Drupal Google Analytics Counter Cross-Site Request Forgery Vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Google Analytics Counter is one of the website traffic analysis modules. A cross-site request forgery vulnerability exists in Drupal Google Analytics Counter versions prior to 7.x-3.2,...

Drupal Core - Highly Critical - Injection - SA-CORE-2016-003

More info at https://www.drupal.org/SA-CORE-2016-003...

Drupal Core - Highly Critical - Injection - SA-CORE-2016-003

More info at https://www.drupal.org/SA-CORE-2016-003...

Drupal Releases Security Advisory

Drupal has released an advisory to address a vulnerability in Drupal core 8.x versions prior to 8.1.7. Exploitation of this vulnerability could allow a remote attacker to take control of an affected system. Users and administrators are encouraged to review Drupal's Security Advisory and apply the...

Drupal 7.x < 7.44 / 8.1.x < 8.1.3 User Module Account Saving Improper Role Assignment Remote Issue

Binary data 9399.prm...

Drupal RESTWS Module Page Callback RCE

The version of Drupal running on the remote web server is affected by a remote code execution vulnerability in the bundled RESTful Web services RESTWS module due to a flaw in how default page callbacks for Drupal entities are altered when handling specially crafted requests. An unauthenticated,...

Drupal Security Bypass Vulnerability

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. Drupal has security bypass vulnerabilities that could be exploited by remote attackers to bypass security restrictions...

Drupal Privilege Vulnerability

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. Drupal has an elevation of privilege vulnerability that allows remote attackers to exploit the vulnerability to elevate privileges...

Fedora 22 : drupal7 (2016-95f1569a73)

https://www.drupal.org/project/drupal/releases/7.44 https://www.drupal.org/SA-CORE-2016-002 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possib...

Drupal WikiWiki SQL Injection

SQL Injection vulnerability in Drupal WikiWiki module find parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Fedora 23 : drupal7 (2016-3a05803486)

https://www.drupal.org/project/drupal/releases/7.44 https://www.drupal.org/SA-CORE-2016-002 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possib...

Drupal Coder RCE

Remote Code Execution in Drupal Coder module Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Drupal RESTful Web Services RCE

Remote Code Execution in Drupal RESTful Web Services module Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Fedora 24 : drupal7 (2016-a84b3d73bc)

https://www.drupal.org/project/drupal/releases/7.44 https://www.drupal.org/SA-CORE-2016-002 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possib...

3 Popular Drupal Modules Found Vulnerable — Patch Released

Just yesterday, I wrote a warning article announcing that Drupal – the popular open source content management system – will release patches for several highly critical Remote Code Execution RCE bugs that could allow attackers to fully take over any affected site. Below are the three separate Drup...

Drupal Patches Three Remote Code Execution Vulnerabilities in Modules

Developers with the open source content management framework Drupal today patched a series of highly critical remote code execution bugs in three separate modules. If exploited, the bugs could let an attacker take over any site running the modules. Fixes for pushed for RESTful Web Services, a...

Several Critical Remotely Exploitable Flaws Found in Drupal Modules, patch ASAP!

The extraordinary 'Panama Papers leak' from Law firm Mossack Fonseca that exposed the tax-avoiding efforts by the world's richest and most influential members was initially believed to be the result of an unpatched vulnerability in the popular content management systems: Drupal and WordPress. Now...

Drupal RESTWS Remote Code Execution Vulnerability

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. A remote code execution vulnerability exists in the Drupal RESTWS module. An attacker can exploit the vulnerability by sending a specially crafted request that results in...

Drupal Coder Remote Code Execution Vulnerability

Drupal is a free, open-source content management system developed in the PHP language maintained by the Drupal community; Coder is Drupal's encoder module. A remote code execution vulnerability exists in the Drupal Coder module. Because the module does not adequately validate user-entered script...

Coder - Highly Critical - Remote Code Execution - SA-CONTRIB-2016-039

The Coder module checks your Drupal code against coding standards and other best practices. It can also fix coding standard violations and perform basic upgrades on modules. The module doesn't sufficiently validate user inputs in a script file that has the php extension. A malicious unauthenticat...