CVE-2018-7602

CVE-2018-7602 Drupal 7.x 和 8.x 的多个子系统中存在远程代码执行漏洞。攻击者可能利用该漏洞在 Drupal 站点上实施多种攻击向量，导致站点被入侵。此漏洞与 Drupal 核心有关——高危——远程代码执行——SA-CORE-2018-002。SA-CORE-2018-002 及本漏洞正被在野利用。 —— MITRE 漏洞复现步骤 先决条件 由于 Docker for Mac 和 Windows...

CVE-2018-7600

重要： 教育または情報提供のみを目的として提供されています。 ModSecurity 用の保護ルール（fuzzylogic 著） ModRewrite .htaccess 用の保護ルール メディア関係者向け： このリポジトリへのリンクを記事に掲載する場合は、攻撃から保護する方法（Drupal の更新、WAF のルール設定などを推奨）を必ず明記してください。 CheckPoint の記事に基づく PoC。 https://research.checkpoint.com/uncovering-drupalgeddon-2/ 著者：Eyal Shalev、Rotem Reiss、Eran...

CVE-2018-7600.

IGLOO Corp, Won Chi Hyun Drupal RCE 分析レポート Drupal RCE CVE-2018-7600 スクリプトに自分のアドレスを忘れずに入力してください！ 説明: Drupal 7.x および 8.x の複数のサブシステムにリモートコード実行の脆弱性が存在します。これにより、攻撃者は Drupal サイト上の複数の攻撃ベクトルを悪用する可能性があり、サイトが完全に侵害される可能性があります。 解決策: Drupal 7 または 8 コアの最新バージョンにアップグレードしてください。 7.x を実行している場合は、Drupal 7.58...

CVE-2018-7600

POC of CVE-2018-7600 Drupal RCE CVE-2018-7600 スクリプトにあなたのアドレスを忘れずに入力してください！ 説明: Drupal 7.x および 8.x の複数のサブシステムにリモートコード実行の脆弱性が存在します。これにより、攻撃者は Drupal サイト上の複数の攻撃ベクトルを悪用し、サイトが完全に侵害される可能性があります。 解決策: Drupal 7 または 8 コアの最新バージョンにアップグレードしてください。 7.x を実行している場合は、Drupal 7.58...

USN-8666-3: Linux kernel (GCP FIPS) vulnerabilities

Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. CVE-2025-275...

Ubuntu 26.04 LTS : Linux kernel (NVIDIA BaseOS) vulnerabilities (USN-8664-1)

"The remote Ubuntu 26.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8664-1 advisory. It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use...

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-8666-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8666-1 advisory. Siebe Devroe, Hlose Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated...

USN-8666-2: Linux kernel (Azure) vulnerabilities

Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. CVE-2025-275...

Security update for the Linux Kernel (Live Patch 28 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.118 fixes various security issues: The following security issues were fixed: CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024...

SUSE-SU-2026:3734-1 Security update for the Linux Kernel (Live Patch 56 for SUSE Linux Enterprise 15 SP4)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.225 fixes various security issues: The following security issues were fixed: - CVE-2023-53995: net: ipv4: fix one memleak in inetdelifa bsc1269284. - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT...

SUSE-SU-2026:3719-1 Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.87 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024. -...

USN-8661-2: Linux kernel (Low Latency) vulnerabilities

Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. CVE-2025-275...

USN-8669-1 linux-nvidia-6.17 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Foo-over-UDP FOU; - ARM64 architecture; - x86 architecture; - Block layer subsystem; - Drivers core; - Null block...

USN-8662-2 linux-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - Cryptographic API; - InfiniBand drivers; - Media drivers; - STMicroelectronics network drivers;...

RLSA-2026:57251 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: drm/amdkfd: Fix out-of-bounds write in kfdeventpageset CVE-2026-43206 kernel: drm/amdgpu: Refactor amdgpugemvaioctl for Handling Last Fence Update and Timeline Management v4 CVE-2026-4323...

Ubuntu 20.04 LTS : Linux kernel (AWS FIPS) vulnerabilities (USN-7462-2)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7462-2 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...

USN-8297-1 linux-gcp-5.15 vulnerabilities

Stonejiajia, Shir Tamari and Sagi Tzadik discovered that the OverlayFS implementation in the Ubuntu Linux kernel did not properly perform permission checks in certain situations. A local attacker could possibly use this to gain elevated privileges. CVE-2023-2640 Shir Tamari and Sagi Tzadik...

Ubuntu 20.04 LTS : Linux kernel (HWE) vulnerabilities (USN-8188-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8188-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...

Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-8180-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8180-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...

Ubuntu Pro Realtime 22.04 LTS : Linux kernel (Intel IoTG Real-time) vulnerabilities (USN-8116-1)

"The remote Ubuntu Pro Realtime 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8116-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...