CVE detection & prevention rules catalog¶
525 CVEs ship ready-to-deploy detection and prevention rules — Snort IDS signatures, YARA rules, and Nginx/Apache mitigations — each paired with a detection-only PoC and a Docker test lab. Grouped by vendor below.
Other¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2023-20198 — Cisco IOS XE Web UI Privilege Escalation | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2023-22527 — Atlassian Confluence Template Injection RCE | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-24576 — Rust Command Injection on Windows | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-45409 — ruby-saml Signature Bypass | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2025-41115 — Grafana Enterprise SCIM Admin Spoofing | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2025-55182 — React Server Components Remote Code Execution (React2Shell) | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2025-71389 — Cal.com Unauthenticated RCE via Next.js RSC Deserialization | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2026-21962 — Oracle HTTP Server and WebLogic Server Proxy Plugin Authentication Bypass vulnerability. | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
CVE-2026-47668 — DbGate /runners/start Code Injection (Unauthenticated RCE) |
Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2026-6516 — ManageEngine ADAudit Plus Agent API OS Command Injection (Unauthenticated RCE) | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
CVE-2026-66012 — SiYuan /mcp Missing Authorization (Unauthenticated Workspace RCE) |
Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-42448 — Veeam Service Provider Console RCE | Critical (9.9) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2026-22172 — OpenClaw versions prior to 2026.3.12 contain an authorization bypass vulnerability in the… | Critical (9.9) | Snort, YARA, Nginx, Apache, Sigma | ✅ |
| CVE-2026-28363 — In OpenClaw before 2026.2.23, tools.exec.safeBins validation for sort could be bypassed… | Critical (9.9) | Snort, YARA, Nginx, Apache, Sigma | ✅ |
| CVE-2026-28466 — OpenClaw versions prior to 2026.2.14 contain a vulnerability in the gateway in which it… | Critical (9.9) | Snort, YARA, Nginx, Apache, Sigma | ✅ |
| CVE-2026-32922 — OpenClaw before 2026.3.11 contains a privilege escalation vulnerability in… | Critical (9.9) | Snort, YARA, Nginx, Apache, Sigma | ✅ |
| CVE-2026-33579 — OpenClaw before 2026.3.28 contains a privilege escalation vulnerability in the /pair… | Critical (9.9) | Snort, YARA, Nginx, Apache, Sigma | ✅ |
| CVE-2022-22963 — Spring Cloud Function SpEL Injection | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2022-22965 — Spring4Shell RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2023-27350 — PaperCut MF/NG Authentication Bypass RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2023-3519 — Citrix NetScaler ADC/Gateway RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2023-37920 — Certifi Trust Root Removal | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2023-38545 — curl SOCKS5 Heap Buffer Overflow | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2023-42793 — JetBrains TeamCity Authentication Bypass RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-0012 — Palo Alto PAN-OS Management Interface Auth Bypass | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-12356 — A critical vulnerability has been discovered in Privileged Remote Access (PRA) and Remote… | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-21512 — MySQL2 Code Injection | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-21513 — langchain Prompt Injection RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-21528 — node-gettext Prototype Pollution | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-39573 — Apache mod_rewrite RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-39705 — NLTK Arbitrary Code Execution | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-45498 — fastapi-admin RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-47561 — Apache Avro RCE via Schema | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-55956 — Cleo Harmony/VLTrader/LexiCom RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-7593 — Ivanti Virtual Traffic Manager Authentication Bypass | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2025-59287 — Microsoft WSUS Remote Code Execution | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2025-61757 — Oracle Identity Manager Pre-Auth RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2026-20093 — This repository contains a proof-of-concept (PoC) exploit for CVE-2026-20093, a critical… | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2026-28391 — OpenClaw versions prior to 2026.2.2 fail to properly validate Windows cmd.exe… | Critical (9.8) | Snort, YARA, Nginx, Apache, Sigma | ✅ |
| CVE-2026-28470 — OpenClaw versions prior to 2026.2.2 contain an exec approvals (must be enabled) allowlist… | Critical (9.8) | Snort, YARA, Nginx, Apache, Sigma | ✅ |
| CVE-2026-28474 — OpenClaw's Nextcloud Talk plugin versions prior to 2026.2.6 accept equality matching on… | Critical (9.8) | Snort, YARA, Nginx, Apache, Sigma | ✅ |
| CVE-2026-30741 — A remote code execution (RCE) vulnerability in OpenClaw Agent Platform v2026.2.6 allows… | Critical (9.8) | Snort, YARA, Nginx, Apache, Sigma | ✅ |
| CVE-2026-32038 — OpenClaw before 2026.2.24 contains a sandbox network isolation bypass vulnerability that… | Critical (9.8) | Snort, YARA, Nginx, Apache, Sigma | ✅ |
| CVE-2026-32917 — OpenClaw before 2026.3.13 contains a remote command injection vulnerability in the… | Critical (9.8) | Snort, YARA, Nginx, Apache, Sigma | ✅ |
| CVE-2026-32924 — OpenClaw before 2026.3.12 contains an authorization bypass vulnerability where Feishu… | Critical (9.8) | Snort, YARA, Nginx, Apache, Sigma | ✅ |
| CVE-2026-32973 — OpenClaw before 2026.3.11 contains an exec allowlist bypass vulnerability where… | Critical (9.8) | Snort, YARA, Nginx, Apache, Sigma | ✅ |
| CVE-2026-32975 — OpenClaw before 2026.3.12 contains a weak authorization vulnerability in Zalouser… | Critical (9.8) | Snort, YARA, Nginx, Apache, Sigma | ✅ |
| CVE-2026-32987 — OpenClaw before 2026.3.13 allows bootstrap setup codes to be replayed during device… | Critical (9.8) | Snort, YARA, Nginx, Apache, Sigma | ✅ |
| CVE-2026-28446 — OpenClaw versions prior to 2026.2.1 with the voice-call extension installed and enabled… | Critical (9.4) | Snort, YARA, Nginx, Apache, Sigma | ✅ |
| CVE-2026-32916 — OpenClaw versions 2026.3.7 before 2026.3.11 contain an authorization bypass vulnerability… | Critical (9.4) | Snort, YARA, Nginx, Apache, Sigma | ✅ |
| CVE-2026-32913 — OpenClaw before 2026.3.7 contains an improper header validation vulnerability in… | Critical (9.3) | Snort, YARA, Nginx, Apache, Sigma | ✅ |
| CVE-2024-21887 — A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x)… | Critical (9.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-29415 — Node.js ip Package SSRF | Critical (9.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-51479 — Next.js Authorization Bypass | Critical (9.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-53990 — AsyncSSH RCE via Extension Negotiation | Critical (9.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2025-64459 — Django SQL Injection | Critical (9.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2025-8110 — Gogs Git Server RCE via Symlink Bypass | Critical (9.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-50050 — Apache Airflow DAG Parsing RCE | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2026-32915 — OpenClaw before 2026.3.11 contains a sandbox boundary bypass vulnerability allowing leaf… | High (8.8) | Snort, YARA, Nginx, Apache, Sigma | ✅ |
| CVE-2024-23831 — LangChain Server-Side Request Forgery | High (8.6) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2026-32918 — OpenClaw before 2026.3.11 contains a session sandbox escape vulnerability in the… | High (8.4) | Snort, YARA, Nginx, Apache, Sigma | ✅ |
