New Filters: 46095: HTTP: Apache OFBiz Referer Stored Cross-Site Scripting Vulnerability - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: 5.2.2 and after. - Category: Vulnerabilities - Severity: Critical - Description: This filter detects an attempt to exploit a stored cross-site scripting vulnerability in Apache OFBiz. - Deployments: - Deployment: Security-Optimized (Block / Notify) - References: - Common Vulnerabilities and Exposures: CVE-2025-30676 CVSS 5.3 - Classification: Vulnerability - Input Validation (Command injection, XSS, SQL injection, etc) - Protocol: HTTP - Platform: Multi-Platform Server Application or Service - Release Date: July 01, 2025 46096: HTTP: WordPress Kubio AI Page Builder Plugin template Local File Inclusion Vulnerability - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: 5.2.2 and after. - Category: Vulnerabilities - Severity: Critical - Description: This filter detects an attempt to exploit a local file inclusion vulnerability in the WordPress Kubio AI Page Builder plugin. - Deployments: - Deployment: Security-Optimized (Block / Notify) - References: - Common Vulnerabilities and Exposures: CVE-2025-2294 CVSS 8.8 - Classification: Vulnerability - Input Validation (Command injection, XSS, SQL injection, etc) - Protocol: HTTP - Platform: Multi-Platform Server Application or Service - Release Date: July 01, 2025 46098: ZDI-CAN-24915: Zero Day Initiative Vulnerability (Marvell QConvergeConsole) - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: Not available. - Requires: IPS N-Platform, NX-Platform, or TPS models. - Category: Vulnerabilities - Severity: Critical - Description: This filter protects against the exploitation of a zero-day vulnerability affecting Marvell QConvergeConsole. - Deployments: - Deployment: Security-Optimized (Block / Notify / Trace) - Classification: Vulnerability - Other - Protocol: Other Protocol - Platform: Other Server Application or Service - Release Date: July 01, 2025 46099: ZDI-CAN-26864: Zero Day Initiative Vulnerability (Ivanti Endpoint Manager) - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: Not available. - Requires: IPS N-Platform, NX-Platform, or TPS models. - Category: Vulnerabilities - Severity: Critical - Description: This filter provides protection against exploitation of a zero-day vulnerability affecting Ivanti Endpoint Manager. - Deployments: - Deployment: Security-Optimized (Block / Notify / Trace) - Classification: Vulnerability - Other - Protocol: Other Protocol - Platform: Other Server Application or Service - Release Date: July 01, 2025 46100: ZDI-CAN-27260: Zero Day Initiative Vulnerability (PDFSam Enhanced) - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: Not available. - Requires: IPS N-Platform, NX-Platform, or TPS models. - Category: Vulnerabilities - Severity: Critical - Description: This filter provides protection against exploitation of a zero-day vulnerability affecting PDFSam Enhanced. - Deployments: - Deployment: Security-Optimized (Block / Notify / Trace) - Classification: Vulnerability - Other - Protocol: Other Protocol - Platform: Other Server Application or Service - Release Date: July 01, 2025 46101: HTTP: Fortinet Multiple Products cookieval_unwrap Stack Buffer Overflow - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: 5.2.2 and after. - Category: Vulnerabilities - Severity: Critical - Description: This filter detects an attempt to exploit a buffer overflow vulnerability in multiple Fortinet products. - Deployments: - Deployment: Default (Block / Notify) - Deployment: Evaluation (Permit / Notify) - References: - Common Vulnerabilities and Exposures: CVE-2025-32756 CVSS 9.1 - Classification: Vulnerability - Buffer/Heap Overflow - Protocol: HTTP - Platform: Multi-Platform Server Application or Service - Release Date: July 01, 2025 46103: HTTP: NI G Web Development GWEBPROJECT Insecure Deserialization Vulnerability (ZDI-25-128) - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: 5.2.2 and after. - Category: Vulnerabilities - Severity: Critical - Description: This filter detects an attempt to exploit a insecure deserialization vulnerability in NI G Web Development. - Deployments: - Deployment: Security-Optimized (Block / Notify) - References: - Common Vulnerabilities and Exposures: CVE-2024-12742 CVSS 7.8 - Zero Day Initiative: ZDI-25-128 - Classification: Vulnerability - Other - Protocol: HTTP - Platform: Multi-Platform Server Application or Service - Release Date: July 01, 2025 46104: HTTP: MotionEye Command Injection Vulnerability - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: 5.2.2 and after. - Category: Vulnerabilities - Severity: Critical - Description: This filter detects an attempt to exploit a command injection vulnerability in MotionEye. - Deployments: - Deployment: Default (Block / Notify) - Deployment: