Drupal is warning that hackers are attempting to exploit a "highly critical" SQL injection vulnerability announced earlier ...
On December 30, 2024, a 'Chinese government-sponsored advanced persistent threat actor' breached a system managing confidential data for the U.S. Treasury Department. It was discovered that the ...
US cyber authorities have added a critical Drupal Core SQL injection flaw to their exploited-vulnerabilities list after attacks began targeting unpatched websites using PostgreSQL databases, ...
Attackers who exploited a zero-day vulnerability in BeyondTrust Privileged Remote Access and Remote Support products in December likely also exploited a previously unknown SQL injection flaw in ...
In its warning, Drupal said a vulnerability in this API allows an attacker to send specially crafted requests resulting in ...
Drupal released security updates for a highly critical Drupal Core vulnerability affecting sites that use PostgreSQL.
Drupal warns users that it has seen attempts to exploit CVE-2026-9082 and security firms are seeing attacks against thousands ...
Attackers are currently targeting websites created with the CMS Drupal. However, pages are only vulnerable if they use ...