WAF Rules

Tentative vpatch for cve-2026-109619 : block multipart requests engaging php session.upload_progress.

Tentative vpatch for cve-2026-109618 : block requests crafted to exhaust php memory during input parsing.

Detect access to .git files

Detect abuse of symfony profiler

Detect access to .env files

Ap pricing tables lite - sql injection (cve-2023-0900)

Detects sql injection attempts in asustor adm via album_id parameter in /photo-gallery/api/album/tree_lists/.

Cisco ios xe account creation (cve-2023-20198)

Wordpress easy digital downloads plugin sql injection (cve-2023-23489)

Woocommerce auth bypass (cve-2023-28121)

Mobileiron core remote unauthenticated api access (cve-2023-35078)

Jetbrains teamcity auth bypass (cve-2023-42793)

Learnpress - sql injection (cve-2023-6567)

Detects php object injection in the typo3 ceselector extension via a serialized php object passed in the t3_ceselector_ cookie.

Detects sql injection in drupal json:api filter parameter keys (cve-2026-9082).

Detects authentication bypass in smartertools smartermail via force-reset-password endpoint when issysadmin is true

Detect bots exploiting laravel debug mode

Phpunit rce (cve-2017-9841)

Detects xss attempts in squirrelmail 1.2.6/1.2.7 via unsanitized input in addressbook, options, search, and help modules.

Microsoft exchange - rce (cve-2022-41082)