Atomicorp WAF Research Notes

Research Update - 2026-09-08

Atomicorp WAF Research Notes document selected engineering observations, testing results, attack-pattern analysis, and WAF rule interactions.

The entries published in this update represent research notes produced during ongoing analysis activities.

These notes are not intended to represent the full set of vulnerabilities mitigated by Atomicorp products and should not be interpreted as a coverage matrix, certification list, or census of protected CVEs.

Atomicorp WAF protections are primarily designed around attack techniques and exploit behaviors rather than individual vulnerability identifiers. A published research note documents a positive research finding related to that CVE. If a CVE is absent from these notes, no conclusion should be drawn about protection status.

Presence means a positive research finding was published. Absence means no conclusion should be drawn.

CVE Notes Published in This Update

CVEVulnerability NameRules Observed
CVE-2016-10043Radisys MRF - Command Injection341245
CVE-2016-9269Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 - Multiple Vulnerabilities340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 , 390585
CVE-2012-5686ZPanel 10.0.1 - Cross-Site Request Forgery / Cross-Site Scripting / SQL Injection / Password Reset340016 , 340017 , 340147 , 340148 , 341256 , 342259 , 346755 , 350148 , 360147 , 360148 , 390704
CVE-2015-3934Fiyo CMS 2.0_1.9.1 - SQL Injection341245 , 344366 , 380026 , 380122
CVE-2015-4683Polycom RealPresence Resource Manager < 8.4 - Multiple Vulnerabilities330791 , 340152 , 392301
CVE-2015-6018ZYXEL PMG5318-B20A - OS Command Injection330791 , 340152
CVE-2015-6834Kerio Control Unified Threat Management 9.1.0 build 1087/9.1.1 build 1324 - Multiple Vulnerabilities344365
CVE-2016-5675NUUO NVRmini2 / NVRsolo / Crystal Devices / NETGEAR ReadyNAS Surveillance Application - Multiple Vulnerabilities392301
CVE-2016-5678NUUO NVRmini2 / NVRsolo / Crystal Devices / NETGEAR ReadyNAS Surveillance Application - Multiple Vulnerabilities392301
CVE-2016-5771Kerio Control Unified Threat Management 9.1.0 build 1087/9.1.1 build 1324 - Multiple Vulnerabilities344365
CVE-2016-5773Kerio Control Unified Threat Management 9.1.0 build 1087/9.1.1 build 1324 - Multiple Vulnerabilities344365
CVE-2017-10366Oracle PeopleSoft 8.5x - Remote Code Execution390703 , 392301
CVE-2017-17672vBulletin 5.x - 'cacheTemplates' Remote Arbitrary File Deletion344370 , 390614
CVE-2017-7462Intellinet NFC-30IR Camera - Multiple Vulnerabilities330925 , 344360 , 347009
CVE-2017-9811Kaspersky Anti-Virus File Server 8.0.3.297 - Multiple Vulnerabilities390704 , 390724
CVE-2017-9834WordPress Plugin WatuPRO 5.5.1 - SQL Injection340156 , 380122
CVE-2018-17440D-Link Central WiFiManager Software Controller 1.03 - Multiple Vulnerabilities340147 , 340148 , 341256 , 342259 , 346755 , 350148 , 390585
CVE-2018-18755K-iwi Framework 1775 - SQL Injection331028 , 340016 , 340155 , 340157 , 341155 , 341245 , 344361 , 360147 , 360148 , 380026
CVE-2018-18761SaltOS Erp Crm 3.1 r8126 - SQL Injection331028 , 340016 , 340155 , 340156 , 340157 , 341155 , 341245 , 360147 , 380026
