Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

6 detections

Detects path traversal exploitation attempts targeting Dell Wyse Management Suite (WMS) processes or Java components, specifically looking for attempts to access sensitive system files such as SAM, NTDS.dit, or registry hive files via directory traversal sequences.
avatar
Ankit Mehta@Secvyn
Bharat Cyber Guardians
4 months ago
006
This rule detects attempts to exploit a path traversal vulnerability (CVE-2026-49506) in the Dell Wyse Management Suite API. The rule inspects HTTP requests for directory traversal sequences such as '..' or URL-encoded equivalents, which could allow an unauthorized attacker to access files or directories outside the intended scope on the web server.
avatar
Ankit Mehta@Secvyn
Bharat Cyber Guardians
4 months ago
001
Detects the transmission of a Windows executable binary file in an HTTP response stream, which may indicate an attempt to exploit vulnerabilities in Dell Wyse Management Suite (CVE-2026-41120 or CVE-2026-49506) by delivering malicious payloads.
avatar
Ankit Mehta@Secvyn
Bharat Cyber Guardians
4 months ago
000
This rule detects attempts to exploit a path traversal vulnerability (CVE-2026-49506) in the Dell Wyse Management Suite API. The rule inspects HTTP requests for directory traversal sequences such as '..' or URL-encoded equivalents, which could allow an unauthorized attacker to access files or directories outside the intended scope on the web server.
avatar
Ankit Mehta@Secvyn
avatar
Detections.ai Community
4 months ago
000
Detects the transmission of a Windows executable binary file in an HTTP response stream, which may indicate an attempt to exploit vulnerabilities in Dell Wyse Management Suite (CVE-2026-41120 or CVE-2026-49506) by delivering malicious payloads.
avatar
Ankit Mehta@Secvyn
avatar
Detections.ai Community
4 months ago
000
Detects path traversal exploitation attempts targeting Dell Wyse Management Suite (WMS) processes or Java components, specifically looking for attempts to access sensitive system files such as SAM, NTDS.dit, or registry hive files via directory traversal sequences.
avatar
Ankit Mehta@Secvyn
avatar
Detections.ai Community
4 months ago
000