CVE-2025-8996 Layout Builder Advanced Permissions - Moderately critical - Access bypass - SA-CONTRIB-2025-097

Missing Authorization vulnerability in Drupal Layout Builder Advanced Permissions allows Forceful Browsing.This issue affects Layout Builder Advanced Permissions: from 0.0.0 before 2.2.0...

CVE-2025-8996

CVE-2025-8996 affects Drupal Layout Builder Advanced Permissions (versions 0.0.0 through 2.1.9/2.2.0 before). The vulnerability is a Missing Authorization issue that enables forceful browsing, enabling access bypass within the affected module, as described across multiple sources (Red Hat, NVD/CV...

CVE-2025-8996 Layout Builder Advanced Permissions - Moderately critical - Access bypass - SA-CONTRIB-2025-097

Missing Authorization vulnerability in Drupal Layout Builder Advanced Permissions allows Forceful Browsing.This issue affects Layout Builder Advanced Permissions: from 0.0.0 before 2.2.0...

CVE-2025-8996 Layout Builder Advanced Permissions - Moderately critical - Access bypass - SA-CONTRIB-2025-097

Missing Authorization vulnerability in Drupal Layout Builder Advanced Permissions allows Forceful Browsing.This issue affects Layout Builder Advanced Permissions: from 0.0.0 before 2.2.0...

CVE-2025-8361 Config Pages - Moderately critical - Access bypass - SA-CONTRIB-2025-093

Missing Authorization vulnerability in Drupal Config Pages allows Forceful Browsing.This issue affects Config Pages: from 0.0.0 before 2.18.0...

CVE-2025-8361 Config Pages - Moderately critical - Access bypass - SA-CONTRIB-2025-093

Missing Authorization vulnerability in Drupal Config Pages allows Forceful Browsing.This issue affects Config Pages: from 0.0.0 before 2.18.0...

CVE-2025-8361

CVE-2025-8361 is a Missing Authorization vulnerability affecting Drupal Config Pages (plugin) prior to 2.18.0, leading to forced browsing of config pages. Affected component: Drupal Config Pages module (versions 0.0.0 through 2.17.9). Root cause: lack of proper authorization checks in config-page...

Drupal Layout Builder Advanced Permissions 安全漏洞

Drupal Layout Builder Advanced Permissions is a permission control extension for the Drupal community. A security vulnerability exists in Drupal Layout Builder Advanced Permissions versions prior to 2.2.0, which stems from a lack of authorization and could lead to forced browsing...

PT-2025-33498 · Drupal · Drupal Config Pages

Name of the Vulnerable Software and Affected Versions: Drupal Config Pages versions 0.0.0 through 2.17.9 Description: Missing authorization allows forceful browsing of Config Pages. Recommendations: Update to version 2.18.0 or later...

Drupal Config Pages 安全漏洞

Drupal Config Pages is a configuration page plugin for the Drupal community. A security vulnerability exists in Drupal Config Pages versions prior to 2.18.0, which stems from a lack of authorization and could lead to forced browsing...

PT-2025-33501 · Drupal · Drupal Layout Builder Advanced Permissions

Name of the Vulnerable Software and Affected Versions: Drupal Layout Builder Advanced Permissions versions 0.0.0 through 2.1.9 Description: Missing authorization allows forceful browsing in Drupal Layout Builder Advanced Permissions. Recommendations: Update to version 2.2.0 or later...

Linux Distros Unpatched Vulnerability : CVE-2024-4767

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - If the browser.privatebrowsing.autostart preference is enabled, IndexedDB files were not properly deleted when the window was closed. This preference is disable...

Linux Distros Unpatched Vulnerability : CVE-2022-45417

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Service Workers did not detect Private Browsing Mode correctly in all cases, which could have led to Service Workers being written to disk for websites visited ...

Linux Distros Unpatched Vulnerability : CVE-2023-25750

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Under certain circumstances, a ServiceWorker's offline cache may have leaked to the file system when using private browsing mode. This vulnerability affects...

Measuring the Carbon Footprint of Cryptographic Privacy-Enhancing Technologies

Privacy-enhancing technologies PETs have attracted significant attention in response to privacy regulations, driving the development of applications that prioritize user data protection. At the same time, the information and communication technology ICT sector faces growing pressure to reduce its...

Files SQL注入漏洞

Files is a single-file PHP application from the individual developer Karl Ward. It can be dragged and dropped into any directory, allowing browsing of the files and directories within. A SQL injection vulnerability exists in Files 0.16.9 and prior versions, which stems from a failure to block...

CVE-2025-7717

Missing Authorization vulnerability in Drupal File Download allows Forceful Browsing.This issue affects File Download: from 0.0.0 before 1.9.0, from 2.0.0 before 2.0.1...

CVE-2025-4296

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in HotelRunner B2B allows Forceful Browsing. This issue affects B2B: before 04.06.2025...

CVE-2025-4296 Open Redirect in HotelRunner's B2B

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in HotelRunner B2B allows Forceful Browsing.This issue affects B2B: before 04.06.2025...

CVE-2025-4296 Open Redirect in HotelRunner's B2B

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in HotelRunner B2B allows Forceful Browsing. This issue affects B2B: before 04.06.2025...