CVE-2018-18763SaltOS Erp Crm 3.1 r8126 - SQL Injection (2)331028 , 340156 , 340157 , 341245 , 360147 , 360148 , 380026
CVE-2018-18795School Event Management System 1.0 - SQL Injection331028 , 340016 , 340017 , 340157 , 360147 , 360148
CVE-2018-18798School Attendance Monitoring System 1.0 - SQL Injection331028 , 340016 , 340017 , 340157 , 360147 , 360148
CVE-2018-18800PayPal-Credit Card-Debit Card Payment 1.0 - SQL Injection331028 , 340016 , 340157 , 341245 , 360147 , 380123
CVE-2018-18801E-Negosyo System 1.0 - SQL Injection331028 , 340016 , 340017 , 340157 , 341245 , 360147 , 360148
CVE-2018-20526Roxy Fileman 1.4.5 - Unrestricted File Upload / Directory Traversal330791 , 340152
CVE-2018-6220Trend Micro Email Encryption Gateway 5.5 (Build 1111.00) - Multiple Vulnerabilities333141 , 337209 , 337210 , 337211 , 340145 , 340147 , 340148 , 340149 , 340156 , 341145 , 341245 , 341256 , 342259 , 344370 , 346755 , 350147 , 390572 , 390585 , 390704
CVE-2018-6223Trend Micro Email Encryption Gateway 5.5 (Build 1111.00) - Multiple Vulnerabilities333141 , 337209 , 337210 , 337211 , 340145 , 340147 , 340148 , 340149 , 340156 , 341145 , 341245 , 341256 , 342259 , 344370 , 346755 , 350147 , 390572 , 390585 , 390704
CVE-2018-6228Trend Micro Email Encryption Gateway 5.5 (Build 1111.00) - Multiple Vulnerabilities333141 , 337209 , 337210 , 337211 , 340145 , 340147 , 340148 , 340149 , 340156 , 341145 , 341245 , 341256 , 342259 , 344370 , 346755 , 350147 , 390572 , 390585 , 390704
CVE-2018-6229Trend Micro Email Encryption Gateway 5.5 (Build 1111.00) - Multiple Vulnerabilities333141 , 337209 , 337210 , 337211 , 340145 , 340147 , 340148 , 340149 , 340156 , 341145 , 341245 , 341256 , 342259 , 344370 , 346755 , 350147 , 390572 , 390585 , 390704
CVE-2019-5893OpenSource ERP 6.3.1. - SQL Injection341250 , 344366
CVE-2019-9083SQLiteManager 1.2.0 / 1.2.4 - Blind SQL Injection341145 , 341245
CVE-2021-4039Zyxel NWA-1100-NH - Command Injection344364 , 344366
CVE-2022-27412Explore CMS 1.0 - SQL Injection340145 , 340156 , 341145 , 390572
CVE-2022-31056GLPI v10.0.2 - SQL Injection (Authentication Depends on Configuration)330791 , 340152
CVE-2022-45297EQ Enterprise management system v2.2.0 - SQL Injection334168 , 341245 , 344370
CVE-2023-0961Music Gallery Site v1.0 - SQL Injection on page view_music_details.php340016 , 340017 , 340157 , 340159 , 360147 , 360148
CVE-2023-34635Wifi Soft Unibox Administration 3.0 & 3.1 - SQL Injection340145 , 340156 , 341145 , 390572
CVE-2026-21875ClipBucket v5 <= 5.5.2 - Unauthenticated Blind SQL Injection341245 , 380122
CVE-2013-2642Sophos Web Protection Appliance 3.7.8.1 - Multiple Vulnerabilities344362 , 344364 , 344366
CVE-2024-33559Wordpress Theme XStore 9.3.8 - SQLi340016 , 340017 , 344366
CVE-2026-44343WGDashboard < 4.3.2 - Unauthenticated File Read340007 , 344360 , 347009 , 390709
CVE-2026-56292AcyMailing < 10.11.1 - Unauthenticated SQL Injection340157 , 360147 , 360148
CVE-2018-20525Roxy Fileman 1.4.5 - Unrestricted File Upload / Directory Traversal330791 , 340152
