - Cross-Site Scripting - rules observed: 341266
- CVE-2023-1880 - Phpmyfaq v3.1.11 - Cross-Site Scripting - rules observed: 341266
- CVE-2023-2309 - wpForo Forum <= 2.1.8 - Cross-Site Scripting - rules observed: 341266
- CVE-2023-23161 - Art Gallery Management System Project v1.0 - Cross-Site Scripting - rules observed: 347198
- CVE-2023-23491 - Quick Event Manager < 9.7.5 - Cross-Site Scripting - rules observed: 341266
- CVE-2023-24278 - Squidex <7.4.0 - Cross-Site Scripting - rules observed: 341266
- CVE-2023-24322 - mojoPortal 2.7.0.0 - Cross-Site Scripting - rules observed: 350148
- CVE-2023-24367 - Temenos T24 R20 - Cross-Site Scripting - rules observed: 341266
- CVE-2023-24488 - Citrix Gateway and Citrix ADC - Cross-Site Scripting - rules observed: 340099, 341266
- CVE-2023-24733 - PMB 7.4.6 - Cross-Site Scripting - rules observed: 341266
- CVE-2023-24737 - PMB v7.4.6 - Cross-Site Scripting - rules observed: 341266
- CVE-2023-27008 - ATutor < 2.2.1 - Cross Site Scripting - rules observed: 350148
- CVE-2023-27641 - L-Soft LISTSERV 16.5 - Cross-Site Scripting - rules observed: 341266
- CVE-2023-2813 - Wordpress Multiple Themes - Reflected Cross-Site Scripting - rules observed: 333141
- CVE-2023-2822 - Ellucian Ethos Identity CAS - Cross-Site Scripting - rules observed: 347198
- CVE-2023-29489 - cPanel < 11.109.9999.116 - Cross-Site Scripting - rules observed: 340099
- CVE-2023-2949 - OpenEMR < 7.0.1 - Cross-site Scripting - rules observed: 347198
- CVE-2023-29623 - Purchase Order Management v1.0 - Cross Site Scripting (Reflected) - rules observed: 333141
- CVE-2023-30210 - OURPHP <= 7.2.0 - Cross Site Scripting - rules observed: 341266
- CVE-2023-30212 - OURPHP <= 7.2.0 - Cross Site Scripting - rules observed: 341266
- CVE-2023-30256 - Webkul QloApps 1.5.2 - Cross-site Scripting - rules observed: 347198
- CVE-2023-3169 - tagDiv Composer < 4.2 - Stored Cross-Site Scripting - rules observed: 380026
- CVE-2023-3479 - Hestiacp <= 1.7.7 - Cross-Site Scripting - rules observed: 341266
- CVE-2023-35155 - XWiki - Cross-Site Scripting - rules observed: 347198
- CVE-2023-35156 - XWiki >= 6.0-rc-1 - Cross-Site Scripting - rules observed: 350148
- CVE-2023-35158 - XWiki - Cross-Site Scripting - rules observed: 350148
- CVE-2023-35159 - XWiki >= 3.4-milestone-1 - Cross-Site Scripting - rules observed: 350148
- CVE-2023-35160 - XWiki >= 2.5-milestone-2 - Cross-Site Scripting - rules observed: 350148
- CVE-2023-35161 - XWiki >= 6.2-milestone-1 - Cross-Site Scripting - rules observed: 350148
- CVE-2023-35162 - XWiki < 14.10.5 - Cross-Site Scripting - rules observed: 350148
- CVE-2023-3521 - FOSSBilling < 0.5.3 - Cross-Site Scripting - rules observed: 347198
- CVE-2023-36287 - Webkul QloApps 1.6.0 - Cross-site Scripting - rules observed: 350148
- CVE-2023-36289 - Webkul QloApps 1.6.0 - Cross-site Scripting - rules observed: 333141
- CVE-2023-36306 - Adiscon LogAnalyzer v.4.1.13 - Cross-Site Scripting - rules observed: 341266
- CVE-2023-36346 - POS Codekop v2.0 - Cross Site Scripting - rules observed: 341266
- CVE-2023-37728 - IceWarp Webmail Server v10.2.1 - Cross Site Scripting - rules observed: 347198
- CVE-2023-38192 - SuperWebMailer 9.00.0.01710 - Cross-Site Scripting - rules observed: 340147
- CVE-2023-38194 - SuperWebMailer - Cross-Site Scripting - rules observed: 347198
- CVE-2023-3843 - mooDating 1.2 - Cross-site scripting - rules observed: 347198
- CVE-2023-3844 - MooDating 1.2 - Cross-Site Scripting - rules observed: 347198
- CVE-2023-3845 - MooDating 1.2 - Cross-Site Scripting - rules observed: 347198
- CVE-2023-3846 - MooDating 1.2 - Cross-Site Scripting - rules observed: 347198
- CVE-2023-3847 - MooDating 1.2 - Cross-Site scripting - rules observed: 347198
- CVE-2023-3848 - MooDating 1.2 - Cross-site scripting - rules observed: 347198