Evaluation (Permit / Notify) - References: - Common Vulnerabilities and Exposures: CVE-2025-47782 - Classification: Vulnerability - Input Validation (Command injection, XSS, SQL injection, etc) - Protocol: HTTP - Platform: Networked Hardware Device Application or Service - Release Date: July 01, 2025 46106: ZDI-CAN-26616: Zero Day Initiative Vulnerability (Apple Safari) - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: Not available. - Requires: IPS N-Platform, NX-Platform, or TPS models. - Category: Vulnerabilities - Severity: Critical - Description: This filter provides protection against exploitation of a zero-day vulnerability affecting Apple Safari. - Deployments: - Deployment: Default (Block / Notify / Trace) - Deployment: Evaluation (Permit / Notify / Trace) - Classification: Vulnerability - Other - Protocol: Other Protocol - Platform: Other Server Application or Service - Release Date: July 01, 2025 46107: ZDI-CAN-27181: Zero Day Initiative Vulnerability (NVIDIA Triton) - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: Not available. - Requires: IPS N-Platform, NX-Platform, or TPS models. - Category: Vulnerabilities - Severity: Critical - Description: This filter protects against the exploitation of a zero-day vulnerability affecting NVIDIA Triton. - Deployments: - Deployment: Default (Block / Notify / Trace) - Deployment: Evaluation (Permit / Notify / Trace) - Classification: Vulnerability - Other - Protocol: Other Protocol - Platform: Other Server Application or Service - Release Date: July 01, 2025 46113: SMB: Linux Kernel ksmbd Session Setup Reauthentication Use-After-Free Vulnerability - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: 5.2.2 and after. - Category: Vulnerabilities - Severity: Critical - Description: This filter detects an attempt to exploit a use-after-free vulnerability in the Linux kernel KSMBD. - Deployment: Not enabled by default in any deployment. - References: - Common Vulnerabilities and Exposures: CVE-2025-37778 - Classification: Vulnerability - Other - Protocol: SMB - Platform: UNIX/Linux Server Application or Service - Release Date: July 01, 2025 46114: HTTP: Suspicious Content-Disposition Headers Value - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: 5.2.2 and after. - Category: Security Policy - Severity: Moderate - Description: This filter detects multiple Content-Disposition headers with conflicting values in an HTTP request. - Deployment: Not enabled by default in any deployment. - References: - Common Vulnerabilities and Exposures: CVE-2025-32911 - Classification: Security Policy - Other - Protocol: HTTP - Platform: Multi-Platform Server Application or Service - Release Date: July 01, 2025 46115: ZDI-CAN-26861: Zero Day Initiative Vulnerability (Ivanti Endpoint Manager) - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: Not available. - Requires: IPS N-Platform, NX-Platform, or TPS models. - Category: Vulnerabilities - Severity: Critical - Description: This filter provides protection against exploitation of a zero-day vulnerability affecting Ivanti Endpoint Manager. - Deployments: - Deployment: Default (Block / Notify / Trace) - Deployment: Evaluation (Permit / Notify / Trace) - Classification: Vulnerability - Other - Protocol: Other Protocol - Platform: Other Server Application or Service - Release Date: July 01, 2025 46117: ZDI-CAN-27121: Zero Day Initiative Vulnerability (Cisco Identity Services Engine) - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: Not available. - Requires: IPS N-Platform, NX-Platform, or TPS models. - Category: Vulnerabilities - Severity: Critical - Description: This filter provides protection against exploitation of a zero-day vulnerability affecting Cisco Identity Services Engine. - Deployments: - Deployment: Default (Block / Notify / Trace) - Deployment: Evaluation (Permit / Notify / Trace) - Classification: Vulnerability - Other - Protocol: Other Protocol - Platform: Other Server Application or Service - Release Date: July 01, 2025 Modified Filters (logic changes): * = Enabled in Default deployments 12090: HTTP: Apache Struts 2 CookieInterceptor OGNL Script Injection - IPS Version: 3.1.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Description updated. - Detection logic updated. - Vulnerability references updated. - Release Date: February 14, 2012 - Last Modified Date: July 01, 2025 12311: HTTP: Microsoft Excel ObjectLink Memory Corruption Vulnerability - IPS Version: 3.2.2 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Description updated. - Detection logic updated. - Release Date: May 08, 2012 - Last Modified Date: July 01, 2025 12701: HTTP: Apple QuickTime PICT File Processing Memory Corruption Vulnerability - IPS Version: 3.2.2 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Description updated. - Detection logic updated. - Release Date: January 15, 2013 - Last Modified Date: July 01, 2025 12906: HTTP: Microsoft Office Works File Converter Heap Overflow - IPS Version: 3.2.2 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Description updated. - Detection logic updated. - Vulnerability references updated. - Release Date: May 14, 2013 - Last Modified Date: July 01, 2025 13525: HTTP: Microsoft Internet Explorer SVG Use-After-Free Vulnerability - IPS Version: 3.1.