| CVE-2026-65709 — sysPass JSON-RPC Broken Object-Level Authorization (BOLA/IDOR) | High (8.3) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2023-46805 — Ivanti Connect Secure Authentication Bypass | High (8.2) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2023-34040 — Spring Kafka Deserialization RCE | High (8.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-32879 — PyMongo Out-of-bounds Read | High (8.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-3656 — Keycloak Session Hijacking | High (8.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-39689 — Django SQL Injection in QuerySet.values()/values_list() | High (8.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2026-10818 — WPForms Pro Unauthenticated Arbitrary File Upload (→ RCE) | High (8.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2026-28472 — OpenClaw versions prior to 2026.2.2 contain a vulnerability in the gateway WebSocket… | High (8.1) | Snort, YARA, Nginx, Apache, Sigma | ✅ |
| CVE-2024-52308 — GitHub CLI RCE via SSH URL | High (8.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2026-32978 — OpenClaw before 2026.3.11 contains an approval integrity vulnerability where system.run… | High (8.0) | Snort, YARA, Nginx, Apache, Sigma | ✅ |
| CVE-2024-1086 — Linux Kernel Netfilter Privilege Escalation | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2023-30861 — Flask Session Cookie Vulnerability | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2023-4966 — Citrix Bleed - Session Token Leakage | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-28102 — JWCrypto JWT Signature Bypass | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-34351 — Next.js Server Actions SSRF | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-35255 — Azure Identity Credential Leak | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-38808 — Spring Framework Expression DoS | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-38816 — Spring WebFlux Path Traversal | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-4068 — braces ReDoS Vulnerability | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-41818 — fast-xml-parser ReDoS | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-41991 — Django URL Validation DoS | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-42473 — OpenStack Ironic Image Manipulation | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-44131 — Apple iOS/macOS TCC Bypass via Symlink | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-45590 — body-parser Content-Type DoS | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-47874 — Starlette Path Traversal | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-49761 — Ruby REXML ReDoS | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-52798 — path-to-regexp ReDoS | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-6221 — Flask-CORS Origin Bypass | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-29156 — Yarn Hardlink Cache Injection | High (7.3) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-12686 — BeyondTrust PRA/RS Command Injection | High (7.2) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-47764 — cookie Package Prototype Pollution | Medium (6.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-43788 — Webpack Code Injection | Medium (6.4) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-47068 — Rollup DOM Clobbering | Medium (6.4) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-52304 — aiohttp Request Smuggling | Medium (6.3) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-45389 — react-router XSS via navigate() | Medium (6.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-47878 — OpenRefine Reflected XSS | Medium (6.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-53255 — Nuxt XSS via asyncData | Medium (6.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-31228 — Redis ACL Selector DoS | Medium (5.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-34064 — Jinja2 SSTI via xmlattr Filter | Medium (5.4) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-39329 — Django Username Enumeration | Medium (5.3) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-55565 — nanoid Predictable Output | Medium (5.3) | Snort, YARA, Nginx, Apache | ✅ |
Microsoft¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2026-23652 — Microsoft Power Pages | Critical (10.0) | Snort | ✅ |
| CVE-2026-42901 — Microsoft Entra ID | Critical (10.0) | Snort | ✅ |
| CVE-2024-21334 — Open Mgmt Infra RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-21410 — Exchange Server EoP | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-21413 — Microsoft Outlook RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-38063 — Windows TCP/IP IPv6 RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-43468 — Microsoft SCCM SQLi | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-43491 — Windows Update RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-49112 — Windows LDAP Remote Code Execution | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-20674 — Windows Security Bypass | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-20698 — Windows Kerberos EoP | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-29988 — Windows SmartScreen Bypass | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-30040 — Windows MSHTML Bypass | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-30078 — Windows Wi-Fi Driver RCE | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-30088 — Windows Kernel Elevation of Privilege | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-38189 — Microsoft Project RCE | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-43453 — Windows RRAS RCE | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-43461 — Windows MSHTML Spoofing | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-43532 — Windows RPC EoP | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-49039 — Windows Task Scheduler | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-21412 — Windows Defender Bypass | High (8.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-21378 — Outlook RCE | High (8.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-20656 — VSCode RCE | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-21338 — Windows Kernel AppLocker Bypass | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-30051 — Windows DWM EoP | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-35250 — Windows Kernel EoP | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-3566 — Windows Env Path | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-38107 — Windows Power Mgmt EoP | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-38193 — Windows AFD EoP | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-43572 — Microsoft MMC RCE | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-21351 — Windows SmartScreen Security Bypass | High (7.6) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-29059 — .NET Info Disclosure | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-38112 — Windows MSHTML RCE | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-38178 — Microsoft Scripting RCE | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-38200 — Office Spoofing NTLM | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-49113 — Windows LDAP Denial of Service (LDAPNightmare) | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-38202 — Windows Backup EoP | High (7.3) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-38094 — SharePoint RCE | High (7.2) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-38106 — Windows Kernel EoP | High (7.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-38213 — Windows Mark of Web Bypass | Medium (6.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-43451 — Windows NTLM Hash | Medium (6.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-43573 — Windows MSHTML Spoofing | Medium (6.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2025-21298 — Windows (OLE Component) | Critical | Snort, YARA, Nginx, Apache | ✅ |