- CVE-2023-3849 - mooDating 1.2 - Cross-site scripting - rules observed: 347198
- CVE-2023-38501 - CopyParty v1.8.6 - Cross Site Scripting - rules observed: 347198
- CVE-2023-38875 - PHP Login System 2.0.1 - Cross-Site Scripting - rules observed: 341266
- CVE-2023-38964 - Academy LMS 6.0 - Cross-Site Scripting - rules observed: 347198
- CVE-2023-39598 - IceWarp Email Client - Cross Site Scripting - rules observed: 333141
- CVE-2023-39600 - IceWarp 11.4.6.0 - Cross-Site Scripting - rules observed: 333141
- CVE-2023-39676 - PrestaShop fieldpopupnewsletter Module - Cross Site Scripting - rules observed: 341266
- CVE-2023-39700 - IceWarp Mail Server v10.4.5 - Cross-Site Scripting - rules observed: 333140
- CVE-2023-40750 - PHPJabbers Yacht Listing Script v1.0 - Cross-Site Scripting - rules observed: 333141
- CVE-2023-40751 - PHPJabbers Fundraising Script v1.0 - Cross-Site Scripting - rules observed: 333141
- CVE-2023-40752 - PHPJabbers Make an Offer Widget v1.0 - Cross-Site Scripting - rules observed: 333141
- CVE-2023-4110 - PHPJabbers Availability Booking Calendar 5.0 - Cross-Site Scripting - rules observed: 341266
- CVE-2023-4111 - PHPJabbers Bus Reservation System 1.1 - Cross-Site Scripting - rules observed: 341266
- CVE-2023-4112 - PHPJabbers Shuttle Booking Software 1.0 - Cross Site Scripting - rules observed: 341266
- CVE-2023-4113 - PHPJabbers Service Booking Script 1.0 - Cross Site Scripting - rules observed: 341266
- CVE-2023-4114 - PHP Jabbers Night Club Booking 1.0 - Cross Site Scripting - rules observed: 341266
- CVE-2023-4115 - PHPJabbers Cleaning Business 1.0 - Cross-Site Scripting - rules observed: 341266
- CVE-2023-4116 - PHPJabbers Taxi Booking 2.0 - Cross Site Scripting - rules observed: 341266
- CVE-2023-4136 - CrafterCMS Engine - Cross-Site Scripting - rules observed: 341266
- CVE-2023-41538 - PHPJabbers PHP Forum Script 3.0 - Cross-Site Scripting - rules observed: 341266
- CVE-2023-41621 - Emlog Pro v2.1.14 - Cross-Site Scripting - rules observed: 350148
- CVE-2023-4173 - mooSocial 3.1.8 - Reflected XSS - rules observed: 347198
- CVE-2023-4174 - mooSocial 3.1.6 - Reflected Cross Site Scripting - rules observed: 347198
- CVE-2023-43325 - MooSocial 3.1.8 - Cross-Site Scripting - rules observed: 347198
- CVE-2023-43326 - MooSocial 3.1.8 - Cross-Site Scripting - rules observed: 347198
- CVE-2023-44012 - mojoPortal v.2.7.0.0 - Cross-Site Scripting - rules observed: 347198
- CVE-2023-44352 - Adobe Coldfusion - Cross-Site Scripting - rules observed: 347198, 341266
- CVE-2023-4451 - Cockpit - Cross-Site Scripting - rules observed: 347198
- CVE-2023-45136 - XWiki < 14.10.14 - Cross-Site Scripting - rules observed: 341266
- CVE-2023-4547 - SPA-Cart eCommerce CMS 1.9.0.3 - Cross-Site Scripting - rules observed: 341266
- CVE-2023-45542 - MooSocial 3.1.8 - Cross-Site Scripting - rules observed: 341266
- CVE-2023-46732 - XWiki < 14.10.14 - Cross-Site Scripting - rules observed: 341266
- CVE-2023-47684 - Essential Grid <= 3.1.0 - Cross-Site Scripting - rules observed: 341266
- CVE-2023-48728 - WWBN AVideo 11.6 - Cross-Site Scripting - rules observed: 341266
- CVE-2023-49293 - Vite dev server - Cross-Site Scripting - rules observed: 341266
- CVE-2023-49489 - KodeExplorer 4.51 - Reflective Cross Site Scripting (XSS) - rules observed: 342259
- CVE-2023-49494 - DedeCMS v5.7.111 - Cross-Site Scripting - rules observed: 340095
- CVE-2023-4973 - Academy LMS 6.2 - Cross-Site Scripting - rules observed: 340147
- CVE-2023-5244 - Microweber < V.2.0 - Cross-Site Scripting - rules observed: 393655
- CVE-2023-5863 - phpMyFAQ < 3.2.0 - Cross-site Scripting - rules observed: 333141
- CVE-2023-6275 - TOTVS Fluig Platform - Cross-Site Scripting - rules observed: 341266
