114 matches found
CVE-2018-7602
CVE-2018-7602 A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. This vulnerability is related to Drupal core - High...
CVE-2019-6340
CVE-2019-6340 RCE REST de Drupal8, SA-CORE-2019-003 0x01 búsqueda en docker CVE-2019-6340 root@kitploit: NAME DESCRIPTION STARS OFFICIAL AUTOMATED knqyf263/cve-2019-6340 Environment for CVE-2019-6340 Drupal 0 cved/cve-2019-6340 cve-2019-6340 0 0x02 docker pull knqyf263/cve-2019-6340 root@kitploit...
CVE-2018-7600-Drupal-RCE
CVE-2018-7600 RCE en Drupal Créditos a: Archivo| Versión Drupal| Fuente| Comentario ---|---|---|--- poc0-curl.sh| 8| https://twitter.com/ibo0om/status/984674893768921089 https://twitter.com/IamSecurity/status/984977193565646848 https://gist.github.com/g0tmi1k/7476eec3f32278adc07039c3e5473708|...
CVE-2018-7600
POC of CVE-2018-7600 Drupal RCE CVE-2018-7600 Dont Forget to Put Your Adress into the Script ! Description: A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which...
Drupal-cve-2019-6340
Investigación CVE 2019-6340 root@kitploit: El sitio con el módulo RESTful API Services del núcleo de Drupal 8 habilitado permite al usuario enviar solicitudes GET, PATCH o POST al servidor. Una solicitud GET es suficiente para desencadenar la vulnerabilidad de ejecución de código incluso si el...
drupal8-REST-RCE
drupal8-REST-RCE CVE-2019-6340 drupal8-REST-RCE /node/1 , CVE-2018-7600 drupal8 RCE /user/register Comando Unix/Linux - Ejecución remota de código comando "id" Uso root@kitploit: python drupal8-REST-RCE.py puerto definido por el usuario python drupal8-REST-RCE.py por defecto: 80/tcp ¡actualizado!...
EUVD-2019-15903
Malware in sbrugna...
EUVD-2022-5359
Malicious code in bioql PyPI...
EUVD-2022-5180
Malicious code in bioql PyPI...
EUVD-2022-4050
Malicious code in bioql PyPI...
EUVD-2022-3687
Malicious code in bioql PyPI...
EUVD-2022-2662
Malicious code in bioql PyPI...
EUVD-2022-4715
Malicious code in bioql PyPI...
EUVD-2022-3331
Malicious code in bioql PyPI...
EUVD-2025-11454
Malicious code in bioql PyPI...
CVE-2025-3739
Vulnerability in Drupal Drupal 8 Google Optimize Hide Page.This issue affects Drupal 8 Google Optimize Hide Page:...
CVE-2025-3739 Drupal 8 Google Optimize Hide Page - Critical - Unsupported - SA-CONTRIB-2025-040
Vulnerability in Drupal Drupal 8 Google Optimize Hide Page.This issue affects Drupal 8 Google Optimize Hide Page:...
CVE-2025-3739
CVE-2025-3739 : A vulnerability in Drupal 8 Google Optimize Hide Page affects the Drupal 8 Google Optimize Hide Page module. The CVSSv3.1 metrics indicate a network attack vector, high attack complexity, and that an attacker requires high privileges with no user interaction to achieve a Confident...
Drupal 8 Google Optimize Hide Page - Critical - Unsupported - SA-CONTRIB-2025-040
The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please read: https://www.drupal.org/node/251466s-becoming-owner-maintainer-or-co-mai...
GHSA-58XV-7H9R-MX3C Drupal Malicious file upload with filenames stating with dot
Drupal 8 core's filesaveupload function does not strip the leading and trailing dot '.' from filenames, like Drupal 7 did. Users with the ability to upload files with any extension in conjunction with contributed modules may be able to use this to upload system files such as .htaccess in order to...