25-013 (April 1, 2025)

* indicates a new version of an existing rule

Deep Packet Inspection Rules:

DCERPC Services - Client
1012183* - Microsoft Windows LNK File UI Misrepresentation Vulnerability Over SMB (ZDI-25-148)


Redis Server
1012286 - Redis Use After Free Vulnerability (CVE-2024-46981)


Remote Desktop Server Websocket
1012325 - Microsoft Windows Remote Desktop Protocol Remote Code Execution Vulnerability (CVE-2024-49116)


Web Application PHP Based
1012281 - LibreNMS Stored Cross-Site Scripting Vulnerability (CVE-2024-49754)


Web Application Tomcat
1012330 - Apache Tomcat Path Equivalence Vulnerability (CVE-2025-24813)


Web Client Common
1012182* - Microsoft Windows LNK File UI Misrepresentation Vulnerability Over HTTP (ZDI-25-148)


Web Server HTTPS
1012066* - PHP-CGI Argument Injection Vulnerability (CVE-2024-4577)
1012292* - Zabbix SQL Injection Vulnerability (CVE-2024-42327)


Web Server Miscellaneous
1012315 - Zimbra Collaboration SQL Injection Vulnerability (CVE-2025-25064)


Integrity Monitoring Rules:

There are no new or updated Integrity Monitoring Rules in this Security Update.


Log Inspection Rules:

There are no new or updated Log Inspection Rules in this Security Update.