- CVE-2023-6379 - OpenCMS 14 & 15 - Cross Site Scripting - rules observed: 341266
- CVE-2023-6568 - Mlflow - Cross-Site Scripting - rules observed: 334168
- CVE-2024-11587 - idcCMS V1.60 - Cross-Site Scripting - rules observed: 341266
- CVE-2024-13727 - MemberSpace WordPress - Cross-Site Scripting - rules observed: 341266
- CVE-2024-24131 - SuperWebMailer 9.31.0.01799 - Cross-Site Scripting - rules observed: 341266
- CVE-2024-25669 - CaseAware a360inc - Cross-Site Scripting - rules observed: 347198
- CVE-2024-3231 - Popup4Phone <= 1.3.2 - Unauthenticated Stored Cross-Site Scripting - rules observed: 340147
- CVE-2024-35693 - WordPress 12 Step Meeting List Plugin <= 3.14.33 - Cross-Site Scripting - rules observed: 347198
- CVE-2024-37259 - WP Extended < 3.0.0 - Stored Cross-Site Scripting - rules observed: 340147
- CVE-2024-55218 - IceWarp Server 10.2.1 - Cross-Site Scripting - rules observed: 333141
- CVE-2024-6892 - Journyx 11.5.4 - Reflected Cross Site Scripting - rules observed: 333141
- CVE-2024-9007 - 123Solar 1.8.4.5 - Cross-Site Scripting - rules observed: 340147
- CVE-2025-2709 - Yonyou UFIDA ERP-NC V5.0 - Cross-Site Scripting - rules observed: 347198
- CVE-2025-2711 - Yonyou UFIDA ERP-NC V5.0 - Cross-Site Scripting - rules observed: 347198
- CVE-2025-2712 - Yonyou UFIDA ERP-NC V5.0 - Cross-Site Scripting - rules observed: 347198
- CVE-2025-34141 - ETQ Reliance - Reflected XSS via SQLConverterServlet - rules observed: 347198
- CVE-2025-41393 - Ricoh Web Image Monitor - Reflected XSS - rules observed: 341266
- CVE-2025-44136 - MapTiler Tileserver-php v2.0 - Unauthenticated XSS - rules observed: 342259
- CVE-2025-4576 - Liferay Portal & DXP - Cross-Site Scripting - rules observed: 341266
- CVE-2025-46349 - YesWiki Reflected XSS via File Upload - rules observed: 347198
- CVE-2025-5301 - ONLYOFFICE Docs (DocumentServer) - Reflected Cross-Site Scripting - rules observed: 341266
- CVE-2025-53533 - Pi-hole Reflected XSS in 404-Error Page - rules observed: 347198
- CVE-2025-6174 - WordPress Qwizcards < 3.95 - Cross-Site Scripting (Reflected) - rules observed: 341266
- CVE-2026-24128 - XWiki Platform Distribution Flavor Main - Cross-Site Scripting - rules observed: 347198
- CVE-2026-25616 - Blesta <= 5.13.1 - Cross-Site Scripting - rules observed: 340112
- CVE-2026-27176 - MajorDoMo - Cross-Site Scripting - rules observed: 347198
- CVE-2026-29183 - SiYuan Note - Cross-Site Scripting - rules observed: 341266, 347198
- CVE-2026-40105 - XWiki - Cross-Site Scripting - rules observed: 341266
- CVE-2024-13609 - WordPress 1 Click Migration Plugin < 2.3 - Information Exposure - rules observed: 350590
- CVE-2025-24963 - Vitest Browser Mode - Local File Read - rules observed: 347009
- CVE-2025-41242 - Spring Framework - Path Traversal - rules observed: 347009
- CVE-2010-0467 - Joomla! Component CCNewsLetter - Local File Inclusion - rules observed: 347009
- CVE-2012-4982 - Forescout CounterACT 6.3.4.1 - Open Redirect - rules observed: 340162
- CVE-2012-6499 - WordPress Plugin Age Verification v0.4 - Open Redirect - rules observed: 392301
- CVE-2020-5775 - Canvas LMS v2020-07-29 - Blind Server-Side Request Forgery - rules observed: 340162
- CVE-2023-47218 - QNAP QTS and QuTS Hero - OS Command Injection - rules observed: 330791
- CVE-2024-20404 - Cisco Finesse - Server-Side Request Forgery (SSRF) - rules observed: 392301
- CVE-2018-13980 - Zeta Producer Desktop CMS <14.2.1 - Local File Inclusion - rules observed: 347009
- CVE-2005-3128 - SquirrelMail Address Add 1.4.2 - Cross-Site Scripting - rules observed: 341266
- CVE-2017-14186 - FortiGate FortiOS SSL VPN Web Portal - Cross-Site Scripting - rules observed: 350148
- CVE-2018-12095 - OEcms 3.1 - Cross-Site Scripting - rules observed: 341266
