13 matches found
CVE-2025-29927-Sigma-Rule
CVE-2025-29927 Report Overview CVE-2025-29927 is a security vulnerability in Next.js middleware, allowing attackers to bypass authentication by modifying specific HTTP headers. Exploitation Attackers can send a request with the header x-middleware-subrequest: middleware to bypass authentication...
WELA
WELA Windows Event Log Analyzer ゑ羅 A tool for auditing Windows event log settings. Created by Yamato Security — make sure you are actually recording the events that matter for DFIR. 📖 Read the Documentation → Available in 15 languages — English · 日本語 · 繁體中文 · 한국어 · Deutsch · Türkçe · Français ·...
Sigma-Rule-for-CVE-2021-22005-scanning-activity
This repository does not have a README...
My-Sigma-Rule-Collection
Collection of Sigma Rules That I Created From Research I found interesting Overview This repository contains a collection of custom Sigma rules I've created/found based on vulnerabilities, threat reports, and techniques I found interesting. Each rule includes references, detection logic, and...
MiniPlasma-Detection
MiniPlasma Detection CVE-2020-17103 Sigma detection rule for MiniPlasma, a Windows local privilege escalation exploit abusing a race condition in cldflt.sys to hijack the windir environment variable for the SYSTEM account, redirecting the WER QueueReporting scheduled task to execute an attacker...
Sigma-Rule-for-CVE-2022-30190
This repository does not have a README...
CVE-2023-24488-SIEM-Sigma-Rule
Regla Sigma: Detección de XSS Pre-Auth CVE-2023-24488 Detecte Citrix Gateway Pre-Auth XSS CVE-2023-24488 los intentos de explotación de la vulnerabilidad. Esta regla Sigma busca patrones de ataque XSS en el parámetro de consulta postlogoutredirecturi. Descripción de la Regla La regla Sigma...
Sigma-Rule-for-CVE-2021-40438-exploitation-attempt
This repository does not have a README...
Sigma-Rule-for-CVE-2021-41773-and-CVE-2021-42013-exploitation-attempt
This repository does not have a README...
Multi-Stage-Exploitation-and-Detection-Engineering-Analysis-of-CVE-2023-34362-in-MOVEit-Transfer
CVE-2023-34362 MOVEit Transfer Vulnerability Analysis Project Overview This repository contains an academic technical analysis of CVE-2023-34362, a critical SQL injection vulnerability affecting MOVEit Transfer. The project was prepared for CYB625 – Ethical Hacking & Penetration Testing. Importan...
Exploit for SQL Injection in Progress Moveit_Cloud
CVE-2023-34362 MOVEit Transfer Vulnerability Analysis Proj...