Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

3 detections

This rule detects security alerts (IDS, WAF, or infrastructure logs) indicating exploitation attempts against JFrog Artifactory instances related to CVE-2026-66384, specifically involving cache poisoning techniques observed in recent threat campaigns.
avatar
Ankit Mehta@Secvyn
avatar
SlimKQL
2 months ago
206
This rule detects security alerts (IDS, WAF, or infrastructure logs) indicating exploitation attempts against JFrog Artifactory instances related to CVE-2026-66384, specifically involving cache poisoning techniques observed in recent threat campaigns.
avatar
Ankit Mehta@Secvyn
avatar
Detections.ai Community
2 months ago
003
Detects incoming HTTP requests to an Artifactory deployment that utilize 'X-Forwarded-Host' and 'X-Forwarded-Scheme' headers in a manner consistent with HTTP cache poisoning attacks (CVE-2026-66384), specifically identifying when the 'X-Forwarded-Host' header contains unexpected or non-internal network values.
avatar
Ankit Mehta@Secvyn
avatar
Detections.ai Community
1 month ago
001