WordPress¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-5932 — GiveWP Injection | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-8522 — LearnPress SQLi | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-27956 — WP Automatic SQLi | Critical (9.9) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-6386 — WPML Multilingual Plugin SSTI | Critical (9.9) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-10028 — Starter Templates | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-10470 — WPLMS LMS File Read | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-10542 — CleanTalk Anti-Spam RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-1071 — WordPress Ultimate Member SQL Injection | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-10924 — WordPress Really Simple Security Authentication Bypass | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-11972 — Hunk Companion WP RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-12209 — WP Starter Templates | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-25600 — Bricks Builder RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-2876 — WPBakery Page Builder | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-2879 — LayerSlider SQLi | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-43917 — TI WooCommerce SQLi | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-4898 — InstaWP Connect | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-50510 — WP Forms Arbitrary File Upload | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-9234 — GutenKit RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-31210 — WordPress Core RCE | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-11205 — WPForms Stripe Payment Bypass | High (8.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-6551 — GiveWP Info Leak | Medium (5.3) | Snort, YARA, Nginx, Apache | ✅ |
Apache¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-25065 — Apache OFBiz SSRF | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-32113 — Apache OFBiz Path | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-36104 — Apache OFBiz Bypass | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-38476 — Apache HTTP Server SSRF | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-38856 — Apache OFBiz Pre-Auth RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-41107 — CloudStack Auth Bypass | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-45195 — Apache OFBiz Unauth RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-45216 — Solr Auth Bypass | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-50379 — Apache Tomcat RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-52316 — Apache Tomcat Auth | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-56337 — Apache Tomcat RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2025-54988 — Apache Tika PDF Parser XXE Injection | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-53677 — Apache Struts RCE | Critical (9.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-51504 — Apache ZooKeeper ACL Bypass | Critical (9.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2026-33557 — Apache Kafka JWT Validation Bypass | Critical (9.1) | Snort, YARA, Nginx, Sigma | ✅ |
| CVE-2024-50380 — Apache Tomcat Path Traversal | High (8.6) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-27316 — HTTP2 CONTINUATION DoS | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-38472 — Apache HTTP Server SSRF | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-21733 — Apache Tomcat Info Leak | Medium (5.3) | Snort, YARA, Nginx, Apache | ✅ |
Ivanti¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-11639 — Ivanti CSA Auth Bypass | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-29824 — Ivanti EPM SQLi | Critical (9.6) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-8963 — Ivanti vTM Auth Bypass | Critical (9.4) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-37404 — Ivanti Endpoint RCE | Critical (9.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-22024 — Ivanti Connect XXE | High (8.3) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-21893 — Ivanti Connect SSRF | High (8.2) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-21894 — Ivanti Connect Secure Heap Overflow | High (8.2) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-22026 — Ivanti Connect SSRF | High (7.2) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-8190 — Ivanti CSA Command Injection | High (7.2) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-9380 — Ivanti CSA OS Injection | High (7.2) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-9381 — Ivanti CSA Path Traversal | High (7.2) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-9379 — Ivanti CSA SQLi | Medium (6.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-22023 — Ivanti Policy Secure XXE | Medium (5.3) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2025-0282 — Connect Secure, Policy Secure, ZTA Gateways | Critical | Snort, YARA, Nginx, Apache | ✅ |
VMware¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-37079 — VMware vCenter Heap Overflow | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-37080 — VMware vCenter Heap Overflow 2 | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-38812 — VMware vCenter RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-22243 — Spring Web Redirect | High (8.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-22259 — Spring Web Redirect | High (8.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-22262 — Spring Web Redirect | High (8.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-22273 — VMware vCenter DoS | High (8.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-37081 — VMware vCenter EoP | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-37087 — VMware vCenter SSRF | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-38813 — VMware vCenter EoP | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-22234 — Spring Security Bypass | High (7.4) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-22274 — VMware vCenter RCE | High (7.2) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-37085 — VMware ESXi Auth Bypass | High (7.2) | Snort, YARA, Nginx, Apache | ✅ |
Apple¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-23222 — Apple WebKit RCE | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-27860 — Apple AVEVideoEncoder | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-44308 — Apple WebKit RCE | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-23296 — Apple RTKit RCE | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-27804 — Apple Kernel EoP | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-23225 — Apple Kernel Read | High (7.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-44309 — Apple WebKit XSS | Medium (6.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-27834 — Apple WebKit Bypass | Medium (5.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-44204 — Apple VoiceOver | Medium (5.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-44243 — macOS SIP Bypass | Medium (5.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-44207 — Apple Messages | Medium (4.3) | Snort, YARA, Nginx, Apache | ✅ |
Progress¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-1212 — Progress LoadMaster RCE | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-2389 — Progress Flowmon RCE | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-4358 — Progress Telerik RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-4885 — WhatsUp Gold Path Traversal | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-5009 — Progress WhatsUp SQLi | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-6327 — Progress Telerik RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-6670 — WhatsUp Gold SQLi | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-6671 — WhatsUp Gold SQLi | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-5805 — MOVEit Auth Bypass | Critical (9.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-5806 — MOVEit SFTP Bypass | Critical (9.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-5178 — Progress Telerik Bypass | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