- CVE-2018-15917 - Jorani Leave Management System 0.6.5 - Cross-Site Scripting - rules observed: 341266
- CVE-2019-11370 - Carel pCOWeb <B1.2.4 - Cross-Site Scripting - rules observed: 342259
- CVE-2020-12262 - Intelbras TIP200/TIP200LITE/TIP300 - Cross-Site Scripting - rules observed: 341266
- CVE-2020-20285 - ZZcms - Cross-Site Scripting - rules observed: 333141
- CVE-2020-35774 - twitter-server Cross-Site Scripting - rules observed: 341266
- CVE-2021-31250 - CHIYU TCP/IP Converter - Cross-Site Scripting - rules observed: 341266
- CVE-2021-3831 - Gnuboard 5 - Cross-Site Scripting - rules observed: 341266
- CVE-2022-0378 - Microweber Cross-Site Scripting - rules observed: 347198
- CVE-2022-25489 - Atom CMS v2.0 - Cross-Site Scripting - rules observed: 341266
- CVE-2023-34537 - Hoteldruid 3.0.5 - Cross-Site Scripting - rules observed: 340130, 340147
- CVE-2024-33326 - LumisXP - Cross-site Scripting - rules observed: 341266
- CVE-2024-52762 - Ganglia Web Interface (v3.7.3 - v3.7.6) - Cross-Site Scripting - rules observed: 341266
- CVE-2024-52763 - Ganglia Web Interface (v3.7.3 - v3.7.5) - Cross-Site Scripting - rules observed: 347198
- CVE-2025-27506 - NocoDB < 0.258.0 - Reflected XSS in Password Reset - rules observed: 347198
- CVE-2025-32970 - XWiki WYSIWYG API - Open Redirect - rules observed: 340162
- CVE-2025-34032 - Moodle LMS Jmol Plugin <= 6.1 - Cross-Site Scripting - rules observed: 341266
- CVE-2000-0114 - Microsoft FrontPage Extensions - Information Disclosure - rules observed: 392301
- CVE-2014-8676 - Simple Online Planning Tool <1.3.2 - Local File Inclusion - rules observed: 347009
- CVE-2014-9609 - Netsweeper 4.0.8 - Directory Traversal - rules observed: 347009
- CVE-2015-5471 - Swim Team <= v1.44.10777 - Local File Inclusion - rules observed: 347009
- CVE-2018-16059 - WirelessHART Fieldgate SWG70 3.0 - Local File Inclusion - rules observed: 392301
- CVE-2018-3167 - Oracle E-Business Suite - Blind SSRF - rules observed: 392301
- CVE-2019-17503 - Kirona Dynamic Resource Scheduler - Information Disclosure - rules observed: 312863
- CVE-2019-18393 - Ignite Realtime Openfire <4.42 - Local File Inclusion - rules observed: 347019
- CVE-2019-8446 - Jira Improper Authorization - rules observed: 392301
- CVE-2020-11798 - Mitel MiCollab AWV 8.1.2.4 and 9.1.3 - Directory Traversal - rules observed: 347009
- CVE-2021-20150 - Trendnet AC2600 TEW-827DRU - Credentials Disclosure - rules observed: 392301
- CVE-2021-23241 - MERCUSYS Mercury X18G 1.0.5 Router - Local File Inclusion - rules observed: 347009
- CVE-2021-28377 - Joomla! ChronoForums 2.0.11 - Local File Inclusion - rules observed: 347009
- CVE-2022-28666 - Custom Product Tabs for WooCommerce < 1.7.8 - Unauthenticated Toggle Content Setting Update - rules observed: 392301
- CVE-2023-2059 - DedeCMS 5.7.87 - Directory Traversal - rules observed: 347019
- CVE-2023-30943 - Moodle - Cross-Site Scripting/Remote Code Execution - rules observed: 347198
- CVE-2023-41599 - JFinalCMS v5.0.0 - Directory Traversal - rules observed: 347009
- CVE-2024-28397 - pyload-ng js2py - Remote Code Execution - rules observed: 340014
- CVE-2024-7339 - TVT DVR Sensitive Device - Information Disclosure - rules observed: 392301
- CVE-2025-1743 - Pichome 2.1.0 - Arbitrary File Read - rules observed: 347009
- CVE-2025-31125 - Vite Development Server - Path Traversal - rules observed: 347009
- CVE-2025-31486 - Vite server.fs.deny Bypass - Local File Inclusion - rules observed: 347009
- CVE-2025-4427 - Ivanti Endpoint Manager Mobile - Unauthenticated Remote Code Execution - rules observed: 393655
- CVE-2025-46550 - YesWiki < 4.5.4 - Cross-Site Scripting - rules observed: 341266
- CVE-2025-46565 - Vite Dev Server - Information Exposure - rules observed: 390709
- CVE-2026-23483 - Blinko <= 1.8.3 - Path Traversal via /plugins - rules observed: 347009