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Detection logic updated. - Release Date: February 11, 2014 - Last Modified Date: July 01, 2025 13546: HTTP: Microsoft Internet Explorer Uninitialized Object Use-After-Free Vulnerability - IPS Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Detection logic updated. - Release Date: February 11, 2014 - Last Modified Date: July 01, 2025 16226: HTTP: Dell ScriptLogic Asset Manager GetProcessedPackage SQL Injection Vulnerability (ZDI-15-049) - IPS Version: 3.1.3 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Description updated. - Detection logic updated. - Vulnerability references updated. - Release Date: June 03, 2014 - Last Modified Date: July 01, 2025 17004: HTTP: NetBSD tnftp Command Execution Vulnerability - IPS Version: 3.2.2 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Description updated. - Detection logic updated. - Release Date: November 18, 2014 - Last Modified Date: July 01, 2025 * 19862: LDAP: OpenLDAP slapd Deref Overlay Null Pointer Dereference Vulnerability - IPS Version: 3.1.3 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Detection logic updated. - Vulnerability references updated. - Release Date: May 26, 2015 - Last Modified Date: July 01, 2025 20022: HTTP: cURL and libcurl Cookie Path Parsing Remote Code Execution Vulnerability - IPS Version: 3.1.3 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Description updated. - Detection logic updated. - Vulnerability references updated. - Release Date: July 07, 2015 - Last Modified Date: July 01, 2025 20120: HTTP: Panasonic Security API SDK MulticastAddr Usage (ZDI-15-261) - IPS Version: 3.1.3 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Description updated. - Detection logic updated. - Vulnerability references updated. - Release Date: July 28, 2015 - Last Modified Date: July 01, 2025 20316: HTTP: Microsoft Internet Explorer Error Object Use-After-Free Vulnerability - IPS Version: 3.1.3 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Description updated. - Detection logic updated. - Vulnerability references updated. - Release Date: August 11, 2015 - Last Modified Date: July 01, 2025 21200: HTTP: Microsoft Internet Explorer onMouseMove Use-After-Free Vulnerability - IPS Version: 3.1.3 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Detection logic updated. - Release Date: October 13, 2015 - Last Modified Date: July 01, 2025 * 44487: HTTP: Ivanti Endpoint Manager Report_RunPatch SQL Injection Vulnerability (ZDI-24-1502) - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: 5.2.2 and after. - Detection logic updated. - Release Date: July 09, 2024 - Last Modified Date: July 01, 2025 * 45784: SSH: Ericsson Erlang OTP SSH Server Authentication Bypass Vulnerability - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: 5.2.2 and after. - Detection logic updated. - Deployments updated and are now: - Deployment: Default (Block / Notify) - Deployment: Evaluation (Permit / Notify) - Release Date: April 29, 2025 - Last Modified Date: July 01, 2025 * 45811: HTTP: XWiki.org XWiki Query SQL Injection Vulnerability - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: 5.2.2 and after. - Detection logic updated. - Vulnerability references updated. - Deployments updated and are now: - Deployment: Default (Block / Notify) - Release Date: May 06, 2025 - Last Modified Date: July 01, 2025 Modified Filters (metadata changes only): * = Enabled in Default deployments * 46070: HTTP: TBK DVR Command Injection Vulnerability - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: 5.2.2 and after. - Description updated. - Release Date: June 24, 2025 - Last Modified Date: July 01, 2025 Removed Filters: 2564: IM: ICQ/AOL Messenger Login Response - IPS Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Release Date: December 31, 2005 - Last Modified Date: May 07, 2013 2573: IM: ICQ File Transfer/Sharing - IPS Version: 3.