329 matches found
Audit-BlackBox-Web-to-Root
Pentest Lab: Web and System Exploitation Chain Drupal to Root Disclaimer This project was carried out in a controlled and isolated laboratory environment for educational and academic purposes. No real infrastructure was targeted. The goal is to learn how to secure systems by understanding attack...
CVE-2018-7602
CVE-2018-7602 A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. This vulnerability is related to Drupal core - High...
Drupalgeddon-Python3
Drupalgeddon Python3 Edition An rewritten POC on the CVE-2014-3704, done as part of my CPTS training on HackTheBox. https://nvd.nist.gov/vuln/detail/CVE-2014-3704 CVE-2014-3704 known as Drupalgeddon, affects versions 7.0 up to 7.31 and was fixed in version 7.32. This was a pre-authenticated SQL...
CVE-2018-7600
POC of CVE-2018-7600 Drupal RCE CVE-2018-7600 Dont Forget to Put Your Adress into the Script ! Description: A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which...
CVE-2026-1556: Exposure of Sensitive Information to an Unauthorized Actor
Information disclosure in the file URI processing of File Field Paths in Drupal File Field Paths 7.x prior to 7.1.3 on Drupal 7.x allows authenticated users to disclose other users’ private files via filename‑collision uploads. This can cause hooknodeinsert consumers for example, email attachment...
CVE-2026-0750: Improper Verification of Cryptographic Signature
Improper Verification of Cryptographic Signature vulnerability in Drupal Drupal Commerce Paybox Commerce Paybox on Drupal 7.X allows Authentication Bypass.This issue affects Drupal Commerce Paybox: from 7-x-1.0 through 7.X-1.5...
CVE-2025-12848: Improper Neutralization of Input During Web Page Generation
Webform Multiple File Upload module for Drupal 7.x contains a cross-site scripting XSS vulnerability in the file name renderer. An unauthenticated attacker can exploit this vulnerability by uploading a file with a malicious filename containing JavaScript code e.g., " " to a Webform node with a...
EUVD-2014-9543
Malware in sbrugna...
EUVD-2012-2303
Malware in sbrugna...
EUVD-2011-2704
Malware in sbrugna...
EUVD-2013-6213
Malware in sbrugna...
EUVD-2015-3287
Malware in sbrugna...
EUVD-2015-2840
Malware in sbrugna...
EUVD-2012-0853
Malware in sbrugna...
EUVD-2013-6212
Malware in sbrugna...
EUVD-2012-1604
Malware in sbrugna...
EUVD-2015-3288
Malware in sbrugna...
EUVD-2014-8176
Malware in sbrugna...