- CVE-2006-3392 - Webmin < 1.290 / Usermin < 1.220 - Arbitrary File Disclosure - rules observed: 347009
- CVE-2007-4504 - Joomla! RSfiles <=1.0.2 - Local File Inclusion - rules observed: 347009
- CVE-2008-4764 - Joomla! <=2.0.0 RC2 - Local File Inclusion - rules observed: 347009
- CVE-2008-6080 - Joomla! ionFiles 4.4.2 - Local File Inclusion - rules observed: 347009
- CVE-2008-6222 - Joomla! ProDesk 1.0/1.2 - Local File Inclusion - rules observed: 347009
- CVE-2008-6668 - nweb2fax <=0.2.7 - Local File Inclusion - rules observed: 347009
- CVE-2009-1496 - Joomla! Cmimarketplace 0.1 - Local File Inclusion - rules observed: 347009
- CVE-2009-2100 - Joomla! JoomlaPraise Projectfork 2.0.10 - Local File Inclusion - rules observed: 347009
- CVE-2009-5114 - WebGlimpse 2.18.7 - Directory Traversal - rules observed: 347009
- CVE-2010-0696 - Joomla! Component Jw_allVideos - Arbitrary File Retrieval - rules observed: 347009
- CVE-2010-0942 - Joomla! Component com_jvideodirect - Directory Traversal - rules observed: 347009
- CVE-2010-0943 - Joomla! Component com_jashowcase - Directory Traversal - rules observed: 347009
- CVE-2010-0944 - Joomla! Component com_jcollection - Directory Traversal - rules observed: 347009
- CVE-2010-1081 - Joomla! Component com_communitypolls 1.5.2 - Local File Inclusion - rules observed: 347009
- CVE-2010-1302 - Joomla! Component DW Graph - Local File Inclusion - rules observed: 347009
- CVE-2010-1304 - Joomla! Component User Status - Local File Inclusion - rules observed: 347009
- CVE-2010-1305 - Joomla! Component JInventory 1.23.02 - Local File Inclusion - rules observed: 347009
- CVE-2010-1307 - Joomla! Component Magic Updater - Local File Inclusion - rules observed: 347009
- CVE-2010-1308 - Joomla! Component SVMap 1.1.1 - Local File Inclusion - rules observed: 347009
- CVE-2010-1312 - Joomla! Component News Portal 1.5.x - Local File Inclusion - rules observed: 347009
- CVE-2010-1314 - Joomla! Component Highslide 1.5 - Local File Inclusion - rules observed: 347009
- CVE-2010-1315 - Joomla! Component webERPcustomer - Local File Inclusion - rules observed: 347009
- CVE-2010-1340 - Joomla! Component com_jresearch - ‘Controller’ Local File Inclusion - rules observed: 347009
- CVE-2010-1345 - Joomla! Component Cookex Agency CKForms - Local File Inclusion - rules observed: 347009
- CVE-2010-1352 - Joomla! Component Juke Box 1.7 - Local File Inclusion - rules observed: 347009
- CVE-2010-1353 - Joomla! Component LoginBox - Local File Inclusion - rules observed: 347009
- CVE-2010-1354 - Joomla! Component VJDEO 1.0 - Local File Inclusion - rules observed: 347009
- CVE-2010-1429 - Red Hat JBoss Enterprise Application Platform - Sensitive Information Disclosure - rules observed: 382240
- CVE-2010-1461 - Joomla! Component Photo Battle 1.0.1 - Local File Inclusion - rules observed: 347009
- CVE-2010-1491 - Joomla! Component MMS Blog 2.3.0 - Local File Inclusion - rules observed: 347009
- CVE-2010-1494 - Joomla! Component AWDwall 1.5.4 - Local File Inclusion - rules observed: 347009
- CVE-2010-1532 - Joomla! Component PowerMail Pro 1.5.3 - Local File Inclusion - rules observed: 347009
- CVE-2010-1534 - Joomla! Component Shoutbox Pro - Local File Inclusion - rules observed: 347009
- CVE-2010-1540 - Joomla! Component com_blog - Directory Traversal - rules observed: 347009
- CVE-2010-1601 - Joomla! Component JA Comment - Local File Inclusion - rules observed: 347009
- CVE-2010-1657 - Joomla! Component SmartSite 1.0.0 - Local File Inclusion - rules observed: 347009
- CVE-2010-1658 - Joomla! Component NoticeBoard 1.3 - Local File Inclusion - rules observed: 347009
- CVE-2010-1659 - Joomla! Component Ultimate Portfolio 1.0 - Local File Inclusion - rules observed: 347009
