Version number
V7-WAF-1.0.43

MD5 number
f37e8a3febe91e695f8368d421b246a3

Update time
2025-10-30

Update attack list

Key new rules:
------------------------------

49825  CVE-2025-4334_WordPress_plugin_Simple_User_Registration_Privilege_Escalation_Vulnerability[2]
---- Category: Vulnerability
---- Description: WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blogging platform
---- developed using the PHP language. This platform supports setting up personal blog websites on PHP and MySQL servers. WordPress
---- plugin is an application plugin. WordPress plugin Simple User Registration 6.3 and earlier versions have a security vulnerability
---- due to insufficient user meta value restrictions, which may result in privilege escalation.

49829  CVE-2025-53364_Parse_Server_Information_Leakage_Vulnerability[2]
---- Category: InformationDisclosure
---- Description: Parse Server is an open-source backend for Parse Platform that can be deployed to any infrastructure that can
---- run Node.js. Parse Server versions before 5.3.0 to 7.5.3 and 8.2.2 have security vulnerabilities due to the GraphQL API not
---- validating session tokens or master keys.

49838  CVE-2025-54782_nest_Command_Injection_Vulnerability[2]
---- Category: Vulnerability
---- Description: Nest is an open-source Node.js framework for building efficient, scalable, and enterprise level server-side
---- applications using TypeScript/JavaScript. Nest 0.2.0 and earlier versions have a command injection vulnerability, which is
---- caused by an insecure JavaScript sandbox in the @ nestjs/devtools integration package, which may result in remote code execution.

Note
[1] Indicates that this change is incorporated into all security products
[2] Indicates that this change is only incorporated into the full series of F5000, T5000, T9000, M9000, F1030 and above F series products
[3] The device memory is greater than 2GB. After loading the IPS rules library file of this version, 6395 predefined rules can be generated in "Intrusion Prevention System"
[4] The device memory is less than or equal to 2GB. After loading the IPS rules library file of this version, 1987 predefined rules can be generated in "Intrusion Prevention System"