Category: Cyber Attack
( 538 Alerts)FILE-MULTIMEDIA RealNetworks RealPlayer mpeg width integer memory underflow attempt
detects attempts to exploit a memory underflow vulnerability in RealNetworks RealPlayer when processing MPEG video files. The rule looks for specific content patterns in the TCP payload that may indicate an attempt to exploit the vulnerability.
FILE-MULTIMEDIA RealNetworks RealPlayer mpeg width integer memory underflow attempt
detects attempts to exploit a memory underflow vulnerability in RealNetworks RealPlayer when processing MPEG video files. The rule looks for specific content patterns in the TCP payload that may indicate an attempt to exploit the vulnerability.
SERVER-OTHER Oracle GoldenGate arbitrary file write attempt
The alert detects attempts to exploit an arbitrary file write vulnerability in Oracle GoldenGate. The rule looks for specific content patterns in the TCP payload that may indicate an attempt to exploit the vulnerability. This rule helps to identify potential exploits targeting the mentioned vulnerability
FILE-MULTIMEDIA RealNetworks RealPlayer mpeg width integer memory underflow attempt
detects attempts to exploit a memory underflow vulnerability in RealNetworks RealPlayer when processing MPEG video files. The rule looks for specific content patterns in the TCP payload that may indicate an attempt to exploit the vulnerability.
FILE-OTHER Multiple Products SGI ZSIZE handling buffer overflow attempt
the message indicates an attempt to exploit a buffer overflow in the SGI ZSIZE handling in multiple products. The rule matches on TCP traffic with specific content in the file data that indicates a potential buffer overflow attempt.
GPL SCAN SolarWinds IP scan attempt
A "GPL scan" is typically performed to ensure that the software being used or distributed complies with the GPL license terms. This scan involves analyzing the source code of the software to identify any GPL-licensed components or dependencies and to verify that the software is being distributed in compliance with the GPL requirements. the alert is triggering a potential malicious scan of the network
SERVER-OTHER Apache Log4j logging remote code execution attempt
the alert detects attempts to exploit the Apache Log4j vulnerability for remote code execution. The rule matches on HTTP requests containing the string ${jndi: in the URI. The rule generates an alert when such traffic is detected flowing towards the server on an established connection. This rule helps to identify potential attempts to exploit the known Apache Log4j vulnerabilities and can aid in mitigating the risks associated with this critical security issue.
SERVER-OTHER Apache Log4j logging remote code execution attempt
the alert detects attempts to exploit the Apache Log4j vulnerability for remote code execution. The rule matches on HTTP requests containing the string ${jndi: in the URI. The rule generates an alert when such traffic is detected flowing towards the server on an established connection. This rule helps to identify potential attempts to exploit the known Apache Log4j vulnerabilities and can aid in mitigating the risks associated with this critical security issue.
SERVER-OTHER Apache Log4j logging remote code execution attempt
the alert detects attempts to exploit the Apache Log4j vulnerability for remote code execution. The rule matches on HTTP requests containing the string ${jndi: in the URI. The rule generates an alert when such traffic is detected flowing towards the server on an established connection. This rule helps to identify potential attempts to exploit the known Apache Log4j vulnerabilities and can aid in mitigating the risks associated with this critical security issue.
SERVER-OTHER Apache Log4j logging remote code execution attempt
the alert detects attempts to exploit the Apache Log4j vulnerability for remote code execution. The rule matches on HTTP requests containing the string ${jndi: in the URI. The rule generates an alert when such traffic is detected flowing towards the server on an established connection. This rule helps to identify potential attempts to exploit the known Apache Log4j vulnerabilities and can aid in mitigating the risks associated with this critical security issue.