- CVE-2010-1714 - Joomla! Component Arcade Games 1.0 - Local File Inclusion - rules observed: 347009
- CVE-2010-1858 - Joomla! Component SMEStorage - Local File Inclusion - rules observed: 347009
- CVE-2010-1982 - Joomla! Component JA Voice 2.0 - Local File Inclusion - rules observed: 347009
- CVE-2010-2307 - Motorola SBV6120E SURFboard Digital Voice Modem SBV6X2X-1.0.0.5-SCM - Directory Traversal - rules observed: 347009
- CVE-2010-3203 - Joomla! Component PicSell 1.0 - Arbitrary File Retrieval - rules observed: 344360
- CVE-2011-0049 - Majordomo2 - SMTP/HTTP Directory Traversal - rules observed: 347009
- CVE-2011-1669 - WP Custom Pages 0.5.0.1 - Local File Inclusion (LFI) - rules observed: 347009
- CVE-2011-2780 - Chyrp 2.x - Local File Inclusion - rules observed: 347009
- CVE-2011-4804 - Joomla! Component com_kp - ‘Controller’ Local File Inclusion - rules observed: 347009
- CVE-2012-0896 - Count Per Day <= 3.1 - download.php f Parameter Traversal Arbitrary File Access - rules observed: 347009
- CVE-2012-0981 - phpShowtime 2.0 - Directory Traversal - rules observed: 347009
- CVE-2012-0996 - 11in1 CMS 1.2.1 - Local File Inclusion (LFI) - rules observed: 347009
- CVE-2013-5979 - Xibo 1.2.2/1.4.1 - Directory Traversal - rules observed: 347009
- CVE-2013-7091 - Zimbra Collaboration Server 7.2.2/8.0.2 Local File Inclusion - rules observed: 390614, 347009
- CVE-2013-7240 - WordPress Plugin Advanced Dewplayer 1.2 - Directory Traversal - rules observed: 344360
- CVE-2014-4940 - WordPress Plugin Tera Charts - Local File Inclusion - rules observed: 347009
- CVE-2014-5111 - Fonality trixbox - Local File Inclusion - rules observed: 347009
- CVE-2014-5368 - WordPress Plugin WP Content Source Control - Directory Traversal - rules observed: 344360
- CVE-2014-6308 - Osclass Security Advisory 3.4.1 - Local File Inclusion - rules observed: 347009
- CVE-2014-8799 - WordPress Plugin DukaPress 2.5.2 - Directory Traversal - rules observed: 344360
- CVE-2014-9119 - WordPress DB Backup <=4.5 - Local File Inclusion - rules observed: 344360
- CVE-2015-1579 - WordPress Slider Revolution - Local File Disclosure - rules observed: 344360
- CVE-2015-2067 - Magento Server MAGMI - Directory Traversal - rules observed: 347009
- CVE-2015-2166 - Ericsson Drutt MSDP - Local File Inclusion - rules observed: 347009
- CVE-2015-3897 - Bonita BPM Portal <6.5.3 - Local File Inclusion - rules observed: 340007, 344360
- CVE-2015-4414 - WordPress SE HTML5 Album Audio Player 1.1.0 - Directory Traversal - rules observed: 347009
- CVE-2015-4666 - Xceedium Xsuite <=2.4.4.5 - Local File Inclusion - rules observed: 347009
- CVE-2015-5531 - ElasticSearch <1.6.1 - Local File Inclusion - rules observed: 392301, 347009
- CVE-2015-5688 - Geddy <13.0.8 - Local File Inclusion - rules observed: 347009
- CVE-2019-2588 - Oracle Business Intelligence - Path Traversal - rules observed: 347019
- CVE-2023-34259 - Kyocera TASKalfa printer - Path Traversal - rules observed: 347009
- CVE-2017-14651 - WSO2 Data Analytics Server 3.1.0 - Cross-Site Scripting - rules observed: 347198
- CVE-2020-9314 - Oracle iPlanet Web Server 7.0.x - Image Injection - rules observed: 340162
- CVE-2023-0563 - Bank Locker Management System - Cross-Site Scripting - rules observed: 340147
- CVE-2023-45671 - Frigate < 0.13.0 Beta 3 - Cross-Site Scripting - rules observed: 347198
- CVE-2005-4385 - Cofax <=2.0RC3 - Cross-Site Scripting - rules observed: 341266
- CVE-2007-5728 - phpPgAdmin <=4.1.1 - Cross-Site Scripting - rules observed: 341266
- CVE-2008-2398 - AppServ Open Project <=2.5.10 - Cross-Site Scripting - rules observed: 333141
- CVE-2008-5587 - phpPgAdmin <=4.2.1 - Local File Inclusion - rules observed: 347009
- CVE-2008-6465 - Parallels H-Sphere 3.0.0 P9/3.1 P1 - Cross-Site Scripting - rules observed: 347198
