/* Route-Critical (index, V6 §3.6.3 — erzeugt von tools/generate_critical_css.mjs) */ .collapse:not(.show){display:none}.navbar{display:flex;flex-wrap:wrap;align-items:center;justify-content:space-between}.navbar>.container-fluid{display:flex;flex-wrap:inherit;align-items:center;justify-content:space-between}.mydraft-svg-icon{display:inline-block;vertical-align:middle;color:currentcolor;flex-shrink:0;transition:color var(--duration-fast, 150ms) ease,stroke var(--duration-fast, 150ms) ease,fill var(--duration-fast, 150ms) ease}.mydraft-svg-icon circle,.mydraft-svg-icon line,.mydraft-svg-icon path,.mydraft-svg-icon polygon,.mydraft-svg-icon polyline,.mydraft-svg-icon rect{transition:stroke var(--duration-fast, 150ms) ease,fill var(--duration-fast, 150ms) ease}@layer components{.live-pulse-dot{width:8px;height:8px}}.min-w-0{min-width:0}@layer overrides{.live-radar-header-badge{background:rgba(239,68,68,.12);border:1px solid rgba(239,68,68,.35);color:#fca5a5;font-size:.75rem;font-weight:700;transition:.25s;cursor:pointer}}@layer overrides{.live-pulse-dot{width:8px;height:8px;background-color:var(--threat-critical,#ef4444);border-radius:50%;display:inline-block;box-shadow:rgba(239,68,68,.7) 0 0 0 0}}@layer overrides{body.light .live-radar-header-badge,html[data-bs-theme=light] .live-radar-header-badge{background:#fbd9dd;border-color:#eeb2b8;color:#8a1723!important}}.isharestuff-live-ticker{color:var(--color-text-body,#f8fafc);backdrop-filter:none;flex-wrap:wrap;row-gap:.3rem;background:var(--color-surface,rgba(15,23,42,.85))!important;border:1px solid var(--color-border,rgba(255,255,255,.12))!important;padding:.45rem .5rem!important;margin-bottom:.75rem!important}.ticker-content{mask-image:linear-gradient(to right,transparent 0px,rgb(0,0,0) 14px,rgb(0,0,0) calc(100% - 14px),transparent 100%);touch-action:pan-y;cursor:grab;user-select:none;-webkit-tap-highlight-color:transparent;order:1;width:100%;max-width:100%;flex:0 0 100%!important}.isharestuff-live-ticker .ticker-lead-group{order:2;width:100%;justify-content:space-between;margin-right:0!important}.ticker-track{display:flex;align-items:center;white-space:nowrap;will-change:transform;transform:translate3d(0,0,0);--ticker-speed:1;animation-name:isharestuffTicker;animation-timing-function:linear;animation-iteration-count:infinite;animation-duration:calc(26s / var(--ticker-speed, 1))}.ticker-link{max-width:min(78vw,340px);font-size:.82rem;display:inline-block;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;vertical-align:baseline;transition:color .2s;color:var(--color-text-heading,#f8fafc)!important}.isharestuff-live-ticker .ticker-ctrl-btn{min-width:44px;height:44px;font-size:.78rem;-webkit-tap-highlight-color:transparent}.ticker-controls-bar{gap:.4rem}.ticker-counter{font-family:var(--bs-font-monospace, ui-monospace, monospace);font-size:.72rem;line-height:1;color:var(--color-text-secondary,#94a3b8);min-width:3.4em;text-align:center;user-select:none;white-space:nowrap;margin-left:auto}.ticker-item{font-size:.82rem}.ticker-item .ticker-date{font-size:.72rem;vertical-align:baseline}.ticker-text-group{display:inline-flex;align-items:baseline}.ticker-badge-live-btn{border:0;cursor:pointer;text-decoration:none!important}.ticker-badge{font-size:.78rem!important;min-height:44px!important;min-width:44px!important;padding:6px 12px!important;display:inline-flex!important;align-items:center!important;justify-content:center!important}.signal-live-strip{display:flex;align-items:center;gap:.625rem;min-height:44px;margin-bottom:1rem;padding:.4rem .875rem;border-radius:9999px;border:1px solid rgba(var(--color-border-rgb,148,163,184),.35);background:rgba(var(--color-surface-rgb,15,23,42),.6);backdrop-filter:blur(12px) saturate(140%);overflow:hidden}.signal-live-badge{display:inline-flex;align-items:center;gap:.35rem;flex:0 0 auto;font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-size:.68rem;font-weight:700;letter-spacing:.08em;text-transform:uppercase;color:#fda4af}[data-bs-theme=light] .signal-live-badge,body.light .signal-live-badge{color:#be123c}.signal-live-dot{width:8px;height:8px;border-radius:50%;background:#f43f5e;animation:1.6s ease-in-out 0s infinite normal none running signalLivePulse}.signal-live-strip.is-online .signal-live-dot{background:#22c55e;animation:auto ease 0s 1 normal none running none}.signal-live-item{font-size:.82rem;line-height:1.35;white-space:nowrap;overflow:hidden;text-overflow:ellipsis;min-width:0}.menue-widget .nav-tree-link{min-width:44px;display:flex;align-items:center;word-break:break-word;overflow-wrap:anywhere;max-width:100%;min-height:44px!important}.menue-widget .nav-title-text{overflow-wrap:anywhere;word-break:break-word}.menue-widget .menue-widget-btn{min-height:44px;min-width:44px;display:inline-flex;align-items:center;justify-content:center}@media (min-width:992px){.navbar-expand-lg{flex-wrap:nowrap;justify-content:flex-start}.navbar-expand-lg .navbar-toggler{display:none}}@media (prefers-reduced-motion:reduce){@layer overrides{#news-popup,#news-toast-banner,.animate-pulse,.live-pulse-dot,.live-pulsing-dot,.news-item-card{animation:auto ease 0s 1 normal none running none;transition:none}}.ticker-track{animation:auto ease 0s 1 normal none running none!important}.ticker-content{cursor:default}.signal-live-dot{animation:auto ease 0s 1 normal none running none}}@media (min-width:768px){.isharestuff-live-ticker{flex-wrap:nowrap;row-gap:0;backdrop-filter:blur(12px);padding:.5rem!important;margin-bottom:1rem!important}.isharestuff-live-ticker .ticker-content{order:0;width:auto;max-width:none;flex:1 1 auto!important}.isharestuff-live-ticker .ticker-lead-group{order:0;width:auto;justify-content:flex-start;margin-right:1rem!important}.ticker-controls-bar{gap:.3rem}.isharestuff-live-ticker .ticker-ctrl-btn{min-width:30px;height:auto;font-size:inherit}.ticker-counter{font-size:.66rem;margin-left:0}.ticker-track{animation-duration:calc(40s / var(--ticker-speed, 1))}.ticker-link{max-width:340px;font-size:.85rem}.ticker-item{font-size:.85rem}.ticker-badge{font-size:inherit!important;min-height:0!important;min-width:0!important;padding:.5rem 1rem!important}}@media (max-width:359.98px){.ticker-counter{display:none}.ticker-controls-bar{gap:.3rem}.ticker-badge{padding:6px 