Google¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-4671 — Chrome Visuals UAF | Critical (9.6) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-5274 — Chrome V8 Type Confusion | Critical (9.6) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-7971 — Chrome V8 Type Confusion | Critical (9.6) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-0519 — Chrome V8 Out-of-Bounds Memory Access | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-2887 — Chrome WebAssembly | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-3159 — Chrome V8 OOB | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-4761 — Chrome V8 OOB Write | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-7965 — Chrome V8 Type Confusion | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-43093 — Android Framework LPE | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-9956 — Chrome WebAuthn Passkey Phishing | High (7.4) | Snort, YARA, Nginx, Apache | ✅ |
Cisco¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-20439 — Cisco Smart Licensing | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2026-20223 — Cisco Secure Workload (formerly Tetration) | Critical (10.0) | Snort | ✅ |
| CVE-2024-20253 — Cisco Unified CM RCE | Critical (9.9) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-20432 — Cisco NDFC Command Injection | Critical (9.9) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-20419 — Cisco Smart Install | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-20440 — Cisco Smart Licensing | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-20353 — Cisco ASA WebVPN | High (8.6) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-20359 — Cisco ASA RCE | Medium (6.0) | Snort, YARA, Nginx, Apache | ✅ |
Docker¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-23652 — BuildKit Symlink | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-41110 — Docker AuthZ Bypass | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-23653 — BuildKit GRPC Bypass | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-8695 — Docker Desktop RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-8696 — Docker Desktop RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-23651 — BuildKit Mount Race | High (8.7) | Snort, YARA, Nginx, Apache | ✅ |
Linux¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-0193 — Netfilter UAF | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-36886 — Linux Kernel UAF | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-36971 — Linux Kernel UAF | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-53104 — Linux Kernel USB Video UAF | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
CVE-2026-46333 — In the Linux kernel, a vulnerability exists in the ptrace subsystem's get_dumpable()… |
High (7.1) | Snort, Sigma | ✅ |
| CVE-2024-50302 — Linux Kernel Uninitialized | Medium (5.5) | Snort, YARA, Nginx, Apache | ✅ |
Atlassian¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-1597 — Atlassian PostgreSQL SQLi | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-37768 — Jira Privilege Escalation | Critical (9.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-21683 — Atlassian Confluence Remote Code Execution | High (8.3) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-21687 — Bamboo Injection | High (8.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-21685 — Jira Info Disclosure | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
Fortinet¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-23113 — Fortinet FortiOS Format String RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-47575 — FortiManager Auth Bypass | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-55591 — FortiOS Auth Bypass | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-21762 — Fortinet FortiOS Out-of-Bounds Write | Critical (9.6) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-11616 — Fortinet FortiOS SSL VPN | Critical (9.3) | Snort, YARA, Nginx, Apache | ✅ |
Nginx¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-24989 — Nginx HTTP/3 NULL Pointer Dereference | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-24990 — Nginx HTTP/3 Use-After-Free | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-7347 — Nginx mp4 Buffer Overflow | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-32760 — Nginx HTTP/3 Buffer Overwrite | Medium (6.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-31079 — Nginx HTTP/3 Stack Overflow | Medium (5.3) | Snort, YARA, Nginx, Apache | ✅ |
Jenkins¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-23897 — Jenkins CLI Arbitrary File Read | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-23898 — Jenkins WebSocket XSS/CSRF | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-34144 — Jenkins Sandbox Bypass | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-43044 — Jenkins Remoting File Read | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
OpenPrinting¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-47176 — CUPS RCE | Critical (9.9) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-47076 — CUPS libcupsfilters | Critical (9.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-47175 — CUPS libppd | Critical (9.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-47177 — CUPS cups-filters | Critical (9.0) | Snort, YARA, Nginx, Apache | ✅ |
OpenSSL¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-4741 — OpenSSL Use-After-Free in SSL_free_buffers | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-2511 — OpenSSL TLSv1.3 Session Cache DoS | Medium (5.9) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-0727 — OpenSSL PKCS12 Decoding Crash | Medium (5.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2023-5678 — OpenSSL DH Key Generation Slowdown | Medium (5.3) | Snort, YARA, Nginx, Apache | ✅ |
PostgreSQL¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-9014 — pgAdmin4 OAuth2 | Critical (9.9) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-10979 — PostgreSQL Extension | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2025-1094 — PostgreSQL SQL Injection to RCE | High (8.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-3116 — pgAdmin4 RCE | High (7.4) | Snort, YARA, Nginx, Apache | ✅ |
Apache Software Foundation¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2026-44930 — Apache CXF | Critical (9.8) | Snort | ✅ |
| CVE-2024-45387 — Apache Traffic Server | High | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2025-24813 — Apache Tomcat | Critical | Snort, YARA, Nginx, Apache | ✅ |
CyberPanel¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-51378 — CyberPanel Command Injection | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-51567 — CyberPanel RCE | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-53376 — CyberPanel Remote Code Execution | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
Fortra¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-0204 — GoAnywhere MFT Bypass | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-5276 — FileCatalyst SQL Injection | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-6632 — FileCatalyst SQL Injection | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
GitHub¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-9488 — GitHub Enterprise Auth Bypass | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-9487 — GitHub Enterprise SAML Bypass | Critical (9.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-0507 — GitHub Enterprise SSRF | High (7.2) | Snort, YARA, Nginx, Apache | ✅ |