- CVE-2008-6982 - Devalcms 1.4a - Cross-Site Scripting - rules observed: 341266
- CVE-2009-1872 - Adobe Coldfusion <=8.0.1 - Cross-Site Scripting - rules observed: 341266
- CVE-2010-0982 - Joomla! Component com_cartweberp - Local File Inclusion - rules observed: 347009
- CVE-2010-1217 - Joomla! Component & Plugin JE Tooltip 1.0 - Local File Inclusion - rules observed: 347009
- CVE-2010-1313 - Joomla! Component Saber Cart 1.0.0.12 - Local File Inclusion - rules observed: 347009
- CVE-2010-5278 - MODx manager - Local File Inclusion - rules observed: 390614
- CVE-2011-4618 - Advanced Text Widget < 2.0.2 - Cross-Site Scripting - rules observed: 341266
- CVE-2011-5106 - WordPress Plugin Flexible Custom Post Type < 0.1.7 - Cross-Site Scripting - rules observed: 341266
- CVE-2012-4253 - MySQLDumper 1.24.4 - Directory Traversal - rules observed: 347009
- CVE-2012-4547 - AWStats 6.95/7.0 - ‘awredir.pl’ Cross-Site Scripting - rules observed: 341266
- CVE-2012-4889 - ManageEngine Firewall Analyzer 7.2 - Cross-Site Scripting - rules observed: 341266
- CVE-2013-6281 - WordPress Spreadsheet - Cross-Site Scripting - rules observed: 341266
- CVE-2014-2908 - Siemens SIMATIC S7-1200 CPU - Cross-Site Scripting - rules observed: 341266
- CVE-2014-9444 - Frontend Uploader <= 0.9.2 - Cross-Site Scripting - rules observed: 341266
- CVE-2015-1880 - Fortinet FortiOS <=5.2.3 - Cross-Site Scripting - rules observed: 341266
- CVE-2015-2068 - Magento Server Mass Importer - Cross-Site Scripting - rules observed: 341266
- CVE-2015-3337 - Elasticsearch - Local File Inclusion - rules observed: 347009
- CVE-2015-6477 - Nordex NC2 - Cross-Site Scripting - rules observed: 340147
- CVE-2018-18777 - Microstrategy Web 7 - Local File Inclusion - rules observed: 347009
- CVE-2020-7318 - McAfee ePolicy Orchestrator <5.10.9 Update 9 - Cross-Site Scripting - rules observed: 347198
- CVE-2024-34061 - Changedetection.io <=v0.45.21 - Cross-Site Scripting - rules observed: 333141
- CVE-2024-4348 - osCommerce v4.0 - Cross-site Scripting - rules observed: 340147
- CVE-2024-7928 - FastAdmin < V1.3.4.20220530 - Path Traversal - rules observed: 340007
- CVE-2025-2127 - JoomlaUX JUX Real Estate 3.4.0 - Reflected XSS - rules observed: 341266
- CVE-2013-5528 - Cisco Unified Communications Manager 7/8/9 - Directory Traversal - rules observed: 347009
- CVE-2014-5258 - webEdition 6.3.8.0 - Directory Traversal - rules observed: 347009
- CVE-2019-19411 - Huawei Firewall - Local File Inclusion - rules observed: 347009
- CVE-2012-0991 - OpenEMR 4.1 - Local File Inclusion - rules observed: 347009
- CVE-2018-10818 - LG NAS Devices - Remote Code Execution - rules observed: 340014
- CVE-2018-25114 - osCommerce 2.3.4.1 - Remote Code Execution - rules observed: 344360
- CVE-2020-26073 - Cisco SD-WAN vManage Software - Local File Inclusion - rules observed: 347009
- CVE-2021-40272 - IRTS OP5 Monitor - Cross-Site Scripting - rules observed: 347198
- CVE-2021-41691 - openSIS Student Information System 8.0 SQL Injection - rules observed: 340159
- CVE-2022-29299 - SolarView Compact 6.00 - ’time_begin’ Cross-Site Scripting - rules observed: 341266
- CVE-2022-29301 - SolarView Compact 6.00 - ‘pow’ Cross-Site Scripting - rules observed: 341266
- CVE-2022-3254 - AWP Classifieds <= 4.2.1 - Unauthenticated SQL Injection - rules observed: 340016
- CVE-2022-38322 - Temenos Transact - Cross-Site Scripting - rules observed: 333141
- CVE-2022-45836 - WordPress Download Manager <= 3.2.59 - Reflected XSS - rules observed: 333141
- CVE-2023-1434 - Odoo - Cross-Site Scripting - rules observed: 341266
- CVE-2023-42343 - OpenCMS - Cross-Site Scripting - rules observed: 347198
- CVE-2023-52163 - Digiever DS-2105 Pro - Command Injection - rules observed: 390709
