Drupal Core Critical RCE Vulnerability (SA-CORE-2018-004) - Linux

Drupal is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:drupal:drupal"; if...

DRUPAL-CORE-2018-004

A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. This vulnerability is related to Drupal core - Highly critical -...

Integer overflow

An integer overflow in the transferProxy function of a smart contract implementation for SmartMesh aka SMT, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets via crafted fee and value parameters, as exploited in the wild in April 2018, aka the...

Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004

A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. This vulnerability is related to Drupal core - Highly critical -...

drupal -- Drupal Core - Multiple Vulnerabilities

Drupal Security Team reports: A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. This vulnerability is related to...

CVE-2018-4934

creationtimestamp| type| source ---|---|--- 2018-04-24 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44528 2025-08-31 03:01:26+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d...

CVE-2018-4935

creationtimestamp| type| source ---|---|--- 2018-04-24 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44527 2025-08-31 03:01:24+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d...

CVE-2018-4937

creationtimestamp| type| source ---|---|--- 2018-04-24 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44529 2025-08-31 03:01:27+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d...

CVE-2018-4936

creationtimestamp| type| source ---|---|--- 2018-04-24 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44526 2025-08-31 03:01:24+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d...

CVE-2018-9857

creationtimestamp| type| source ---|---|--- 2018-04-18 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44486...

CVE-2018-0968

creationtimestamp| type| source ---|---|--- 2018-04-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44465...

CVE-2018-0971

creationtimestamp| type| source ---|---|--- 2018-04-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44461...

CVE-2018-0970

creationtimestamp| type| source ---|---|--- 2018-04-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44460...

CVE-2018-0974

creationtimestamp| type| source ---|---|--- 2018-04-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44464...

CVE-2018-0969

creationtimestamp| type| source ---|---|--- 2018-04-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44459...

Drupalgeddon 2.0: Are Hackers Slacking Off?

Ever since March 28th, when Drupal published a patch for a RCE named Drupalgeddon 2.0 SA-CORE-2018-002/CVE-2018-7600, Imperva has been monitoring our cloud looking for hackers’ attempts to exploit the vulnerability, but found nothing. Until today. It somehow seems fitting that nefarious activity...

Adobe ColdFusion 11.x < 11u14 / 2016.x < 2016u6 Multiple Vulnerabilities (APSB18-14)

The version of Adobe ColdFusion running on the remote Windows host is 11.x prior to update 14 or 2016.x prior to update 6. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid109017; scriptversion"1.9";...

CVE-2018-1273

creationtimestamp| type| source ---|---|--- 2018-04-11 20:15:28+00:00| seen| https://t.me/canyoupwnme/3562 2018-12-11 15:50:28+00:00| seen| MISP/5c0fd6cc-f868-4dca-890c-1ea30a021402 2020-10-09 15:40:34+00:00| seen| MISP/1e58e188-7443-497f-a296-717763199581 2023-06-14 21:10:03+00:00| seen|...

Cross site scripting

In OpenText Documentum D2 Webtop v4.6.0030 build 059, a Reflected Cross-Site Scripting Vulnerability could potentially be exploited by malicious users to compromise the affected system via the servlet/Download docbase or username parameter...

Obscure E-Mail Vulnerability

This vulnerability is a result of an interaction between two different ways of handling e-mail addresses. Gmail ignores dots in addresses, so [email protected] is the same as [email protected] is the same as [email protected]. Note: I do not own any of those email addresse...