19164 matches found
CVE-2024-45440
Enumeration tool for CVE-2024-45440 by DividesByZer0 & c0d3Ninja CVE-2024-45440 - Drupal 11.x-dev Full Path Disclosure PoC options: -h, --help show this help message and exit -u URL, --url URL Single URL to scan. -f FILE, --file FILE File containing URLs to scan one per line. -t THREADS, --thread...
drupal-cve-2018-7600-poc
README Drupal Drupalgeddon 2 Unauthenticated Remote Code Execution CVE-2018-7600 Drupal versions prior to 7.58, 8.x versions prior to 8.3.9, 8.4.x versions prior to 8.4.6, and 8.5.x versions prior to 8.5.1 allow remote attackers to execute arbitrary code due to an issue affecting multiple...
drupalgeddon-2
Drupalgeddon-2 Vuln checker for Drupal v7.x + v8.x Usage : php drupalgeddon.php Target http://example.com :...
security-operations-labs
Security Operations Labs 概要 このリポジトリは、大学の文脈における防御的セキュリティ業務を、公開での追跡可能性のために再構成した形でまとめたものです。焦点は、方法論、再現可能なラボ、検証、および開発された対策の限界にあり、コース教材の公開ではありません。 含まれるプロジェクト プロジェクト| 内容 ---|--- Threat Modeling| STRIDE分析、MITRE-ATT&CKマッピング、抽象化されたDFD、リスクレジスタ IT/OTネットワークセグメンテーション| iptablesによるデフォルト拒否ゲートウェイ、ロギング、管理された検証 Snor...
POC-CVE-2018-7600
POC-CVE-2018-7600 Drupal, CVE-2018-7600에 취약 Drupalgeddon2 스캐너 CVE-2018-7600 CVE-2018-7600 Drupalgeddon2에 취약할 가능성이 있는 Drupal 서버를 감지하는 간단한 Python 스캐너입니다. 이 스크립트는 익스플로잇하거나 셸을 열지 않으며 , 다음 작업만 수행합니다: 1. user/password 흐름에 요청을 보냅니다. 2. 응답이 Drupal 사이트에서 온 것처럼 보이는지 확인합니다. 3. 두 번째 테스트 요청을 보내고 출력을 분석합니다. 4...
Drupal - Remote Code Execution
Drupal 7.x and 8.x contain a remote code execution vulnerability that exists within multiple subsystems. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. This vulnerability is related to Drupal core - Highly...
Security Bulletin: User Entity Behavior Analytics App for IBM QRadar SIEM contains components with known vulnerabilities
Summary The product includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. User Entity Behavior Analytics App for IBM QRadar SIEM has addressed the applicable CVEs in an update. Vulnerability Details CVEID:CVE-2011-4969 DESCRIPTION:...
CLSA-2026-1790872344 TuxCare security update for drupal/core (2 CVEs)
TuxCare rebuilt drupal/core to address 2 CVEs. Fixed in 10.5.12-p1+tuxcare...
CLEANSTART-2024-RD27757 Drupal before 7
Security vulnerability affects the drupal7 package. Drupal before 7...
CLEANSTART-2024-FK19349 remote code execution vulnerability exists within multiple subsystems of Drupal 7
Security vulnerability affects the drupal7 package. A remote code execution vulnerability exists within multiple subsystems of Drupal 7...
CLEANSTART-2024-WW17035 In Drupal 7 versions prior to 7
Security vulnerability affects the drupal7 package. In Drupal 7 versions prior to 7...
CLEANSTART-2024-OJ63880 Open Redirect vulnerability in Drupal Core allows a user to be tricked into visiting a specially crafted link which would redirect them to an arbitrary external URL
Security vulnerability affects the drupal7 package. Open Redirect vulnerability in Drupal Core allows a user to be tricked into visiting a specially crafted link which would redirect them to an arbitrary external URL...
CLEANSTART-2024-SC89971 Cross Site Request Forgery vulnerability in Drupal Core Form API does not properly handle certain form input from cross-site requests, which can lead to other vulnerabilities
Security vulnerability affects the drupal7 package. Cross Site Request Forgery vulnerability in Drupal Core Form API does not properly handle certain form input from cross-site requests, which can lead to other vulnerabilities...
CLEANSTART-2024-AP37400 Cross-site scripting vulnerability in Drupal Core
Security vulnerability affects the drupal7 package. Cross-site scripting vulnerability in Drupal Core...
CLEANSTART-2024-CD56288 Cross-site Scripting (XSS) vulnerability in Drupal core's sanitization API fails to properly filter cross-site scripting under certain circumstances
Security vulnerability affects the drupal7 package. Cross-site Scripting XSS vulnerability in Drupal core's sanitization API fails to properly filter cross-site scripting under certain circumstances...
CLEANSTART-2024-CD40650 Drupal core's form API has a vulnerability where certain contributed or custom modules' forms may be vulnerable to improper input validation
Security vulnerability affects the drupal7 package. Drupal core's form API has a vulnerability where certain contributed or custom modules' forms may be vulnerable to improper input validation...
CLEANSTART-2024-DI95704 Xecurify's miniOrange Premium, Standard, and Enterprise Drupal SAML SP modules possess an authentication and authorization bypass vulnerability
Security vulnerability affects the drupal7 package. Xecurify's miniOrange Premium, Standard, and Enterprise Drupal SAML SP modules possess an authentication and authorization bypass vulnerability...
drupalgeddon2-cve-lab
Drupalgeddon2 CVE-2018-7600 ラボ このリポジトリは、Drupalgeddon2 実行用の再利用可能なターゲットパッケージです。 Sentinel は 2026-08-27 に、SQLite と PHP 7.4 を搭載した Drupal core 7.57 に対して CVE-2018-7600 を再現しました。このエクスプロイトは、Drupal 7 の 2 リクエスト AJAX レンダー配列パスです: 1. namepostrender=passthru、namemarkup=id、nametype=markup...
Drupal - Remote Code Execution
Drupal 8.5.x before 8.5.11 and Drupal 8.6.x before 8.6.10 V contain certain field types that do not properly sanitize data from non-form sources, which can lead to arbitrary PHP code execution in some cases. id: CVE-2019-6340 info: name: Drupal - Remote Code Execution author: madrobot severity:...