567 matches found
Disable Login Page - Critical - Access bypass - SA-CONTRIB-2025-124
This module enables you to disable the standard Drupal login form /user/login so site owners can prevent interactive logins via the UI. The module does not sufficiently block authentication when the REST/HTTP login route is used. An attacker or legitimate user with valid credentials can...
DRUPAL-CONTRIB-2025-116
This module provides the ability to convert any entity form into a simple multi-step form. The module doesn’t sufficiently filter certain user-provided text leading to a cross-site scripting XSS vulnerability. This vulnerability is mitigated by the fact that an attacker must have a role with the...
CVE-2025-12466
The Drupal Simple OAuth (OAuth2) & OpenID Connect module is vulnerable to an Authentication Bypass Using an Alternate Path or Channel (CWE-288). This flaw allows an attacker to bypass authentication mechanisms, potentially gaining unauthorized access to the system. The issue affects versions 6.0....
CVE-2025-12082
An Incorrect Authorization vulnerability in the Drupal CivicTheme Design System allows for Forceful Browsing . This issue impacts versions from 0.0.0 before 1.12.0 . The root cause stems from improper authorization, which could lead to unauthorized access to restricted information. Remediation is...
Simple OAuth (OAuth2) & OpenID Connect - Critical - Access bypass - SA-CONTRIB-2025-114
This module introduces an OAuth 2.0 authorization server, which can be configured to protect your Drupal instance with access tokens, or allow clients to request new access tokens and refresh them. The module doesn't sufficiently respect granted scopes, it affects all access checks that are based...
Drupal CivicTheme Design System module < 1.12.0 - Unauthenticated Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure vulnerability discovered by Lee Rowlands larowlan in WordPress Module CivicTheme Design System versions 1.12.0...
Drupal CivicTheme Design System module < 1.12.0 - Unauthenticated Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS vulnerability discovered by Adam Bramley acbramley in WordPress Module CivicTheme Design System versions 1.12.0...
EUVD-2012-1633
Malware in sbrugna...
EUVD-2008-4577
Malware in sbrugna...
EUVD-2012-1648
Malware in sbrugna...
EUVD-2013-7171
Malware in sbrugna...
EUVD-2013-4130
Malware in sbrugna...
EUVD-2011-0911
Malware in sbrugna...
EUVD-2012-2704
Malware in sbrugna...
EUVD-2013-6864
Malware in sbrugna...
EUVD-2012-4414
Malware in sbrugna...
EUVD-2009-4479
Malware in sbrugna...
EUVD-2015-4402
Malware in sbrugna...