Renting a number for SMS will help when registering pages in social networks, such as whatsapp, facebook, twitter, classmates, VKontakte, etc.

According to the Drupal developers, a security hole, tracked as CVE-2019-6340, is caused by the lack of proper data cleaning in some types of fields, which in some cases may allow an attacker to execute arbitrary PHP code. The problem was discovered by Samuel Mortenson of the Drupal security group.

Operation CVE-2019-6340 is possible if the RESTful Web Services core module is enabled and it allows PATCH or POST requests. Operation is also possible if another web services module is included, such as JSON: API in Drupal 8 or RESTful web services or services in Drupal 7.

Drupal 8.6.10 and 8.5.11 should fix the vulnerability. Drupal 7 does not need to be updated, but there are some updates for modules added to Drupal 7 that users are recommended to install.

“To immediately fix the vulnerability, you can disable all web service modules or configure your web server (s) to prohibit PUT / PATCH / POST requests to web service resources,” Drupal said in a message. “Please note that web services resources may be available in several ways, depending on the configuration of your server (s). For Drupal 7, resources, for example, are usually accessible through paths (pure URLs) and through arguments to the q query argument. For Drupal 8, paths can still function if preceded by index.php /. "

It is important that users install updates as soon as possible, given that very often vulnerabilities for Drupal are exploited in the wild shortly after the release of the fixes.

Last year, cybercriminals hacked into a significant number of Drupal sites using two vulnerabilities called Drupalgeddon2 and Drupalgeddon3. Attackers used flaws to deliver RAT, cryptocurrencies and scammers from technical support.

Other recent attacks included exploits that linked Drupalgeddon 2 to a Linux kernel vulnerability known as DirtyCOW.