IPS Signature Database Update
| Name | ips.sig | |||
| Version | 3.0.326, 3.1.326 | |||
| StoneOS | Firewall 5.5R8P2 or above, and NIPS/IDS 5.5R5-3.5 or above, and BDS 5.5R8-3.3 or above | |||
| Release Date | 2026-09-21 | |||
| XSS/SQL Injection Attack Engine Version | 1.260904 | |||
| XSS/SQL Injection Attack Engine Change Description | Refine signature matching patterns, eliminate inefficient regex backtracking, improve rule matching performance | |||
| New Signature (106) |
Rule ID | Rule Name | StoneOS | Detail |
| 346188 | D-Link DAR-7000 Sysmanage Licence Unrestricted File Upload Vulnerability (CVE-2023-5145) | 5.5R5 or above | click for more information | |
| 346115 | Parisneo Lollms-webui Path Traversal Code Execution Vulnerability (CVE-2024-4320) | 5.5R5 or above | click for more information | |
| 346177 | Alkacon OpenCms CMIS Query XML External Entity Vulnerability (CVE-2023-42344) | 5.0R4 or above | click for more information | |
| 346132 | Tongda OA delete.php SQL Injection Vulnerability (CVE-2023-5023) | 5.5R5 or above | click for more information | |
| 346194 | Laravel Pulse Arbitrary Code Execution Vulnerability (CVE-2024-55661) | 5.0R4 or above | click for more information | |
| 346149 | Libituo LBT-T300-T400 3G APN Stack Overflow Vulnerability (CVE-2024-40535) | 5.5R5 or above | click for more information | |
| 717295 | Rocket Software UniData udadmin Stack Buffer Overflow Remote Code Execution Vulnerability (CVE-2023-28502) | 5.5R5 or above | click for more information | |
| 346166 | ELEX WooCommerce Bulk Edit Blind SQL Injection Vulnerability (CVE-2025-22352) | 5.5R5 or above | click for more information | |
| 346125 | Google Chrome Trubofan Type Confusion Vulnerability (CVE-2023-4352) | 5.0R4 or above | click for more information | |
| 346187 | ASUS RT-N10LX Firewall URL Filter Stored XSS Vulnerability (CVE-2023-34941) | 5.5R5 or above | click for more information | |
| 346142 | Ruijie RG-UAC Command Injection Vulnerability (CVE-2024-4814) | 5.5R5 or above | click for more information | |
| 346204 | Joomla! CMS Cross-Site Scripting Vulnerability (CVE-2024-21726) | 5.5R5 or above | click for more information | |
| 346131 | WWBN AVideo Information Disclosure Vulnerability (CVE-2023-49738) | 5.0R4 or above | click for more information | |
| 346193 | mySCADA myPRO Command Injection Vulnerability (CVE-2023-28384) | 5.5R5 or above | click for more information | |
| 346159 | Zyxel NAS326 NAS542 OS Command Injection Vulnerability (CVE-2023-4474) | 5.5R5 or above | click for more information | |
| 346144 | FlowiseAI Flowise OpenAI Assistants File Path Traversal Vulnerability (CVE-2024-36420) | 5.5R5 or above | click for more information | |
| 346165 | FlowiseAI Flowise CORS Misconfiguration Vulnerability (CVE-2024-36421) | 5.0R4 or above | click for more information | |
| 346120 | Sielco Analog FM Transmitter Privilege Escalation Vulnerability (CVE-2023-41966) | 5.5R8 or above | click for more information | |
| 346182 | mcp-remote OAuth Authorization Endpoint OS Command Injection Vulnerability (CVE-2025-6514) | 5.5R8 or above | click for more information | |
| 346141 | VMware vRealize Log Insight Directory Traversal Vulnerabilities Vulnerability (CVE-2022-31706) | 5.0R4 or above | click for more information | |
| ...... | ||||
| Updated Signature (6) |
Rule ID | Rule Name | StoneOS | Detail |
| 335456 | WordPress Loginizer SQL Injection Vulnerability (CVE-2017-12650) | 5.5R10 or above | Click here for more information | |
| 712749 | Apache Struts 2 Commons FileUpload Insecure Deserialization Vulnerability -1 (CVE-2016-1000031) | 5.5R5 or above | Click here for more information | |
| 311371 | Microsoft Internet Explorer Remote Memory Corruption Vulnerability (CVE-2014-4133) | 5.0R4 or above | Click here for more information | |
| 338229 | Microsoft Windows MSHTML Platform Buffer Overflow Vulnerability (CVE-2024-30040) | 5.5R5 or above | Click here for more information | |
| 312563 | Microsoft Internet Explorer Remote Memory Corruption Vulnerability (CVE-2015-6160) | 5.0R4 or above | Click here for more information | |
| 333949 | Oracle Java Arbitrary File Deletion Vulnerability (CVE-2019-2449) | 5.5R5 or above | Click here for more information | |