Lucene search
+L

14 matches found

NVD
NVD
•added 2026/10/30 4:18 a.m.•6 views

CVE-2026-114572

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Domain Login Restrict allows Authentication Bypass. This issue affects Domain Login Restrict versions: from 0.0.0 to 1.5.0...

5.4CVSS0.00193EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/30 3:09 a.m.•15 views

CVE-2026-114572

The Domain Login Restrict module for Drupal (versions 0.0.0 to 1.5.0) is vulnerable to an Authentication Bypass (CWE-288) because it fails to sufficiently enforce login restrictions when users authenticate via methods other than the standard login form. This allows users to log in to domains they...

5.9AI score0.00193EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/30 3:09 a.m.•11 views

CVE-2026-114572 Domain Login Restrict - Moderately critical - Access bypass - SA-CONTRIB-2026-249

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Domain Login Restrict allows Authentication Bypass. This issue affects Domain Login Restrict versions: from 0.0.0 to 1.5.0...

0.00193EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/30 3:09 a.m.•5 views

EUVD-2026-113523

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Domain Login Restrict allows Authentication Bypass. This issue affects Domain Login Restrict versions: from 0.0.0 to 1.5.0...

5.4CVSS5.9AI score0.00193EPSS
SaveExploits0References1
Drupal
Drupal
•added 2026/10/21 12:00 a.m.•9 views

Domain Login Restrict - Moderately critical - Access bypass - SA-CONTRIB-2026-249

This module enables you to restrict user logins on a multi-domain site built with the Domain module, so that users can only log in on the domains assigned to them. The module doesn't sufficiently enforce these restrictions when a user logs in by a method other than the standard login form. This...

5.7AI score0.00193EPSS
SaveExploits0References1
osv_drupal
osv_drupal
•added 2026/07/22 5:53 p.m.•28 views

DRUPAL-CONTRIB-2026-081

In a scenario of a multilingual website with different domain names per language, this module enables you to be automatically connected across the language domains if you are logged on the main language domain. The module doesn't sufficiently validate a short-lived token, allowing an attacker to...

9.8CVSS5.8AI score0.00643EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/07/22 12:00 a.m.•23 views

PT-2026-63535

Name of the Vulnerable Software and Affected Versions Drupal Internationalization Single Sign-On versions 0.0.0 through 1.8.0 Description An authentication bypass exists in the Drupal Internationalization Single Sign-On module. The module fails to sufficiently validate a short-lived token, which...

8.4AI score0.00643EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-1999-0968

Malware in sbrugna...

10CVSS6.4AI score0.04906EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•25 views

EUVD-2005-3173

Malware in sbrugna...

4.6CVSS6.4AI score0.01224EPSS
SaveExploits0References3
Citrix
Citrix
•added 2021/03/22 12:00 a.m.•23 views

Citrix Provisioning "The trust relationship between this workstation and the primary domain failed."

Windows 10 image loosing trust relationship to the domain after reboot. Machine account reset from PVS server succeeds however VM still gets the same error after reboot and can not login with domain account...

7.1AI score
SaveExploits0
Hacker One
Hacker One
•added 2017/05/25 9:35 a.m.•67 views

Cuvva: Your two domain login email address are disclosed in

HI LINK: support-dashboard.corp.cuvva.co while accessing this link it takes to google authentication. then seen source page of that login page then i saw your email that used to login. POC attached. emails are: ███ ██████████ another way is to simply click on to "continue to cuvva.co" you will se...

6.8AI score
SaveExploits0
Kitploit
Kitploit
•added 2014/03/29 8:59 p.m.•32 views

Windows Domain Credentials Phishing Tool

While performing a Pen test for a client i needed to catch a domain user name and password, there are several ways to gain users passwords and it really depends on a lot of factors on how to get it in my case i didn’t had time to wait for the user to enter his credentials and get it using a key...

7.7AI score
SaveExploits0
NVD
NVD
•added 2005/10/06 10:02 a.m.•33 views

CVE-2005-3174

Microsoft Windows 2000 before Update Rollup 1 for SP4 allows users to log on to the domain, even when their password has expired, if the fully qualified domain name FQDN is 8 characters long...

4.6CVSS6.6AI score0.01224EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2000/01/04 12:00 a.m.•10 views

CVE-1999-0987: Improper Authentication

Windows NT does not properly download a system policy if the domain user logs into the domain with a space at the end of the domain name...

10CVSS5.8AI score0.04906EPSS
SaveExploits0References2
Rows per page
Query Builder