Mitel¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-54679 — Mitel MiCollab SQLi | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-41713 — Mitel MiCollab Path Traversal | Critical (9.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-55550 — Mitel MiCollab LFI | Medium (4.4) | Snort, YARA, Nginx, Apache | ✅ |
Palo Alto Networks Expedition¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-9463 — Palo Alto Expedition OS Command Injection | Critical (9.9) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-9464 — Palo Alto Expedition Authenticated Command Injection | Critical (9.3) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-9465 — Palo Alto Expedition SQL Injection | Critical (9.2) | Snort, YARA, Nginx, Apache | ✅ |
QNAP¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-32766 — QNAP NAS RCE | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-27130 — QNAP NAS Buffer Overflow | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-27131 — QNAP NAS Buffer Overflow | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
Redis¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2025-49844 — Redis RediShell RCE | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2025-21605 — Redis Unauthenticated DoS | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2025-32023 — Redis HyperLogLog RCE | High (7.0) | Snort, YARA, Nginx, Apache | ✅ |
SolarWinds¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-28986 — SolarWinds Deserialization | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-40803 — SolarWinds RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-28987 — SolarWinds WHD Credentials | Critical (9.1) | Snort, YARA, Nginx, Apache | ✅ |
Spring Framework¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-22233 — Spring Framework Web DoS | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-38819 — Spring Framework Path Traversal (2nd Report) | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-38820 — Spring Framework DataBinder Case Sensitive Match Exception | Medium (5.3) | Snort, YARA, Nginx, Apache | ✅ |
Ubuntu¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-48990 — Needrestart LPE | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-48991 — Needrestart Race Condition | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-48992 — Needrestart Ruby LPE | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
undici (npm)¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-24758 — undici Authorization Header Leak | Medium (6.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-30260 — undici CRLF Injection | Medium (6.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-30261 — undici Fetch Cookie Policy Bypass | Medium (5.3) | Snort, YARA, Nginx, Apache | ✅ |
Adobe¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-20289 — ColdFusion RCE | High (8.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-20767 — ColdFusion Path Traversal | High (8.2) | Snort, YARA, Nginx, Apache | ✅ |
AnyDesk¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-12754 — AnyDesk Local Priv Esc | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-52940 — AnyDesk Arbitrary File Read | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
Apache Commons Configuration¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-29131 — Apache Commons Configuration RCE | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-29133 — Apache Commons Configuration Stack Overflow | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
Apache Tomcat¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2025-55752 — Apache Tomcat Directory Traversal RCE | High (8.6) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-24549 — Apache Tomcat HTTP/2 DoS | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
ConnectWise¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-1709 — ConnectWise ScreenConnect Auth Bypass | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-1708 — ConnectWise ScreenConnect Path Traversal | High (8.4) | Snort, YARA, Nginx, Apache | ✅ |
D Link¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-10914 — D-Link NAS Command Injection | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-3273 — D-Link NAS RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
Django¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-42005 — Django SQLi | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-45230 — Django DoS | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
Elasticsearch Kibana¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-37287 — Elasticsearch Kibana Prototype Pollution RCE | Critical (9.9) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2025-25012 — Kibana Prototype Pollution RCE | Critical (9.9) | Snort, YARA, Nginx, Apache | ✅ |
follow-redirects (npm)¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2023-26159 — follow-redirects Hostname Spoofing | High (7.4) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-28849 — follow-redirects SSRF/Credential Leak | Medium (6.5) | Snort, YARA, Nginx, Apache | ✅ |
Go¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-34155 — Go go/parser Stack Exhaustion | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-34156 — Go encoding/gob Stack Exhaustion | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
libxml2¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-25062 — libxml2 Use-After-Free | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-34459 — libxml2 Buffer Over-read | Medium (6.5) | Snort, YARA, Nginx, Apache | ✅ |
LiteSpeed¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-28000 — LiteSpeed Cache RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-44000 — LiteSpeed Cache Cookie Leak | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
Mongoose ODM (MongoDB)¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-53900 — Mongoose ODM RCE via Search Injection | Critical (9.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2025-23061 — Mongoose ODM RCE Patch Bypass | Critical (9.0) | Snort, YARA, Nginx, Apache | ✅ |
Mozilla¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-29943 — Firefox Sandbox Escape | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-9680 — Firefox Use-After-Free | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
MySQL Server¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2023-21912 — MySQL Server Privilege DoS | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2025-21540 — MySQL Server Privilege Escalation | Medium (6.5) | Snort, YARA, Nginx, Apache | ✅ |
Node.js¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-27983 — Node.js HTTP/2 Server Crash | High (8.2) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-27980 — Node.js Command Injection on Windows | High (8.1) | Snort, YARA, Nginx, Apache | ✅ |
OpenSSH¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-6387 — OpenSSH regreSSHion RCE | High (8.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-6409 — OpenSSH Race | High (7.0) | Snort, YARA, Nginx, Apache | ✅ |
PaloAlto¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-5910 — Palo Alto Expedition | Critical (9.3) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-3393 — Palo Alto DNS DoS | High (8.7) | Snort, YARA, Nginx, Apache | ✅ |
RedHat¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-8698 — Keycloak Redirect | Medium (6.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-9341 — Podman Path Traversal | Medium (5.5) | Snort, YARA, Nginx, Apache | ✅ |
Roundcube¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-37383 — Roundcube XSS | Medium (6.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-37384 — Roundcube XSS | Medium (6.1) | Snort, YARA, Nginx, Apache | ✅ |
rsync¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-12084 — rsync Heap Buffer Overflow | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-12085 — rsync Information Leak via Uninitialized Stack | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
