114 matches found
Drupal-cve-2019-6340
Pesquisa CVE 2019-6340 root@kitploit: The site as Drupal 8 core RESTful API Services module gets enabled and allows the user to send GET, PATCH or POST Request to the server. GET request is enough to trigger the code execution vulnerability even though PATCH method is disabled The site has any...
CVE-2019-6340
CVE-2019-6340 ड्रुपल8 का REST RCE, SA-CORE-2019-003 0x01 docker search CVE-2019-6340 root@kitploit: NAME DESCRIPTION STARS OFFICIAL AUTOMATED knqyf263/cve-2019-6340 Environment for CVE-2019-6340 Drupal 0 cved/cve-2019-6340 cve-2019-6340 0 0x02 docker pull knqyf263/cve-2019-6340 root@kitploit: Usi...
drupal8-REST-RCE
drupal8-REST-RCE CVE-2019-6340 drupal8-REST-RCE /node/1 , CVE-2018-7600 drupal8 RCE /user/register Unix/Linux कमांड - रिमोट कोड निष्पादन कमांड "id" उपयोग root@kitploit: python drupal8-REST-RCE.py उपयोगकर्ता द्वारा परिभाषित पोर्ट python drupal8-REST-RCE.py डिफ़ॉल्ट : 80/tcp अपडेटेड! स्क्रिप्ट को...
CVE-2018-7602
CVE-2018-7602 Drupal 7.x और 8.x के कई उपतंत्रों में एक रिमोट कोड निष्पादन भेद्यता मौजूद है। यह संभावित रूप से हमलावरों को Drupal साइट पर कई हमला वैक्टरों का शोषण करने की अनुमति देता है, जिसके परिणामस्वरूप साइट से समझौता हो सकता है। यह भेद्यता Drupal कोर - Highly critical - Remote Code Execution -...
CVE-2018-7600-Drupal-RCE
CVE-2018-7600 Drupal RCE Créditos a: Arquivo| Drupal Ver| Fonte| Comentário ---|---|---|--- poc0-curl.sh| 8| https://twitter.com/ibo0om/status/984674893768921089 https://twitter.com/IamSecurity/status/984977193565646848 https://gist.github.com/g0tmi1k/7476eec3f32278adc07039c3e5473708| poc1-a2u.py...
CVE-2018-7600
POC لـ CVE-2018-7600 Drupal RCE CVE-2018-7600 لا تنسَ وضع عنوانك في السكريبت ! الوصف: توجد ثغرة تنفيذ تعليمات برمجية عن بُعد في أنظمة فرعية متعددة من Drupal 7.x و8.x. وقد تسمح هذه الثغرة للمهاجمين باستغلال نواقل هجوم متعددة على موقع Drupal، مما قد يؤدي إلى اختراق الموقع بالكامل. الحل: قم بالترقية...
EUVD-2019-15903
Malware in sbrugna...
EUVD-2022-5180
Malicious code in bioql PyPI...
EUVD-2022-5359
Malicious code in bioql PyPI...
EUVD-2022-4050
Malicious code in bioql PyPI...
EUVD-2022-3687
Malicious code in bioql PyPI...
EUVD-2025-11454
Malicious code in bioql PyPI...
EUVD-2022-3331
Malicious code in bioql PyPI...
EUVD-2022-4715
Malicious code in bioql PyPI...
EUVD-2022-2662
Malicious code in bioql PyPI...
CVE-2025-3739
Vulnerability in Drupal Drupal 8 Google Optimize Hide Page.This issue affects Drupal 8 Google Optimize Hide Page:...
CVE-2025-3739 Drupal 8 Google Optimize Hide Page - Critical - Unsupported - SA-CONTRIB-2025-040
Vulnerability in Drupal Drupal 8 Google Optimize Hide Page.This issue affects Drupal 8 Google Optimize Hide Page:...
CVE-2025-3739
CVE-2025-3739 : A vulnerability in Drupal 8 Google Optimize Hide Page affects the Drupal 8 Google Optimize Hide Page module. The CVSSv3.1 metrics indicate a network attack vector, high attack complexity, and that an attacker requires high privileges with no user interaction to achieve a Confident...
Drupal 8 Google Optimize Hide Page - Critical - Unsupported - SA-CONTRIB-2025-040
The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please read: https://www.drupal.org/node/251466s-becoming-owner-maintainer-or-co-mai...
GHSA-58XV-7H9R-MX3C Drupal Malicious file upload with filenames stating with dot
Drupal 8 core's filesaveupload function does not strip the leading and trailing dot '.' from filenames, like Drupal 7 did. Users with the ability to upload files with any extension in conjunction with contributed modules may be able to use this to upload system files such as .htaccess in order to...