DRUPAL-CONTRIB-2026-125

This module enables you to add an extra layer of verification for user registration. The module doesn't sufficiently filter user-supplied input before output, resulting in an unauthenticated reflected Cross-site Scripting XSS vulnerability...

PT-2026-84899

Name of the Vulnerable Software and Affected Versions Drupal Email Verification / SMS Verification / OTP Verification versions 0.0.0 through 2.4.0 Description An unauthenticated reflected Cross-site Scripting XSS issue exists because the module does not sufficiently filter user-supplied input...

EUVD-2026-50437

A vulnerability in the Agent Development Kit ADK allows for continuation forgery in tool confirmations. An attacker who is able to manipulate or inject events into the session history can execute unauthorized tools by forging a tool confirmation response. This is possible because the framework di...

CVE-2026-18236

Technical details are not publicly available in the provided documents. The ADK continuation forgery vulnerability description is repeated across sources without specifics on affected versions, exploit methods, or mitigations. Monitor for updates.

PT-2026-65861

Name of the Vulnerable Software and Affected Versions Agent Development Kit affected versions not specified Description An issue allows for continuation forgery in tool confirmations. An attacker capable of manipulating or injecting events into the session history can execute unauthorized tools b...

Interspire Email Marketer Authentication Bypass

The vulnerability of the user registration verification function in the init.php script of the Interspire Email Marketer IEM software lies in the deficiencies of the authentication process. Exploiting this vulnerability allows a malicious actor to bypass the authentication process and obtain...