CVE-2016-5679NUUO NVRmini2 / NVRsolo / Crystal Devices / NETGEAR ReadyNAS Surveillance Application - Multiple Vulnerabilities392301
CVE-2016-5680NUUO NVRmini2 / NVRsolo / Crystal Devices / NETGEAR ReadyNAS Surveillance Application - Multiple Vulnerabilities392301
CVE-2016-8526Aruba AirWave 8.2.3 - XML External Entity Injection / Cross-Site Scripting333141 , 341256 , 342259 , 344370 , 346755 , 350147 , 350148
CVE-2016-9315Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 - Multiple Vulnerabilities340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 , 390585
CVE-2017-9810Kaspersky Anti-Virus File Server 8.0.3.297 - Multiple Vulnerabilities390704 , 390724
CVE-2018-1213Dell EMC Isilon OneFS - Multiple Vulnerabilities330791 , 333141 , 340147 , 340148 , 340152 , 341256 , 342259 , 346755 , 390585
CVE-2018-17442D-Link Central WiFiManager Software Controller 1.03 - Multiple Vulnerabilities340147 , 340148 , 341256 , 342259 , 346755 , 350148 , 390585
CVE-2018-6224Trend Micro Email Encryption Gateway 5.5 (Build 1111.00) - Multiple Vulnerabilities333141 , 337209 , 337210 , 337211 , 340145 , 340147 , 340148 , 340149 , 340156 , 341145 , 341245 , 341256 , 342259 , 344370 , 346755 , 350147 , 390572 , 390585 , 390704
CVE-2018-7357ZTE ZXHN H168N - Improper Access Restrictions330791 , 334168 , 340152
CVE-2018-7358ZTE ZXHN H168N - Improper Access Restrictions330791 , 334168 , 340152
CVE-2020-10173Comtrend VR-3033 - Command Injection344361 , 344363
CVE-2022-46552D-Link DIR-846 - Remote Command Execution (RCE) vulnerability330791 , 340152 , 381237
CVE-2023-50071CVE-2023-50071 - Multiple SQL Injection330791 , 340152
CVE-2018-6221Trend Micro Email Encryption Gateway 5.5 (Build 1111.00) - Multiple Vulnerabilities333141 , 337209 , 337210 , 337211 , 340145 , 340147 , 340148 , 340149 , 340156 , 341145 , 341245 , 341256 , 342259 , 344370 , 346755 , 350147 , 390572 , 390585 , 390704
CVE-2019-3759RSA IG&L Aveksa 7.1.1 - Remote Code Execution330791 , 340152
CVE-2015-4681Polycom RealPresence Resource Manager < 8.4 - Multiple Vulnerabilities330791 , 340152 , 392301
CVE-2016-9314Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 - Multiple Vulnerabilities340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 , 390585
CVE-2018-6222Trend Micro Email Encryption Gateway 5.5 (Build 1111.00) - Multiple Vulnerabilities333141 , 337209 , 337210 , 337211 , 340145 , 340147 , 340148 , 340149 , 340156 , 341145 , 341245 , 341256 , 342259 , 344370 , 346755 , 350147 , 390572 , 390585 , 390704
CVE-2024-32136BWL Advanced FAQ Manager 2.0.3 - Authenticated SQL Injection380026 , 380122
CVE-2006-0887PHPLib < 7.4 - SQL Injection340017 , 340181 , 341245 , 344370 , 360147 , 360148
CVE-2006-2826PHPLib < 7.4 - SQL Injection340017 , 340181 , 341245 , 344370 , 360147 , 360148
CVE-2009-1479boxalino 09.05.25-0421 - Directory Traversal340007 , 344360 , 390709
CVE-2012-5685ZPanel 10.0.1 - Cross-Site Request Forgery / Cross-Site Scripting / SQL Injection / Password Reset340016 , 340017 , 340147 , 340148 , 341256 , 342259 , 346755 , 350148 , 360147 , 360148 , 390704
CVE-2013-6164Project'Or RIA 3.4.0 - 'objectDetail.php?objectId' SQL Injection392301
