Drupal-Exploit-Lab

Drupal-Exploit-Lab Dimostrazione sullo sfruttamento di Drupal 7.57 CVE-2018-7600 con e senza WAF Web Application Firewall Descrizione Il progetto mostra come appare lo sfruttamento di Drupal 7.57 in due diversi scenari: 1. Server non protetto → sfruttamento riuscito con Metasploit e ottenimento d...

CVE-2017-6929

A jQuery cross site scripting vulnerability is present when making Ajax requests to untrusted domains. This vulnerability is mitigated by the fact that it requires contributed or custom modules in order to exploit. For Drupal 8, this vulnerability was already fixed in Drupal 8.4.0 in the Drupal...