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Release Date: December 31, 2005 - Last Modified Date: April 03, 2007 2728: ICQ: ISS Protocol Analysis Module Overflow (Witty Worm) - IPS Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Release Date: December 31, 2005 - Last Modified Date: December 03, 2024 2729: ICQ: ISS Protocol Analysis Module Overflow (General) - IPS Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Release Date: December 31, 2005 - Last Modified Date: November 08, 2016 2949: IM: ICQ/AOL Messenger Login Response - IPS Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Release Date: December 31, 2005 - Last Modified Date: May 07, 2013 3171: HTTP: Skype callto: URL Buffer Overflow - IPS Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Release Date: December 31, 2005 - Last Modified Date: December 03, 2024 3172: POP/IMAP: Skype callto: URL Buffer Overflow - IPS Version: 3.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Release Date: December 31, 2005 - Last Modified Date: March 29, 2016 3173: SMTP: Skype callto: URL Buffer Overflow - IPS Version: 3.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Release Date: December 31, 2005 3280: P2P: Skype Program Download - IPS Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Release Date: December 31, 2005 - Last Modified Date: October 20, 2008 3281: P2P: Skype Installed/Update Request - IPS Version: 3.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Release Date: December 31, 2005 3579: HTTPS: ICQ Messenger Connection Attempt - IPS Version: 3.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Release Date: December 31, 2005 - Last Modified Date: October 13, 2015 3606: IM: ICQ2Go! Web Messenger Login Response - IPS Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Release Date: December 31, 2005 - Last Modified Date: May 07, 2013 3610: IM: ICQ2Go! Java Web Messenger Login Request - IPS Version: 3.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Release Date: December 31, 2005 4725: HTTP: AOL ICQ ActiveX Control Code Execution (ZDI-06-037) - IPS Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Release Date: October 31, 2006 - Last Modified Date: September 09, 2014 5752: HTTP: Skype skype4com Heap Corruption (ZDI-07-070) - IPS Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Release Date: December 14, 2007 - Last Modified Date: December 06, 2016 6503: P2P: Skype Program Download - IPS Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Release Date: October 20, 2008 6519: P2P: Skype Initial Login Request - IPS Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Release Date: November 14, 2008 - Last Modified Date: September 17, 2009 8328: HTTP: Skype Protocol Handler datapath Argument Injection Vulnerability (ZDI-10-027) - IPS Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Release Date: March 16, 2010 - Last Modified Date: December 13, 2016 8329: HTTP: Skype URI Processing Arbitrary XML File Deletion Vulnerability (ZDI-10-028) - IPS Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Release Date: March 16, 2010 - Last Modified Date: December 13, 2016 8497: ICQ: ISS Protocol Analysis Module ICQv5 Parsing Buffer Overflow - IPS Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Release Date: September 25, 2009 - Last Modified Date: May 12, 2015 8947: HTTP: Skype skype4com URI Handler Remote Heap Corruption (ZDI-07-070) - IPS Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Release Date: November 02, 2009 - Last Modified Date: December 03, 2024 9079: AIM: Gaim AIM-ICQ Protocol Handling Buffer Overflow - IPS Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Release Date: November 02, 2009 - Last Modified Date: September 30, 2014 16558: UDP: Skype Login Attempt (Non-Proxied) - IPS Version: 3.1.3 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Release Date: January 13, 2015 - Last Modified Date: April 10, 2018 16648: SOCKS: Skype Login Attempt (SOCKS5) - IPS Version: 3.1.3 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Release Date: January 13, 2015 - Last Modified Date: March 29, 2016 16727: HTTPS: Skype Login Attempt (HTTPS Proxy) - IPS Version: 3.1.3 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Release Date: January 13, 2015 - Last Modified Date: March 29, 2016 16934: HTTPS: Skype Login Attempt (SSL/TLS) - IPS Version: 3.1.3 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Release Date: January 13, 2015 - Last Modified Date: March 29, 2016 16976: TCP: Skype Login Attempt (Non-Proxied) - IPS Version: 3.1.3 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Release Date: January 06, 2015 - Last Modified Date: March 29, 2016 20932: HTTPS: Skype for Web Site Access - IPS Version: 3.1.3 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Release Date: October 13, 2015 - Last Modified Date: October 20, 2015 42031: HTTP: Microsoft Skype Cross-Site Scripting Vulnerability (ZDI-23-1769) - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: 5.2.2 and after. - Release Date: December 20, 2022 - Last Modified Date: December 26, 2023 43674: HTTP: Microsoft Skype Protection Mechanism Failure Vulnerability (ZDI-24-293) - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: 5.2.2 and after. - Release Date: January 23, 2024 - Last Modified Date: April 02, 2024 |