CVE-2014-1206Open Web Analytics 1.5.4 - 'owa_email_address' SQL Injection340016 , 340017 , 340144 , 340157 , 360147 , 360148
CVE-2014-2846WD Arkeia Virtual Appliance 10.2.9 - Local File Inclusion344360
CVE-2014-3515Kerio Control Unified Threat Management 9.1.0 build 1087/9.1.1 build 1324 - Multiple Vulnerabilities344365
CVE-2014-8142Kerio Control Unified Threat Management 9.1.0 build 1087/9.1.1 build 1324 - Multiple Vulnerabilities344365
CVE-2015-0231Kerio Control Unified Threat Management 9.1.0 build 1087/9.1.1 build 1324 - Multiple Vulnerabilities344365
CVE-2015-1428Sefrengo CMS 1.6.1 - Multiple SQL Injections390704
CVE-2016-5676NUUO NVRmini2 / NVRsolo / Crystal Devices / NETGEAR ReadyNAS Surveillance Application - Multiple Vulnerabilities392301
CVE-2016-5677NUUO NVRmini2 / NVRsolo / Crystal Devices / NETGEAR ReadyNAS Surveillance Application - Multiple Vulnerabilities392301
CVE-2017-7185Cesanta Mongoose OS - Use-After-Free330791 , 340152
CVE-2017-9812Kaspersky Anti-Virus File Server 8.0.3.297 - Multiple Vulnerabilities390704 , 390724
CVE-2018-7448CMS Made Simple 2.1.6 - Remote Code Execution344363 , 360152 , 390704 , 390724
CVE-2010-4297VMware Tools - Update OS Command Injection392301
CVE-2022-3552BoxBilling<=4.22.1.5 - Remote Code Execution (RCE)340128 , 380018
CVE-2024-0566Smart Manager 8.27.0 - Post-Authenticated SQL Injection380122 , 390704
CVE-2018-1247RSA Authentication Manager 8.2.1.4.0-build1394922 / < 8.3 P1 - XML External Entity Injection / Cross-Site Flashing / DOM Cross-Site Scripting392301
CVE-2015-4685Polycom RealPresence Resource Manager < 8.4 - Multiple Vulnerabilities330791 , 340152 , 392301
CVE-2012-5683ZPanel 10.0.1 - Cross-Site Request Forgery / Cross-Site Scripting / SQL Injection / Password Reset340016 , 340017 , 340147 , 340148 , 341256 , 342259 , 346755 , 350148 , 360147 , 360148 , 390704
CVE-2018-6230Trend Micro Email Encryption Gateway 5.5 (Build 1111.00) - Multiple Vulnerabilities333141 , 337209 , 337210 , 337211 , 340145 , 340147 , 340148 , 340149 , 340156 , 341145 , 341245 , 341256 , 342259 , 344370 , 346755 , 350147 , 390572 , 390585 , 390704
CVE-2018-1203Dell EMC Isilon OneFS - Multiple Vulnerabilities330791 , 333141 , 340147 , 340148 , 340152 , 341256 , 342259 , 346755 , 390585
CVE-2018-1204Dell EMC Isilon OneFS - Multiple Vulnerabilities330791 , 333141 , 340147 , 340148 , 340152 , 341256 , 342259 , 346755 , 390585
CVE-2014-2531InterWorx Control Panel 5.0.13 build 574 - 'xhr.php?i' SQL Injection392301
CVE-2014-5462OpenEMR 4.1.2(7) - Multiple SQL Injections392301
CVE-2015-4682Polycom RealPresence Resource Manager < 8.4 - Multiple Vulnerabilities330791 , 340152 , 392301
CVE-2015-4684Polycom RealPresence Resource Manager < 8.4 - Multiple Vulnerabilities330791 , 340152 , 392301
CVE-2016-6435Cisco Firepower Threat Management Console 6.0.1 - Local File Inclusion340007 , 340029 , 344360 , 347009 , 390613 , 390614 , 390709
CVE-2017-3548Oracle PeopleSoft - 'PeopleSoftServiceListeningConnector' XML External Entity via DOCTYPE330791 , 340152
CVE-2018-18760RhinOS CMS 3.x - Arbitrary File Download334168 , 344360
CVE-2018-18762SaltOS Erp Crm 3.1 r8126 - Database File Download390716
