New WAF Objects: [total: 3] ================================== Signature: ID: '708596' Name: GeoServer - SQLI Attack: SQL Injection - Blocking Attack Class: SQL Injection Dictionary: Recommended for Blocking for Web Applications Pattern: part="/geoserver/ows", part="service=wfs", part="request=GetFeature", part="CQL_FILTER=jsonArrayContains", rgxp="CQL_FILTER=jsonArrayContains[\s\S]{1,60}[\'\"\`\;][\s\S]{0,60}(select|from|sleep|and|or)" Policy: Recommended Signatures Policy for Web Applications Search In: - url-and-parameters Signature: ID: '708595' Name: SQLI Select to program Attack: SQL Injection - Blocking Attack Class: SQL Injection Dictionary: Recommended for Blocking for Web Applications Pattern: part="copy", part="select", part="to program", rgxp="[\'\"\`\;]\s?copy\s\(?select\s[\s\S]{1,50}to\sprogram" Policy: Recommended Signatures Policy for Web Applications Search In: - parameters - headers Signature: ID: '708594' Name: 'CVE-2026-63077: JetBrains TeamCity Unauthenticated RCE' Attack: Remote Command Execution - Blocking Attack Class: Remote Command Execution Dictionary: Recommended for Blocking for Web Applications Pattern: part="/app/agents/v1/commands/error", rgxp="(connectionInitSqls|HSQLMetadataStorage)" Policy: Recommended Signatures Policy for Web Applications Search In: - url-and-parameters