CVE-2025-48446

CVE-2025-48446: Drupal Commerce Alphabank Redirect has an Incorrect Authorization vulnerability enabling functionality misuse. Affected versions are 0.0.0 through 1.0.2; the issue is mitigated by upgrading to 1.0.3. CVSS v3.1 base score 8.8 (High) with NETWORK attack vector, no privileges require...

CVE-2025-48446 Commerce Alphabank Redirect - Moderately critical - Access bypass - SA-CONTRIB-2025-067

Incorrect Authorization vulnerability in Drupal Commerce Alphabank Redirect allows Functionality Misuse.This issue affects Commerce Alphabank Redirect: from 0.0.0 before 1.0.3...

CVE-2025-48445 Commerce Eurobank (Redirect) - Moderately critical - Access bypass - SA-CONTRIB-2025-066

Incorrect Authorization vulnerability in Drupal Commerce Eurobank Redirect allows Functionality Misuse.This issue affects Commerce Eurobank Redirect: from 0.0.0 before 2.1.1...

CVE-2025-48445 Commerce Eurobank (Redirect) - Moderately critical - Access bypass - SA-CONTRIB-2025-066

Incorrect Authorization vulnerability in Drupal Commerce Eurobank Redirect allows Functionality Misuse.This issue affects Commerce Eurobank Redirect: from 0.0.0 before 2.1.1...

CVE-2025-48445

CVE-2025-48445 is an Incorrect Authorization vulnerability in Drupal Commerce Eurobank (Redirect) that allows functionality misuse. Affected versions are 0.0.0 through 2.1.0 (officially noted as before 2.1.1); the issue enables bypassing authorization controls to perform unauthorized actions with...

CVE-2025-48445 Commerce Eurobank (Redirect) - Moderately critical - Access bypass - SA-CONTRIB-2025-066

Incorrect Authorization vulnerability in Drupal Commerce Eurobank Redirect allows Functionality Misuse.This issue affects Commerce Eurobank Redirect: from 0.0.0 before 2.1.1...

CVE-2025-48013

CVE-2025-48013 affects the Drupal Quick Node Block. It is a Missing Authorization vulnerability that enables forceful browsing of rendered nodes for versions 0.0.0 through 1.9.9 (affected up to before 2.0.0). Root cause: lack of authorization checks in the Quick Node Block module. Impact: unautho...

CVE-2025-48013 Quick Node Block - Moderately critical - Access bypass - SA-CONTRIB-2025-065

Missing Authorization vulnerability in Drupal Quick Node Block allows Forceful Browsing.This issue affects Quick Node Block: from 0.0.0 before 2.0.0...

CVE-2025-48013 Quick Node Block - Moderately critical - Access bypass - SA-CONTRIB-2025-065

Missing Authorization vulnerability in Drupal Quick Node Block allows Forceful Browsing.This issue affects Quick Node Block: from 0.0.0 before 2.0.0...

CVE-2025-48013 Quick Node Block - Moderately critical - Access bypass - SA-CONTRIB-2025-065

Missing Authorization vulnerability in Drupal Quick Node Block allows Forceful Browsing.This issue affects Quick Node Block: from 0.0.0 before 2.0.0...

CVE-2025-48444

Drupal Quick Node Block contains a Missing Authorization vulnerability that allows forceful browsing. Affected: versions 0.0.0 through 1.9.9; fixed in 2.0.0+. Impact: unauthorized access (information disclosure via listing node labels) as described in SA-CONTRIB-2025-064. CVSS v3.1 base score 5.3...

CVE-2025-48444 Quick Node Block - Moderately critical - Access bypass - SA-CONTRIB-2025-064

Missing Authorization vulnerability in Drupal Quick Node Block allows Forceful Browsing.This issue affects Quick Node Block: from 0.0.0 before 2.0.0...

CVE-2025-48444 Quick Node Block - Moderately critical - Access bypass - SA-CONTRIB-2025-064

Missing Authorization vulnerability in Drupal Quick Node Block allows Forceful Browsing.This issue affects Quick Node Block: from 0.0.0 before 2.0.0...

CVE-2025-48444 Quick Node Block - Moderately critical - Access bypass - SA-CONTRIB-2025-064

Missing Authorization vulnerability in Drupal Quick Node Block allows Forceful Browsing.This issue affects Quick Node Block: from 0.0.0 before 2.0.0...

Microsoft Patches 67 Vulnerabilities Including WEBDAV Zero-Day Exploited in the Wild

Microsoft has released patches to fix 67 security flaws, including one zero-day bug in Web Distributed Authoring and Versioning WebDAV that it said has come under active exploitation in the wild. Of the 67 vulnerabilities, 11 are rated Critical and 56 are rated Important in severity. This include...

Microsoft Patches 67 Vulnerabilities Including WEBDAV Zero-Day Exploited in the Wild

Microsoft has released patches to fix 67 security flaws, including one zero-day bug in Web Distributed Authoring and Versioning WebDAV that it said has come under active exploitation in the wild. Of the 67 vulnerabilities, 11 are rated Critical and 56 are rated Important in severity. This include...

Drupal Commerce Alphabank Redirect 安全漏洞

Drupal Commerce Alphabank Redirect is a redirect banking tool for the Drupal community. A security vulnerability exists in Drupal Commerce Alphabank Redirect versions prior to 1.0.3 that stems from improper authorization and could lead to feature abuse...

Drupal Quick Node Block 安全漏洞

Drupal Quick Node Block is a Drupal plugin for the Drupal community. A security vulnerability exists in Drupal Quick Node Block versions prior to 2.0.0, which stems from a lack of authorization and could lead to forced browsing...

PT-2025-25222 · Drupal · Drupal Lightgallery

Name of the Vulnerable Software and Affected Versions: Drupal Lightgallery versions 0.0.0 through 1.6.0 Description: The issue affects Drupal Lightgallery, allowing Cross-Site Scripting XSS due to improper neutralization of input during web page generation. Recommendations: For versions 0.0.0...

PT-2025-25218 · Drupal · Drupal Quick Node Block

Name of the Vulnerable Software and Affected Versions: Drupal Quick Node Block versions 0.0.0 through 1.9.9 Description: The issue is related to a Missing Authorization vulnerability in Drupal Quick Node Block, which allows Forceful Browsing. Recommendations: For versions 0.0.0 through 1.9.9,...