CVE-2018-6219Trend Micro Email Encryption Gateway 5.5 (Build 1111.00) - Multiple Vulnerabilities333141 , 337209 , 337210 , 337211 , 340145 , 340147 , 340148 , 340149 , 340156 , 341145 , 341245 , 341256 , 342259 , 344370 , 346755 , 350147 , 390572 , 390585 , 390704
CVE-2018-6671McAfee ePO 5.9.1 - Registered Executable Local Access Bypass344364 , 344365 , 344366
CVE-2014-8727F5 BIG-IP 10.1.0 - Directory Traversal340007 , 344360 , 390709
CVE-2017-9072RSA Authentication Manager 8.2.1.4.0-build1394922 / < 8.3 P1 - XML External Entity Injection / Cross-Site Flashing / DOM Cross-Site Scripting392301
CVE-2017-9813Kaspersky Anti-Virus File Server 8.0.3.297 - Multiple Vulnerabilities390704 , 390724
CVE-2018-16134Cybrotech CyBroHttpServer 1.0.3 - Cross-Site Scripting340147 , 341266 , 346755
CVE-2018-17441D-Link Central WiFiManager Software Controller 1.03 - Multiple Vulnerabilities340147 , 340148 , 341256 , 342259 , 346755 , 350148 , 390585
CVE-2018-17443D-Link Central WiFiManager Software Controller 1.03 - Multiple Vulnerabilities340147 , 340148 , 341256 , 342259 , 346755 , 350148 , 390585
CVE-2018-7543WordPress Plugin Duplicator 1.2.32 - Cross-Site Scripting333140 , 340148 , 346755 , 380026
CVE-2018-9238Yahei PHP Prober 0.4.7 - Cross-Site Scripting340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148
CVE-2019-10685Prinect Archive System 2015 Release 2.6 - Cross-Site Scripting340147 , 341256 , 341266 , 346755 , 390585
CVE-2019-17504Kirona-DRS 5.5.3.5 - Information Disclosure312863 , 340147 , 340148 , 341266 , 342259 , 344370 , 346755 , 390716
CVE-2019-8390qdPM 9.1 - 'search[keywords]' Cross-Site Scripting340147 , 340148 , 341256 , 342259 , 350147
CVE-2020-35416PHPJabbers Appointment Scheduler 2.3 - Reflected XSS (Cross-Site Scripting)340003 , 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350148 , 390585
CVE-2022-29296Avantune Genialcloud ProJ 10 - Cross-Site Scripting (XSS)344370
CVE-2024-3378iboss Secure Web Gateway - Stored Cross-Site Scripting (XSS)392301
CVE-2016-9316Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 - Multiple Vulnerabilities340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 , 390585
CVE-2018-6226Trend Micro Email Encryption Gateway 5.5 (Build 1111.00) - Multiple Vulnerabilities333141 , 337209 , 337210 , 337211 , 340145 , 340147 , 340148 , 340149 , 340156 , 341145 , 341245 , 341256 , 342259 , 344370 , 346755 , 350147 , 390572 , 390585 , 390704
CVE-2018-6227Trend Micro Email Encryption Gateway 5.5 (Build 1111.00) - Multiple Vulnerabilities333141 , 337209 , 337210 , 337211 , 340145 , 340147 , 340148 , 340149 , 340156 , 341145 , 341245 , 341256 , 342259 , 344370 , 346755 , 350147 , 390572 , 390585 , 390704
CVE-2020-9467Piwigo 2.10.1 - Cross Site Scripting340147 , 340148 , 341256 , 342259 , 346755
CVE-2021-29460Kirby CMS 3.5.3.1 - 'file' Cross-Site Scripting (XSS)330791 , 340152
CVE-2021-35956AKCP sensorProbe SPX476 - 'Multiple' Cross-Site Scripting (XSS)333141 , 341256 , 342259 , 350147
CVE-2021-40577Online Enrollment Management System in PHP and PayPal 1.0 - 'U_NAME' Stored Cross-Site Scripting340147 , 340148 , 342259 , 346755 , 350148