9px!important}}@media (max-width:767.98px){.signal-live-strip{flex-wrap:wrap;align-items:flex-start;border-radius:1rem;padding:.5rem .75rem;row-gap:.25rem}.signal-live-badge{margin-top:.1rem}.signal-live-item{white-space:normal;display:-webkit-box;-webkit-line-clamp:2;-webkit-box-orient:vertical;text-overflow:clip;overflow-wrap:anywhere;line-height:1.3}} 🔒 [webapps] Drupal Core 10.5.5 - Error-Based SQL Injection | Proof of Concept (PoC) – TSECURITY.DE
EILMELDUNGEN LIVE
Sichere ProgrammierungHyperOS 4 Is Dropping in China: Xiaomi’s AI Finally Looks Like It’ll Actually Be Useful(18.10.2026 um 02:45 Uhr)
•
Sichere ProgrammierungTrending Dev Tools & Tutorials: 5 Must-Know Updates for October 2026(18.10.2026 um 02:47 Uhr)
•
IT NachrichtenAI & SaaS pricing this week: 2 raised, 0 cut (12 pages moved) - 2026-09-20(18.10.2026 um 02:48 Uhr)
•
Sichere ProgrammierungHow to Moderate Video Room Participants by Muting or Kicking (During Live Polls)(18.10.2026 um 02:49 Uhr)
•
Sichere ProgrammierungWhat jstack Misses When Your Java Service Uses Virtual Threads(18.10.2026 um 02:51 Uhr)
•
Sichere ProgrammierungWhy your generated Anki image occlusion cards import as plain cloze (and the one-line fix)(18.10.2026 um 02:52 Uhr)
•
Sichere ProgrammierungWhich payment platform can legally pay you in USD? A map for developers outside the US(18.10.2026 um 02:55 Uhr)
•
Sichere ProgrammierungGas Optimization Audit: Gemini(18.10.2026 um 02:56 Uhr)
•
Sichere ProgrammierungInvestor relations data for AI agents: prepping Netflix's 20 October earnings with an MCP server(18.10.2026 um 02:56 Uhr)
•
Sichere ProgrammierungHow We Built a 100% In-Browser Image to Bead Pattern Generator (CIE Lab Color Matching & Zero-Cost Architecture)(18.10.2026 um 02:57 Uhr)
•
Sichere ProgrammierungHyperOS 4 Is Dropping in China: Xiaomi’s AI Finally Looks Like It’ll Actually Be Useful(18.10.2026 um 02:45 Uhr)
•
Sichere ProgrammierungTrending Dev Tools & Tutorials: 5 Must-Know Updates for October 2026(18.10.2026 um 02:47 Uhr)
•
IT NachrichtenAI & SaaS pricing this week: 2 raised, 0 cut (12 pages moved) - 2026-09-20(18.10.2026 um 02:48 Uhr)
•
Sichere ProgrammierungHow to Moderate Video Room Participants by Muting or Kicking (During Live Polls)(18.10.2026 um 02:49 Uhr)
•
Sichere ProgrammierungWhat jstack Misses When Your Java Service Uses Virtual Threads(18.10.2026 um 02:51 Uhr)
•
Sichere ProgrammierungWhy your generated Anki image occlusion cards import as plain cloze (and the one-line fix)(18.10.2026 um 02:52 Uhr)
•
Sichere ProgrammierungWhich payment platform can legally pay you in USD? A map for developers outside the US(18.10.2026 um 02:55 Uhr)
•
Sichere ProgrammierungGas Optimization Audit: Gemini(18.10.2026 um 02:56 Uhr)
•
Sichere ProgrammierungInvestor relations data for AI agents: prepping Netflix's 20 October earnings with an MCP server(18.10.2026 um 02:56 Uhr)
•
Sichere ProgrammierungHow We Built a 100% In-Browser Image to Bead Pattern Generator (CIE Lab Color Matching & Zero-Cost Architecture)(18.10.2026 um 02:57 Uhr)
•
Intelligence View
⚡ tsecurity.de Intelligence