Symfony¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-50340 — Symfony PoC XSS | High (8.2) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-50341 — Symfony Open Redirect | Medium (6.1) | Snort, YARA, Nginx, Apache | ✅ |
UI for Apache Kafka¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2023-52251 — Kafka UI Groovy RCE | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-32030 — Kafka UI RCE via JMX | High (8.1) | Snort, YARA, Nginx, Apache | ✅ |
Vercel¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-46982 — Next.js Cache Poisoning | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2025-29927 — Next.js | Critical | Snort, YARA, Nginx, Apache | ✅ |
7 Zip¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2025-0411 — 7-Zip Mark-of-the-Web Bypass | High (7.0) | Snort, YARA, Nginx, Apache | ✅ |
7-Zip¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-11477 — 7-Zip Zstandard Decompression RCE | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
@babel/traverse (npm)¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2023-45133 — Babel Code Execution | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
@grpc/grpc-js (npm)¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-37168 — gRPC-Node Memory Allocation DoS | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
aiohttp¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-23334 — aiohttp Path Traversal | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
aiohttp (Python)¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2023-47627 — AIOHTTP Open Redirect | Medium (6.1) | Snort, YARA, Nginx, Apache | ✅ |
angular-expressions (npm)¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-21490 — angular-expressions Prototype Pollution | High (8.2) | Snort, YARA, Nginx, Apache | ✅ |
AntDesign¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-46983 — Ant Design XSS | High (7.1) | Snort, YARA, Nginx, Apache | ✅ |
ANTEEO¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-44349 — ANTEEO B2B SQLi | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
Apache ActiveMQ¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2023-46604 — Apache ActiveMQ RCE | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
Apache Commons Compress¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-25710 — Apache Commons Compress Infinite Loop | High (8.1) | Snort, YARA, Nginx, Apache | ✅ |
Apache HTTP Server¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2023-25690 — Apache HTTP Server mod_proxy HTTP Request Smuggling | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
Apache HugeGraph Server¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-27348 — Apache HugeGraph Server RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
Apache Kafka¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2023-25194 — Apache Kafka Connect RCE | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
Apache Struts¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2023-50164 — Apache Struts File Upload RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
async (npm)¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-39249 — async ReDoS | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
Atlassian Confluence¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2023-22518 — Atlassian Confluence Improper Authorization | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
Atlassian Confluence Data Center & Server¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2023-22515 — Atlassian Confluence Broken Access Control | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
Axios (npm)¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-39338 — Axios SSRF via Protocol Bypass | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
Barracuda Email Security Gateway¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2023-2868 — Barracuda ESG Command Injection | Critical (9.4) | Snort, YARA, Nginx, Apache | ✅ |
Centreon¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-23119 — Centreon SQL Injection | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
Checkpoint¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-24919 — Checkpoint VPN Info Leak | High (8.6) | Snort, YARA, Nginx, Apache | ✅ |
Cisco ASA, FTD¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2023-20269 — Cisco ASA VPN Brute Force / Unauthorized Access | Critical (9.1) | Snort, YARA, Nginx, Apache | ✅ |
Cisco Expressway Series¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-20252 — Cisco Expressway CSRF | Critical (9.6) | Snort, YARA, Nginx, Apache | ✅ |
Cisco IOS XE¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2023-20273 — Cisco IOS XE Web UI Privilege Escalation | High (7.2) | Snort, YARA, Nginx, Apache | ✅ |
Cisco Smart Software Manager On-Prem¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2026-20160 — Cisco Smart Software Manager On-Prem | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
Cleo¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-50623 — Cleo File Transfer RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
CNCF¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-4323 — Fluent Bit DoS | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
cross-spawn (npm)¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-21538 — cross-spawn ReDoS | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
CrushFTP¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-4040 — CrushFTP VFS Escape | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
cure53¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-45801 — DOMPurify Prototype Pollution | Critical (9.1) | Snort, YARA, Nginx, Apache | ✅ |
Eclipse Jetty¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-22201 — Jetty HTTP/2 HPACK DoS | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
ejs¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-33883 — Ejs Template RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
Elastic¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-37288 — Kibana RCE | Critical (9.9) | Snort, YARA, Nginx, Apache | ✅ |
Ericsson¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-47066 — CodeChecker RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
Exim¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-39929 — Exim RCE | Critical (9.1) | Snort, YARA, Nginx, Apache | ✅ |
Exim MTA¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2023-42115 — Exim AUTH Out-of-Bounds Write | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
Express.js¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-29041 — Express.js Open Redirect | Medium (6.1) | Snort, YARA, Nginx, Apache | ✅ |
F5/NGINX¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2026-27654 — NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_dav_module module… | High (8.2) | Snort, Sigma | ✅ |
Fortinet FortiClientEMS¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2023-48788 — Fortinet FortiClientEMS SQL Injection | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
Gemini MCP Tool¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2026-0755 — gemini-mcp-tool execAsync Command Injection Remote Code Execution Vulnerability. | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
GeoServer¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-36401 — GeoServer RCE via Eval Property | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
GFI¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-52875 — GFI KerioControl RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
Gibbon¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-24725 — Gibbon CMS RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
Git¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-32002 — Git RCE | Critical (9.0) | Snort, YARA, Nginx, Apache | ✅ |