- CVE-2024-0250 - Analytics Insights for Google Analytics 4 < 6.3 - Open Redirect - rules observed: 340162
- CVE-2024-12585 - PropertyHive < 2.1.1 - Cross-Site Scripting - rules observed: 341266
- CVE-2024-14015 - Studiocart <= 2.9.0 - Cross-Site Scripting - rules observed: 341266
- CVE-2024-22024 - Ivanti Connect Secure - XXE - rules observed: 380019
- CVE-2024-27564 - ChatGPT个人专用版 - Server Side Request Forgery - rules observed: 347009
- CVE-2024-28734 - Coda v.2024Q1 - Cross-Site Scripting - rules observed: 340112
- CVE-2024-2876 - Wordpress Email Subscribers by Icegram Express - SQL Injection - rules observed: 380122
- CVE-2024-30490 - ProfileGrid <= 5.7.8 - SQL Injection - rules observed: 380122
- CVE-2024-31750 - F-logic DataCube3 - SQL Injection - rules observed: 340016
- CVE-2024-33288 - Prison Management System - SQL Injection Authentication Bypass - rules observed: 341245
- CVE-2024-33724 - SOPlanning 1.52.00 Cross Site Scripting - rules observed: 341266
- CVE-2024-34257 - TOTOLINK EX1800T TOTOLINK EX1800T - Command Injection - rules observed: 392301
- CVE-2024-36527 - Puppeteer Renderer - Directory Traversal - rules observed: 347009
- CVE-2024-36837 - CRMEB v.5.2.2 - SQL Injection - rules observed: 340156
- CVE-2024-38289 - TurboMeeting - Boolean-based SQL Injection - rules observed: 340016
- CVE-2024-4879 - ServiceNow UI Macros - Template Injection - rules observed: 342259
- CVE-2024-51483 - Changedetection.io <= 0.47.4 - Path Traversal - rules observed: 340130
- CVE-2024-51977 - Brother MFC-L9570CDW - Information Disclosure - rules observed: 390709
- CVE-2024-5217 - ServiceNow - Incomplete Input Validation - rules observed: 340159
- CVE-2024-6265 - UsersWP <= 1.2.10 - Unauthenticated SQL Injection - rules observed: 380122
- CVE-2024-9166 - TitanNit Web Control 2.01/Atemio 7600 - Remote Code Execution - rules observed: 340014
- CVE-2025-0133 - PAN-OS - Reflected Cross-Site Scripting - rules observed: 341266
- CVE-2025-1303 - Plugin Oficial – Getnet para WooCommerce <= 1.8.0 - Cross-Site Scripting - rules observed: 341266
- CVE-2025-13138 - WP Directory Kit <= 1.4.3 - Unauthenticated SQL Injection - rules observed: 380122
- CVE-2025-22214 - Landray EIS SQL注入漏洞 - rules observed: 340155
- CVE-2025-22785 - Course Booking System <= 6.0.6 - SQL Injection - rules observed: 380122
- CVE-2025-25231 - Omnissa Workspace ONE UEM - Path Traversal - rules observed: 340007
- CVE-2025-27222 - TRUfusion Enterprise <= 7.10.4.0 - Path Traversal - rules observed: 344360
- CVE-2025-32101 - UNA CMS <= 14.0.0-RC4 - PHP Object Injection - rules observed: 390614, 390501
- CVE-2025-34040 - Zhiyuan OA Platform - Arbitrary File Upload - rules observed: 340007
- CVE-2025-34073 - Maltrail <=0.54 Username Parameter - Remote Command Execution - rules observed: 340014
- CVE-2025-34152
- Shenzhen Aitemi M300 Wi-Fi Repeater – Unauthenticated Remote Command Execution via
timeParameter - rules observed: 393655 - CVE-2025-4078 - Wangshen SecGate 3600 Path Traversal Vulnerability - rules observed: 347009
- CVE-2025-46549 - YesWiki <= 4.5.1 - Cross-Site Scripting - rules observed: 341266
- CVE-2025-47204 - Bootstrap Multiselect <= 1.1.2 - Cross-Site Scripting - rules observed: 340147
- CVE-2025-55169 - WeGIA - Directory Traversal - rules observed: 344360
- CVE-2025-61666 - Traccar(Windows) 6.1- 6.8.1 - Local File Inclusion - rules observed: 347019
- CVE-2025-8266 - ChanCMS <= 3.1. - Remote Code Execution - rules observed: 380026
- CVE-2026-11111 - Research note for exploit techniques associated with CVE-2026-11111 - rules observed: 340016, 340162
- CVE-2026-35616 - FortiClient EMS - Authentication Bypass - rules observed: 392301
- CVE-2026-48907 - Research note for exploit techniques associated with CVE-2026-48907 - rules observed: 383871, 333360