[webapps] Drupal Core 10.5.5 - Error-Based SQL Injection

Drupal Core 10.5.5 - Error-Based SQL Injection

Proof of Concept (PoC) exploit-db.com 1 Min. Lesezeit TA0001 · T1190
Beitrag
0
Seite
0
↗ Quelle (exploit-db.com)
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
Drupal Core 10.5.5 - Error-Based SQL Injection
🔍 CTI & Forensik

Cyber Threat Intelligence & Forensik

ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
1 belegte Technik
T1190TA0001 · Initial Access
Exploit Public-Facing Application
Mitigation: M1042 Network Segmentation & WAF Rule Enforcement
Quelle: Kontext-Klassifikation des Artikeltextes
OpenVAS (GVM)ModSecurityNuclei
Initial Access
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
4 Knoten · 3 Relationen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Jetzt Bewertung abgeben
🟢 Niedrig (1-3.9) 🟡 Mittel (4.0-6.9) 🔴 Hoch (7.0-8.9) Kritisch (9.0-10.0)
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken

Verwandte Story-Cluster & Quellen (Vektor-KI)

15 Quellen
CVE-2026-109701 | PAYCOMET Plugin up to 5.45 on WordPress cross site scripting (EUVD-2026-103285)
14 weitere Quellen
VulDB Updatesvor 8 Std.CVE-2026-109985 | wpdevteam xSpeed Cache Plugin up to 1.4.2 on WordPress content cross site scripting (EUVD-2026-103220) VulDB Updatesvor 8 Std.CVE-2026-109208 | ThimPress LearnPress Plugin up to 4.4.10 on WordPress Guest Checkout quantity/order_comments cross site scripting (EUVD-2026-103216) VulDB Updatesvor 8 Std.CVE-2026-110653 | LatePoint Appointment Booking Plugin up to 5.7.4 on WordPress verifyOTP toctou (EUVD-2026-103217) VulDB Updatesvor 8 Std.CVE-2026-111601 | Hippooo Hippoo Mobile App Plugin up to 1.12.0 on WordPress token_id cross site scripting (EUVD-2026-103215) VulDB Updatesvor 8 Std.CVE-2026-104734 | meum Kirki Plugin up to 6.3.2 on WordPress Import Endpoint deserialization (EUVD-2026-103214) VulDB Updatesvor 9 Std.CVE-2022-46785 | SquaredUp Dashboard Server SCOM Edition up to 5.7.0 cross site scripting (EUVD-2022-49567)
+8
10 Quellen
CVE-2026-111918 | Vikunja up to 2.6.x RecalculateTaskPositions improper authorization (EUVD-2026-103303)
9 weitere Quellen
VulDB Updatesvor 4 Std.CVE-2026-111912 | Admidio up to 5.0.15 ForumService ForumService::saveTopic topic_uuid authorization (EUVD-2026-103308) VulDB Updatesvor 4 Std.CVE-2026-111913 | Admidio up to 5.0.15 Pdf Export lists_show.php mode authorization (EUVD-2026-103307) VulDB Updatesvor 4 Std.CVE-2026-111910 | thorsten phpMyFAQ up to 4.1.8/4.2.0-alpha Attachment attachment.php improper authorization (EUVD-2026-103310) VulDB Updatesvor 8 Std.CVE-2026-12547 | Red Hat Enterprise Linux SoupAuthManager improper authorization (Nessus ID 366750) VulDB Updatesvor 9 Std.CVE-2022-46792 | Hasura GraphQL Engine up to 2.15.1 Update Many API improper authorization (GHSA-g7mj-g7f4-hgrg / EUVD-2022-49574) VulDB Updatesvor 9 Std.CVE-2026-107744 | ThimPress LearnPress Plugin up to 4.4.10 on WordPress improper authorization (EUVD-2026-103230)
+3
9 Quellen
CVE-2026-63902 | Linux Kernel up to 7.0.11 Cypress M8 cypress_m8.c cypress_read_int_callback out-of-bounds (Nessus ID 366749)
8 weitere Quellen
VulDB Updatesvor 5 Std.CVE-2026-63903 | Linux Kernel up to 7.0.11 Belkin Sa Serial Driver belkin_sa.c belkin_sa_read_int_callback out-of-bounds (Nessus ID 366749) VulDB Updatesvor 5 Std.CVE-2026-63904 | Linux Kernel up to 7.0.11 Usbtmc actual_length out-of-bounds (Nessus ID 366749) VulDB Updatesvor 5 Std.CVE-2026-63942 | Linux Kernel up to 7.0.11 Parport parport_pc.c device_add race condition (Nessus ID 366749) VulDB Updatesvor 5 Std.CVE-2026-63957 | Linux Kernel up to 7.0.11 Safe Serial memory corruption (Nessus ID 366749) VulDB Updatesvor 5 Std.CVE-2026-63956 | Linux Kernel up to 7.0.11 Cypress M8 Serial Driver memory corruption (Nessus ID 366749) VulDB Updatesvor 5 Std.CVE-2026-63963 | Linux Kernel up to 6.12.92/6.18.34/7.0.11 Tcpm out-of-bounds (Nessus ID 366749)
+2

Mehr aus dieser Kategorie

37-Year-Old OpenBSD Kernel Flaw Lets Attackers Gain Root Access – PoC Released
17.10.2026
37-Year-Old Kernel Flaw Exploited to Gain Root Access on OpenBSD — PoC Released
16.10.2026
InjectSetConsole
14.10.2026
Decoding the “Black Box”: Evaluating Agent Tool Chains in Production
07.10.2026
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten [webapps] Drupal Core 10.5.5 - Error-Based SQL Injection

Thematisch verwandte Begriffe: webapps, Drupal, Core, 1055 · 6 Treffer

Videos werden geladen ...

Beiträge werden geladen ...

Videos werden geladen ...

Beiträge werden geladen ...

Videos werden geladen ...

Beiträge werden geladen ...

Videos werden geladen ...

Beiträge werden geladen ...

Videos werden geladen ...

Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken
Zum Aktualisieren ziehen
TTS Reader • tsecurity.de Voice
Nächster Beitrag