EUVD-2025-9018

Malicious code in bioql PyPI...

CVE-2025-7030

Privilege Defined With Unsafe Actions vulnerability in Drupal Two-factor Authentication TFA allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Two-factor Authentication TFA: from 0.0.0 before 1.11.0...

CVE-2025-7030

The Drupal Two-factor Authentication (TFA) module (versions 0.0.0 through 1.10.0 ) contains a vulnerability where privileges are defined with unsafe actions, allowing for the exploitation of incorrectly configured access control security levels. Specifically, the module fails to sufficiently prev...

CVE-2025-7030: Privilege Defined With Unsafe Actions

Privilege Defined With Unsafe Actions vulnerability in Drupal Two-factor Authentication TFA allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Two-factor Authentication TFA: from 0.0.0 before 1.11.0...

GHSA-HF6C-FGP3-JFCH Drupal Two-factor Authentication (TFA) Vulnerable to Forceful Browsing

Incorrect Authorization vulnerability in Drupal Two-factor Authentication TFA allows Forceful Browsing. This issue affects Two-factor Authentication TFA: from 0.0.0 before 1.10.0...

CVE-2025-31694

The Drupal Two-factor Authentication (TFA) module (versions 0.0.0 through 1.10.0 ) is vulnerable to an Incorrect Authorization issue that allows Forceful Browsing . The root cause is that the module does not sufficiently ensure that known login routes are not overridden by third-party modules, po...

PT-2025-13864 · Drupal · Drupal Two-Factor Authentication

Name of the Vulnerable Software and Affected Versions: Drupal Two-factor Authentication TFA versions 0.0.0 through 1.10.0 Description: The issue is related to an Incorrect Authorization vulnerability in the Drupal Two-factor Authentication TFA module, allowing Forceful Browsing. Recommendations:...