cscli collections install crowdsecurity/http-cveA collection to detect exploitation of some specific http CVEs.
Works with apache2, nginx, traefik etc.
⚠️ While this collection is frequently updated with trending CVEs, it is not a WAF and does not aims at replacing a WAF. As such, an attacker might be able to bypass those signatures.