GitBook¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-26331 — GitBook XSS | Medium (6.1) | Snort, YARA, Nginx, Apache | ✅ |
github-kanban-mcp-server¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2026-0756 — github-kanban-mcp-server execAsync Command Injection Remote Code Execution Vulnerability. | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
GitLab¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-50430 — GitLab Pipeline Bypass | High (8.7) | Snort, YARA, Nginx, Apache | ✅ |
GitLab CE/EE¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2023-7028 — GitLab Password Reset Account Takeover | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
GnuTLS¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-0567 — GnuTLS Certificate Verification Bypass | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
Go net/html¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-45338 — Go HTML Package Infinite Loop | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
Golang¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-45337 — x-api SQLi | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
Google Chrome V8 / Node.js¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-1938 — Type Confusion in V8 (Chromium/Node.js) | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
Grafana¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-9264 — Grafana SQLi | Critical (9.9) | Snort, YARA, Nginx, Apache | ✅ |
HashiCorp¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-6257 — HashiCorp Vault LDAP | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
HTTP/2 Protocol (Multiple Implementations)¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2023-44487 — HTTP/2 Rapid Reset Attack | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
Ignite Realtime Openfire¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2023-32315 — Openfire Path Traversal Admin Bypass | High (8.6) | Snort, YARA, Nginx, Apache | ✅ |
Ivanti Endpoint Manager Mobile (EPMM)¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2023-35078 — Ivanti EPMM Authentication Bypass | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
JetBrains¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-27199 — JetBrains TeamCity Path Traversal | High (7.3) | Snort, YARA, Nginx, Apache | ✅ |
JetBrains TeamCity¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-27198 — JetBrains TeamCity Authentication Bypass | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
Jinja2 (Python)¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-22195 — Jinja2 Cross-Site Scripting | Medium (6.1) | Snort, YARA, Nginx, Apache | ✅ |
jose (npm JWT library)¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-28176 — jose JWT Algorithm Confusion | Medium (5.3) | Snort, YARA, Nginx, Apache | ✅ |
Juniper Networks Junos OS¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2023-36845 — Juniper Junos OS PHP External Variable Modification | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
Kubernetes¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-31989 — Argo CD Redis Access | Critical (9.0) | Snort, YARA, Nginx, Apache | ✅ |
Laravel¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-52301 — Laravel Env Manipulation | High (8.7) | Snort, YARA, Nginx, Apache | ✅ |
libexpat¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-28757 — libexpat XML Entity Expansion DoS | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
Linux Kernel¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-36972 — Linux Kernel AF_UNIX Race Condition | High (7.0) | Snort, YARA, Nginx, Apache | ✅ |
LizardByte¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2026-32253 — Sunshine (self-hosted game streaming server) | Critical (9.8) | Snort | ✅ |
Mattermost¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-21744 — Mattermost SQLi | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
micromatch (npm)¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-4067 — micromatch ReDoS | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
Microsoft Outlook¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2023-23397 — Microsoft Outlook Privilege Escalation | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
Microsoft SharePoint Server¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2023-29357 — Microsoft SharePoint Server Privilege Escalation | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
Microsoft Windows¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-49138 — Windows CLFS Driver Privilege Escalation | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
Microsoft Windows/Office¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2023-36884 — Windows Search RCE (Office/Windows) | High (8.3) | Snort, YARA, Nginx, Apache | ✅ |
MLflow¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-27132 — MLflow RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
MongoDB C Driver¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2023-0437 — MongoDB C Driver UTF-8 Validation DoS | Medium (5.3) | Snort, YARA, Nginx, Apache | ✅ |
MySQL Connector/J¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2023-21971 — MySQL Connector/J RCE | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
mysql2 (Node.js package)¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-21508 — MySQL2 Node.js RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
NAKIVO¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-48248 — NAKIVO Backup RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
Navidrome¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-47062 — Navidrome SQLi | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
Netgate¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-46538 — pfSense Stored XSS | Medium (5.4) | Snort, YARA, Nginx, Apache | ✅ |
NextGen Mirth Connect¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2023-44453 — Mirth Connect RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
Nintendo¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-45200 — Mario Kart 8 Deluxe RCE | Critical (9.0) | Snort, YARA, Nginx, Apache | ✅ |
NVIDIA¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-0132 — NVIDIA Container RCE | Critical (9.0) | Snort, YARA, Nginx, Apache | ✅ |
Ollama < 0.17.1¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2026-7482 — Bleeding Llama: Ollama Heap OOB Read Memory Leak | Critical (9.1) | Snort, Nginx | ✅ |
Open Container¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-21626 — runc Container Escape (Leaky Vessels) | High (8.6) | Snort, YARA, Nginx, Apache | ✅ |
OpenWrt¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-54143 — OpenWrt Attended Sysupgrade Command Injection | Critical (9.3) | Snort, YARA, Nginx, Apache | ✅ |
ownCloud¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2023-49103 — ownCloud graphapi Information Disclosure | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
Palo Alto Networks PAN-OS¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-9474 — Palo Alto PAN-OS Privilege Escalation | High (7.2) | Snort, YARA, Nginx, Apache | ✅ |
Palo Alto Networks PAN-OS GlobalProtect¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-3400 — Palo Alto PAN-OS GlobalProtect Command Injection | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
path-to-regexp (npm)¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-45296 — path-to-regexp ReDoS | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
PHP¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-4577 — PHP CGI Argument Injection | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
Portainer¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-45057 — Portainer RCE | Critical (9.9) | Snort, YARA, Nginx, Apache | ✅ |
Progress MOVEit Transfer¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2023-34362 — MOVEit Transfer SQL Injection | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
