25-010 (March 11, 2025)

* indicates a new version of an existing rule

Deep Packet Inspection Rules:

CyberPanel
1012300 - CyberPanel Command Injection Vulnerability (CVE-2024-51378)


HPE Insight Remote Support
1012304 - HPE Insight Remote Support Directory Traversal Vulnerability (CVE-2024-53676)


OpenSSL
1012310 - OpenSSL Denial of Service Vulnerability (CVE-2024-6119) - Server


OpenSSL Client
1012311 - OpenSSL Denial of Service Vulnerability (CVE-2024-6119) - Client


Web Application Common
1012290 - Pandora FMS Command Injection Vulnerability (CVE-2024-11320)


Web Application PHP Based
1012279 - WordPress 'WP Time Capsule' Plugin Arbitrary File Upload Vulnerability (CVE-2024-8856)


Web Proxy Squid
1012273* - Squid Proxy Denial Of Service Vulnerability (CVE-2024-45802)


Web Server Apache
1012305 - Chamilo Command Injection Vulnerabilities (CVE-2023-34960 and CVE-2023-3368)


Integrity Monitoring Rules:

There are no new or updated Integrity Monitoring Rules in this Security Update.


Log Inspection Rules:

There are no new or updated Log Inspection Rules in this Security Update.