Progress CVEs — PoCs and detection rules¶
11 Progress vulnerabilities with detection-only proof-of-concept code and Docker labs; 11 ship ready-to-deploy detection and prevention rules (Snort, YARA, Nginx, Apache). For authorized testing and blue-team detection engineering.
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-1212 — Progress LoadMaster RCE | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-2389 — Progress Flowmon RCE | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-4358 — Progress Telerik RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-4885 — WhatsUp Gold Path Traversal | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-5009 — Progress WhatsUp SQLi | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-6327 — Progress Telerik RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-6670 — WhatsUp Gold SQLi | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-6671 — WhatsUp Gold SQLi | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-5805 — MOVEit Auth Bypass | Critical (9.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-5806 — MOVEit SFTP Bypass | Critical (9.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-5178 — Progress Telerik Bypass | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |