PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Drupal Vulnerability: Mass Scans & Targeted Exploitation

volexity.com | research | #vulnerability-research | #threat-intelligence | #apt | #exploit | #scanning | #drupal
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Yesterday (October 15, 2014), a critical SQL injection vulnerability in version 7 of the popular open source content management system (CMS) Drupal was disclosed by Stefan Horst and detailed in […]
Published
Collected

Related coverage

vulnerability · volexity.com
Drupalgeddon 2: Profiting from Mass Exploitation
On March 28, 2018, a patch for a highly critical vulnerability, which facilitates remote code execution against the Drupal content management system was released. The vulnerability was identified by Jasper […]
research · volexity.com
Afghan Government Compromise: Browser Beware
Visiting a wide-ranging number of websites associated with the Government of Afghanistan may yield visitors an unwanted surprise. For the second time this year, malicious code has surfaced on, cdn.afghanistan.af, […]
research · volexity.com
A New Shellshock Worm on the Loose
In a blog post from September last year, we described some of the early Shellshock activity we were seeing in the wild. Since then we have continued to observe periodic […]
research · volexity.com
Democracy in Hong Kong Under Attack
Over the last few months, Volexity has been tracking a particularly remarkable advanced persistent threat (APT) operation involving strategic web compromises of websites in Hong Kong and Japan. In both […]
vulnerability · volexity.com
DriftingCloud: Zero-Day Sophos Firewall Exploitation and an Insidious Breach
Volexity frequently works with individuals and organizations heavily targeted by sophisticated, motivated, and well-equipped threat actors from around the world. Some of these individuals or organizations are attacked infrequently or […]
vulnerability · volexity.com
Virtual Private Keylogging: Cisco Web VPNs Leveraged for Access and Persistence
In the world of information security, there is never a dull moment. Part of the fun of working in this space is that you always get to see attackers do […]
Back