14 matches found
CVE-2026-114572
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Domain Login Restrict allows Authentication Bypass. This issue affects Domain Login Restrict versions: from 0.0.0 to 1.5.0...
CVE-2026-114572
The Domain Login Restrict module for Drupal (versions 0.0.0 to 1.5.0) is vulnerable to an Authentication Bypass (CWE-288) because it fails to sufficiently enforce login restrictions when users authenticate via methods other than the standard login form. This allows users to log in to domains they...
CVE-2026-114572 Domain Login Restrict - Moderately critical - Access bypass - SA-CONTRIB-2026-249
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Domain Login Restrict allows Authentication Bypass. This issue affects Domain Login Restrict versions: from 0.0.0 to 1.5.0...
EUVD-2026-113523
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Domain Login Restrict allows Authentication Bypass. This issue affects Domain Login Restrict versions: from 0.0.0 to 1.5.0...
Domain Login Restrict - Moderately critical - Access bypass - SA-CONTRIB-2026-249
This module enables you to restrict user logins on a multi-domain site built with the Domain module, so that users can only log in on the domains assigned to them. The module doesn't sufficiently enforce these restrictions when a user logs in by a method other than the standard login form. This...
DRUPAL-CONTRIB-2026-081
In a scenario of a multilingual website with different domain names per language, this module enables you to be automatically connected across the language domains if you are logged on the main language domain. The module doesn't sufficiently validate a short-lived token, allowing an attacker to...
PT-2026-63535
Name of the Vulnerable Software and Affected Versions Drupal Internationalization Single Sign-On versions 0.0.0 through 1.8.0 Description An authentication bypass exists in the Drupal Internationalization Single Sign-On module. The module fails to sufficiently validate a short-lived token, which...
EUVD-1999-0968
Malware in sbrugna...
EUVD-2005-3173
Malware in sbrugna...
Citrix Provisioning "The trust relationship between this workstation and the primary domain failed."
Windows 10 image loosing trust relationship to the domain after reboot. Machine account reset from PVS server succeeds however VM still gets the same error after reboot and can not login with domain account...
Cuvva: Your two domain login email address are disclosed in
HI LINK: support-dashboard.corp.cuvva.co while accessing this link it takes to google authentication. then seen source page of that login page then i saw your email that used to login. POC attached. emails are: ███ ██████████ another way is to simply click on to "continue to cuvva.co" you will se...
Windows Domain Credentials Phishing Tool
While performing a Pen test for a client i needed to catch a domain user name and password, there are several ways to gain users passwords and it really depends on a lot of factors on how to get it in my case i didn’t had time to wait for the user to enter his credentials and get it using a key...
CVE-2005-3174
Microsoft Windows 2000 before Update Rollup 1 for SP4 allows users to log on to the domain, even when their password has expired, if the fully qualified domain name FQDN is 8 characters long...
CVE-1999-0987: Improper Authentication
Windows NT does not properly download a system policy if the domain user logs into the domain with a space at the end of the domain name...