102 matches found
Drupal-SA-CORE-2019-003
Drupal-SA-CORE-2019-003 CVE-2019-6340 Drupal SA-CORE-2019-003 CVE-2019-6340 CVE-2019-6340.md https://mp.weixin.qq.com/s/EQD4-K6HgBY9wdzeXeyzkg https://paper.seebug.org/821/ https://www.youtube.com/watch?v=QtLDDN0Duko linkname https://pbs.twimg.com/media/D0C-KiXX4AM2vR3.jpg:large CVE-2019-6340는 기본...
Drupal_REST-RCE_Unauthenticated
CVE-2019-6340 — Drupal RESTful 웹 서비스 RCE CVE-2019-6340에 대한 원격 코드 실행 익스플로잇의 Python 구현으로, Metasploit 모듈 분석 및 leonjza의 선행 연구에 기반합니다. EDB-46459와의 주요 차이점: GET 대신 POST를 사용하여 Drupal의 페이지 캐시를 우회합니다. 따라서 캐시 만료를 기다리지 않고 동일한 대상에 대해 여러 번 실행할 수 있습니다. 요구 사항 pip install requests 사용법 python3 exploit.py -c option...
CVE-2019-6340
Drupal Drupal 8.6.x RCE 익스플로잇 익스플로잇 CVE: CVE-2019-6340 CMS: Drupal CMS 버전: Drupal 8.6.x 테스트 완료 조건: Drupal 8.6.x, 8.6.10 또는 Drupal 8.5.11 RESTful Web Services 모듈이 활성화되어 있어야 함...
cve-2019-6340-bits
cve-2019-6340-bits CVE-2019-6340 드루팔 RESTful RCE 분석 중 생성된 Bits modsec 규칙 pcap 예제 nginx 설정 예제 로그 예제 플레이북...
[SECURITY] Fedora 45 Update: rest-0.10.2-12.fc45
This library was designed to make it easier to access web services that claim to be "RESTful". A RESTful service should have urls that represent remote objects, which methods can then be called on. The majority of services don't actually adhere to this strict definition. Instead, their RESTful en...
N2W 安全漏洞
N2W is a data backup and recovery software developed by N2W Corporation. Versions of N2W prior to 4.4.0 contained security vulnerabilities. These vulnerabilities stemmed from a two-step attack targeting RESTful APIs, which could lead to remote code execution...
EUVD-2013-1938
Malware in sbrugna...
EUVD-2013-4129
Malware in sbrugna...
EUVD-2013-0240
Malware in sbrugna...
EUVD-2012-5448
Malware in sbrugna...
EUVD-2022-4050
Malicious code in bioql PyPI...
EUVD-2024-51469
Malicious code in bioql PyPI...
CVE-2013-0205
Cross-site request forgery CSRF vulnerability in the RESTful Web Services restws module 7.x-1.x before 7.x-1.2 and 7.x-2.x before 7.x-2.0-alpha4 for Drupal allows remote attackers to hijack the authentication of arbitrary users via unknown vectors...
The vulnerability of the Drupal CMS system’s RESTful Web Services module, related to errors in request processing, allows attackers to gain unauthorized access to protected information.
The vulnerability of the Drupal CMS system’s RESTful Web Services module is related to errors in request processing. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
CVE-2024-13255
Exposure of Sensitive Information Through Data Queries vulnerability in Drupal RESTful Web Services allows Forceful Browsing.This issue affects RESTful Web Services: from 7.X-2.0 before 7.X-2.10...
CVE-2024-13255 RESTful Web Services - Critical - Access bypass - SA-CONTRIB-2024-019
Exposure of Sensitive Information Through Data Queries vulnerability in Drupal RESTful Web Services allows Forceful Browsing.This issue affects RESTful Web Services: from 7.X-2.0 before 7.X-2.10...
CVE-2024-13255 RESTful Web Services - Critical - Access bypass - SA-CONTRIB-2024-019
Exposure of Sensitive Information Through Data Queries vulnerability in Drupal RESTful Web Services allows Forceful Browsing.This issue affects RESTful Web Services: from 7.X-2.0 before 7.X-2.10...
CVE-2024-13255
Exposure of Sensitive Information Through Data Queries vulnerability in Drupal RESTful Web Services allows Forceful Browsing.This issue affects RESTful Web Services: from 7.X-2.0 before 7.X-2.10...
CVE-2024-13255 RESTful Web Services - Critical - Access bypass - SA-CONTRIB-2024-019
Exposure of Sensitive Information Through Data Queries vulnerability in Drupal RESTful Web Services allows Forceful Browsing.This issue affects RESTful Web Services: from 7.X-2.0 before 7.X-2.10...
CVE-2024-13255: Exposure of Sensitive Information Through Data Queries
Exposure of Sensitive Information Through Data Queries vulnerability in Drupal RESTful Web Services allows Forceful Browsing.This issue affects RESTful Web Services: from 7.X-2.0 before 7.X-2.10...