CVE-2022-0020Palo Alto Cortex XSOAR 6.5.0 - Stored Cross-Site Scripting (XSS)330791 , 333141 , 340152 , 341256 , 342259 , 346755
CVE-2022-41358Garage Management System 1.0 (categoriesName) - Stored XSS330791 , 340152
CVE-2022-48178X2CRM v6.6/6.9 - Stored Cross-Site Scripting (XSS) (Authenticated)340147 , 340148 , 341256 , 342259 , 346755 , 390585
CVE-2023-5452SnipeIT 6.2.1 - Stored Cross Site Scripting333140 , 340147 , 340148 , 341256 , 342259 , 346755 , 350148
CVE-2018-16133Cybrotech CyBroHttpServer 1.0.3 - Directory Traversal344365 , 347019 , 390716
CVE-2019-14430YouPHPTube 7.2 - 'userCreate.json.php' SQL Injection392301
CVE-2001-1341Solare Datensysteme Solar-Log Devices 2.8.4-56/3.5.2-85 - Multiple Vulnerabilities390716 , 392301
CVE-2010-3486SmarterMail < 7.2.3925 - Persistent Cross-Site Scripting392301
CVE-2013-2641Sophos Web Protection Appliance 3.7.8.1 - Multiple Vulnerabilities344362 , 344364 , 344366
CVE-2017-7461Intellinet NFC-30IR Camera - Multiple Vulnerabilities330925 , 344360 , 347009
CVE-2018-1186Dell EMC Isilon OneFS - Multiple Vulnerabilities330791 , 333141 , 340147 , 340148 , 340152 , 341256 , 342259 , 346755 , 390585
CVE-2018-1187Dell EMC Isilon OneFS - Multiple Vulnerabilities330791 , 333141 , 340147 , 340148 , 340152 , 341256 , 342259 , 346755 , 390585
CVE-2018-1188Dell EMC Isilon OneFS - Multiple Vulnerabilities330791 , 333141 , 340147 , 340148 , 340152 , 341256 , 342259 , 346755 , 390585
CVE-2018-1189Dell EMC Isilon OneFS - Multiple Vulnerabilities330791 , 333141 , 340147 , 340148 , 340152 , 341256 , 342259 , 346755 , 390585
CVE-2018-1201Dell EMC Isilon OneFS - Multiple Vulnerabilities330791 , 333141 , 340147 , 340148 , 340152 , 341256 , 342259 , 346755 , 390585
CVE-2018-1202Dell EMC Isilon OneFS - Multiple Vulnerabilities330791 , 333141 , 340147 , 340148 , 340152 , 341256 , 342259 , 346755 , 390585
CVE-2018-20418Craft CMS 3.0.25 - Cross-Site Scripting340147 , 340148 , 341256 , 342259 , 344365 , 346755
CVE-2019-19742D-Link DIR-615 Wireless Router - Persistent Cross-Site Scripting340147 , 340148 , 341256 , 342259 , 344370 , 350147
CVE-2012-5684ZPanel 10.0.1 - Cross-Site Request Forgery / Cross-Site Scripting / SQL Injection / Password Reset340016 , 340017 , 340147 , 340148 , 341256 , 342259 , 346755 , 350148 , 360147 , 360148 , 390704
CVE-2013-2643Sophos Web Protection Appliance 3.7.8.1 - Multiple Vulnerabilities344362 , 344364 , 344366
CVE-2014-3110Honeywell XL Web Controller - Cross-Site Scripting333141 , 340156 , 341245 , 341256 , 342259 , 346755 , 390724
CVE-2015-4420Opsview 4.6.2 - Multiple Cross-Site Scripting Vulnerabilities340147 , 340148 , 341256 , 342259 , 346755 , 350148
CVE-2018-6225Trend Micro Email Encryption Gateway 5.5 (Build 1111.00) - Multiple Vulnerabilities333141 , 337209 , 337210 , 337211 , 340145 , 340147 , 340148 , 340149 , 340156 , 341145 , 341245 , 341256 , 342259 , 344370 , 346755 , 350147 , 390572 , 390585 , 390704
CVE-2019-13237Alkacon OpenCMS 10.5.x - Local File inclusion392301
CVE-2015-4040F5 Big-IP 10.2.4 Build 595.0 Hotfix HF3 - Directory Traversal344370 , 390724
CVE-2010-4275Radius Manager 3.8.0 - Multiple Cross-Site Scripting Vulnerabilities346755