Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

2 detections

Detects suspicious batch requests to the WordPress REST API (/wp-json/batch/v1) containing both a DELETE operation on category ID 0 and a POST operation to the core block-renderer, which is characteristic of attempts to exploit vulnerabilities like CVE-2024-27956 to achieve unauthenticated remote code execution.
avatar
Emiliano Mema@Nosalva
avatar
Detections.ai Community
3 months ago
105
Detects suspicious batch requests to the WordPress REST API (/wp-json/batch/v1) containing both a DELETE operation on category ID 0 and a POST operation to the core block-renderer, which is characteristic of attempts to exploit vulnerabilities like CVE-2024-27956 to achieve unauthenticated remote code execution.
avatar
Emiliano Mema@Nosalva
avatar
Detections.ai Community
3 months ago
004