CVE Listesine Dön
CVE-2018-7600 CISA KEV · Aktif SömürülüyorFidye Yazılımı İlişkili

drupal: Unsanitized requests allow remote attackers to execute arbitrary code

CVSS Skor

9.8

EPSS İhtimal

%100.0

Risk Skoru

19.6

Yayın

8 yıl önce

Overview (Genel Bakış)Public Exploits (14)Newsroom (Haberler)Vulnerability Timeline

Public Exploits · GitHub ve Metasploit Intelligence

Bu sekme NVD’nin exploit olarak etiketlediği kaynakları, CVE kimliğiyle eşleşen GitHub depolarını ve Rapid7 Metasploit Framework modüllerini tarar. Yalnızca bulunan gerçek kaynak bağlantıları gösterilir.

G
SanCody/DC1-Penetration-Testing-Report
GitHub

Penetration test report for the DC-1 VulnHub machine: Drupalgeddon2 (CVE-2018-7600) RCE, credential discovery, and SUID privilege escalation to root. Includes CVSS-rated findings and a remediation roadmap.

Public PoCKaynak güncellemesi: 14.10.2026 14:38:40
G
CyberCTF/vulhub-drupal-cve-2018-7600
GitHub

Vulhub drupal/CVE-2018-7600: Drupalgeddon 2 on Drupal 8.5.0, run with Isoloom

Public PoCKaynak güncellemesi: 10.10.2026 21:42:31
G
K52-ai/CVE-2018-7600
GitHub

CVE-2018-7600 (Drupalgeddon2) — Drupal RCE exploit tool. Standalone Python PoC for authorized security testing. CVSS 9.8 Critical. by K52-ai.

Public PoCKaynak güncellemesi: 04.10.2026 17:05:49
G
Aihikk/DC-1_Vulnhub_Walkthrough
GitHub

VulnHub DC-1 boot2root — unauthenticated RCE via Drupalgeddon2 (CVE-2018-7600) to SUID find privilege escalation, with severity-rated findings and remediation.

Public PoCKaynak güncellemesi: 06.10.2026 14:33:38
G
elkhaoudari/CVE-2018-7600-PoC
GitHub

elkhaoudari/CVE-2018-7600-PoC

Public PoCKaynak güncellemesi: 30.09.2026 14:08:46
G
Shams-Ul-Mehmood/CVE-2018-7600-Drupalgeddon2-RCE
GitHub

Shams-Ul-Mehmood/CVE-2018-7600-Drupalgeddon2-RCE

Public PoCKaynak güncellemesi: 06.08.2026 13:02:19
G
Prapul1/VulnHub-DC1-Writeup
GitHub

VulnHub DC-1 boot-to-root — exploiting CVE-2018-7600 (Drupalgeddon2) for RCE, extracting DB credentials from settings.php, forging admin password hash, and escalating to root via SUID find.

Public PoCKaynak güncellemesi: 14.08.2026 10:05:37
G
muhammedkayag/CVE-2018-7600
GitHub

PoC of CVE-2018-7600

Public PoCKaynak güncellemesi: 19.06.2026 08:24:36
G
nayem-m/drupalgeddon2-cli
GitHub

CLI rewrite of the Drupalgeddon2 (CVE-2018-7600) PoC — for authorised testing/education

Public PoCKaynak güncellemesi: 11.06.2026 05:16:11
E
Drupal < 8.3.9 / < 8.4.6 / < 8.5.1 - 'Drupalgeddon2' Remote Code Execution (Metasploit)
Exploit-DB

Drupal < 8.3.9 / < 8.4.6 / < 8.5.1 - 'Drupalgeddon2' Remote Code Execution (Metasploit)

Exploit referansıKaynak güncellemesi: 17.04.2018 00:00:00
E
Drupal < 7.58 / < 8.3.9 / < 8.4.6 / < 8.5.1 - 'Drupalgeddon2' Remote Code Execution
Exploit-DB

Drupal < 7.58 / < 8.3.9 / < 8.4.6 / < 8.5.1 - 'Drupalgeddon2' Remote Code Execution

Exploit referansıKaynak güncellemesi: 13.04.2018 00:00:00
E
Drupal < 8.3.9 / < 8.4.6 / < 8.5.1 - 'Drupalgeddon2' Remote Code Execution (PoC)
Exploit-DB

Drupal < 8.3.9 / < 8.4.6 / < 8.5.1 - 'Drupalgeddon2' Remote Code Execution (PoC)

Exploit referansıKaynak güncellemesi: 13.04.2018 00:00:00
N
projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-7600.yaml
Nuclei

Nuclei: Drupal - Remote Code Execution

Exploit referansı
G
Dungsocool/CVE-2018-7600
GitHub

Dungsocool/CVE-2018-7600

Public PoC

İlgili Benzer Açıklar

Bu açığı API ile alın

Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.

Ücretsiz anahtar alBelgeler
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2018-7600"