Progress Telerik Report Server¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-1800 — Progress Telerik Report Server Authentication Bypass | Critical (9.9) | Snort, YARA, Nginx, Apache | ✅ |
Progress WS_FTP Server¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2023-40044 — WS_FTP Server .NET Deserialization RCE | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
ProjectSend¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-11680 — ProjectSend RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
PuTTY¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-31497 — PuTTY ECDSA Key Recovery | Medium (5.9) | Snort, YARA, Nginx, Apache | ✅ |
Pylons¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-42353 — WebOb Open Redirect | Medium (6.1) | Snort, YARA, Nginx, Apache | ✅ |
Python Requests¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-35195 — Requests Cert Verification Disabled on Redirects | Medium (5.6) | Snort, YARA, Nginx, Apache | ✅ |
python-multipart (FastAPI/Starlette)¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-24762 — python-multipart DoS | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
QNAP HBS 3 Hybrid Backup Sync¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-50388 — QNAP HBS 3 Command Injection | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
Qualcomm¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-43047 — Qualcomm DSP UAF | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
Qualys¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-11003 — Qualys agent LPE | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
RabbitMQ¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2023-46118 — RabbitMQ HTTP API DoS | Medium (6.5) | Snort, YARA, Nginx, Apache | ✅ |
RADIUS¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-3596 — RADIUS Protocol Bypass | Critical (9.0) | Snort, YARA, Nginx, Apache | ✅ |
Rejetto¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-23692 — Rejetto HFS RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
Rejetto HTTP File Server (HFS)¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-39943 — Rejetto HFS HTTP File Server RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
Ruby¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-52302 — Omniauth OIDC Bypass | Critical (9.1) | Snort, YARA, Nginx, Apache | ✅ |
Ruijie¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-46327 — Ruijie RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
Sangoma¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2025-57819 — FreePBX Authentication Bypass to RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
ServiceNow¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-8924 — ServiceNow Blind SQL Injection | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
SmartBear¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-11643 — Swagger UI XSS | Medium (6.1) | Snort, YARA, Nginx, Apache | ✅ |
SolarWinds Serv-U¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-28995 — SolarWinds Serv-U Path Traversal | High (8.6) | Snort, YARA, Nginx, Apache | ✅ |
SonicWall¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-40766 — SonicWall SSLVPN Bypass | Critical (9.3) | Snort, YARA, Nginx, Apache | ✅ |
Sparkshop¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-48245 — Sparkshop SQLi | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
SPIP¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-8517 — SPIP RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
Splunk¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-53247 — Splunk RCE via XSLT | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
Spring Security¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-22257 — Spring Security Authorization Bypass | High (8.2) | Snort, YARA, Nginx, Apache | ✅ |
SugarCRM¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-51739 — SugarCRM Auth Bypass | High (8.5) | Snort, YARA, Nginx, Apache | ✅ |
SuiteCRM¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-47655 — SuiteCRM RCE | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
Synology¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-50404 — Synology Photos Path Traversal | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
tar (npm)¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-28863 — tar (npm) Denial of Service | Medium (6.5) | Snort, YARA, Nginx, Apache | ✅ |
Telesquare¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-29269 — Telesquare TLR RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
The Go Authors¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2026-39821 — Go standard library (golang.org/x/net/idna) | Critical (10.0) | Snort | ✅ |
Totolink¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2026-9384 — Totolink A8000RU Router | Critical (9.8) | Snort | ✅ |
TrendMicro¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-50398 — Trend Micro Deep Discovery RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
Typebot¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2026-33712 — Typebot | Critical (10.0) | Snort | ✅ |
util-linux (wall)¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-28085 — util-linux wall Command Injection | High (7.0) | Snort, YARA, Nginx, Apache | ✅ |
Veeam¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-40711 — Veeam Backup RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
Veeam Backup Enterprise Manager¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-29849 — Veeam Backup Enterprise Manager Auth Bypass | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
Vendure¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-48914 — Vendure Path Traversal | Critical (9.1) | Snort, YARA, Nginx, Apache | ✅ |
Veridium¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-50593 — VeridiumAD Auth Bypass | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
Versa¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-39717 — Versa Director RCE | Medium (6.6) | Snort, YARA, Nginx, Apache | ✅ |
Viasat¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-6198 — Viasat Modem RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
VICIdial¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-8503 — VICIdial SQL Injection | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
Vim¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-22667 — Vim Heap Buffer Overflow | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
VMware (Broadcom)¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2025-22224 — vCenter Server, Cloud Foundation | Critical | Snort, YARA, Nginx, Apache | ✅ |
Windows Remote Desktop Licensing Service¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-38077 — Windows Remote Desktop Licensing RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
WordPress POST SMTP Plugin¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2023-6875 — WordPress POST SMTP Authentication Bypass | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
ws (npm WebSocket)¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-37890 — ws WebSocket DoS | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
XZ Utils¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-3094 — XZ Utils Backdoor | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
Zimbra¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-45519 — Zimbra Postjournal RCE | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
Zoho ManageEngine (Multiple Products)¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2022-47966 — Zoho ManageEngine RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
Zyxel¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-11667 — Zyxel Firewall Path Traversal | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
Zyxel Firewalls¶
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2023-28771 — Zyxel Firewall Command Injection | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |