PT-2026-107744

Entity Reference Manager is an advanced administrative module for Drupal that allows site administrators to identify, analyze, and replace entity references across the system. The module does not sufficiently restrict access to all entity management operations. Users who can view content can acce...

PT-2026-107758

The DKAN module enables organizations and individuals to build open data portals in Drupal. The DKAN datastore imports tabular data files into database tables and exposes them for querying with a JSON API. The module does not correctly check access for all of its endpoints, leading to a potential...

MathJax: LaTeX for Drupal - Critical - Cross site scripting - SA-CONTRIB-2026-195

This module integrates the MathJax library into your Drupal site. MathJax is the modern JavaScript-based LaTeX rendering solution for the Internet. The module ships with library configurations that do not escape JavaScript within the TeX it formats. Notice: This release updates CDN URLs where...

Authenticator Login Plus (2FA) - Moderately critical - Improper authentication - SA-CONTRIB-2026-201

This module provides TOTP-based two-factor authentication 2FA for Drupal, with an optional setting to enforce 2FA for all users site-wide. The module may allow a user log in with only a password even when site-wide enforcement of 2FA is turned on...

DKAN - Moderately critical - Access bypass - SA-CONTRIB-2026-208

The DKAN module enables organizations and individuals to build open data portals in Drupal. The DKAN datastore imports tabular data files into database tables and exposes them for querying with a JSON API. The module does not correctly check access for all of its endpoints, leading to a potential...

Country - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-211

The module Country provides a dedicated field type for Drupal core's official country list. The module does not sufficiently escape user input in its autocomplete widget, which can lead to a cross site scripting vulnerability. This vulnerability is mitigated by the fact that it can not occur out ...

Authenticator Login Plus (2FA) - Critical - Improper authentication - SA-CONTRIB-2026-197

This module provides TOTP-based two-factor authentication 2FA for Drupal. The module doesn't enforce the second factor when a user logs in with Drupal core's one-time login link. This vulnerability is mitigated by the fact that an attacker must have access to a valid one-time login link for a...

Entity Reference Manager (Merge entities) - Critical - Access bypass - SA-CONTRIB-2026-194

Entity Reference Manager is an advanced administrative module for Drupal that allows site administrators to identify, analyze, and replace entity references across the system. The module does not sufficiently restrict access to all entity management operations. Users who can view content can acce...

Orphans Media - Critical - Unsupported - SA-CONTRIB-2026-196

The Drupal Security Team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, read the documentation on becoming the maintainer of a project that is unsupported for security...

Xray Audit - Moderately critical - Access bypass - SA-CONTRIB-2026-206

This module enables you to audit a Drupal site by generating reports about its content, entities, display modes and configuration. The module doesn't sufficiently check entity access when rendering an entity through the display-mode example route. This allows an attacker to view unpublished or...

PT-2026-107743

The Drupal Security Team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, read the documentation on becoming the maintainer of a project that is unsupported for security...

PT-2026-107747

This module provides TOTP-based two-factor authentication 2FA for Drupal. The module doesn't enforce the second factor when a user logs in with Drupal core's one-time login link. This vulnerability is mitigated by the fact that an attacker must have access to a valid one-time login link for a...

PT-2026-107770

This module enables you to audit a Drupal site by generating reports about its content, entities, display modes and configuration. The module doesn't sufficiently check entity access when rendering an entity through the display-mode example route. This allows an attacker to view unpublished or...

drupalgeddon2-cli

drupalgeddon2-cli 一个命令行版本的 Drupalgeddon2 CVE-2018-7600 概念验证工具，作为学习练习在完成 Hack The Box Academy Attacking Common Applications 模块时编写。 !WARNING 仅限授权的安全测试和教育用途。 在非您拥有的或未经明确书面许可的系统上运行此工具，在大多数司法管辖区属于违法行为。请参阅 法律与负责任使用。 !NOTE 实现借助 AI 辅助编写。 请参阅 关于作者身份的说明。 背景——我为何构建此工具 Drupal 是 HTB Academy 的 Attacking Common...

cve-2026-9082

CVE-2026-9082 类型 ：SQL 注入 CWE-89 受影响产品 ：Drupal 核心（数据库抽象 API） Drupal 公告 ：SA-CORE-2026-004 发布时间 ：2026 年 5 月 20 日 严重性 ：高度严重（Drupal 20/25 | NVD CVSS 6.5） 这是什么？ CVE-2026-9082 是 Drupal 核心数据库抽象 API 中的一个 SQL 注入 漏洞。Drupal 的数据库层封装了 PDO 并在查询到达数据库之前对所有查询进行净化处理。此漏洞针对 PostgreSQL 后端 绕过了这一净化机制——精心构造的 HTTP...

web-penetration-drupal

Web 渗透测试 — Drupal CVE-2018-7600 类型: 实习项目 | 公司: BB CyberSec | 时间: 2024年11月 – 2025年1月 📋 项目概述 本项目记录了在 BB CyberSec 网络安全实习期间对 Drupal Web 应用进行的完整渗透测试。评估重点是识别并利用影响 Drupal 核心的严重漏洞 CVE-2018-7600 （Drupalgeddon 2），这是一个远程代码执行漏洞。 🎯 目标 对基于 Drupal 的 Web 应用执行结构化安全审计 使用行业标准工具识别漏洞 利用 CVE-2018-7600 展示其影响和严重性...

CVE-2026-9082

CVE-2026-9082 Drupal Core 在 PostgreSQL 上的未授权 SQL 注入，通过 POST /user/login 触发，并通过 PostgreSQL sessionpreloadlibraries 升级为远程代码执行。 与现有针对 JSON:API 的公开漏洞不同，此漏洞利用登录端点 ——始终可用，无需任何模块或已发布内容。 公告： SA-CORE-2026-004 | 风险评分：23/25（极高危） | CISA KEV 受影响版本 仅PostgreSQL 作为后端的 Drupal 站点存在漏洞。 分支| 受影响版本| 修复版本 ---|---|---...

CVE-2018-7600-PoC

SAWPOC — CVE-2018-7600 Un Proof of Concept en Python para CVE-2018-7600 , también conocido como Drupalgeddon2. CVE-2018-7600 es una vulnerabilidad crítica que afecta a ciertas versiones de Drupal 7. En configuraciones vulnerables, un atacante no autenticado podría inyectar entrada maliciosa y...

CVE-2020-13671

CVE-2020-13671 RCE mediante carga de archivos — Drupal Core Software: Drupal Core 8.7.5 Afectadas: 7.x 7.78, 8.x 8.8.11, 8.9.x 8.9.9, 9.0.x 9.0.8 CVSS: 8.8 Alto CWE: CWE-434 — Carga sin restricciones de archivos con tipo peligroso CISA KEV: Sí — Vulnerabilidad conocida explotada Aviso:...

CVE-2020-13671-old

CVE-2020-13671 RCE mediante la subida de archivos — Drupal Core Software: Drupal Core 8.7.5 Afectadas: 7.x 7.78, 8.x 8.8.11, 8.9.x 8.9.9, 9.0.x 9.0.8 CVSS: 8.8 Alta CWE: CWE-434 — Subida sin restricciones de archivos con tipo peligroso CISA KEV: Sí — Vulnerabilidad explotada conocida Aviso:...