frenchmorningmediagroup.com Cross Site Scripting vulnerability OBB-3574276

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2025-49677

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's crypto/lib/mpi module, specifically within the mpi cmp ui function, which can lead to a null pointer dereference. This issue occurs during NVMeTCP...

Some GPO's fail to apply when elastic layering is enabled

With Elastic Layering Apps Only enabled, gpupdate /force may report an error while applying some group policies...

CVE-2023-39952 Advanced permissions not respected when copying entire group folders

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 22.0.0 and prior to versions 22.2.10.13, 23.0.12.8, 24.0.12.4, 25.0.8, 26.0.3, and 27.0.1, a user can access files inside a subfolder of a groupfolder accessible to them, even if advanced...

Weak Cryptography

github.com/supranational/blst is vulnerable to Weak Cryptography. The vulnerability exists due to logic errors in SigValidate function which results in group-check omission...

Advanced permissions not respected when copying entire group folders

None...

Nextcloud Access Control Error Vulnerability

Nextcloud is an open source suite of self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. An access control error vulnerability exists in Nextcloud Server. An attacker could exploit the vulnerability to access files within subfolders of a group...

GHSA-8C37-7QX3-4C4P Blst has logical error in SigValidate in Go bindings

Impact Blst versions v0.3.0 through 0.3.10 failed to perform a signature group-check if the call to SigValidate in the Go bindings was complemented with a check for infinity. Formally speaking, infinity, or the identity element of the elliptic curve group, is a member of the group, and the...

Blst has logical error in SigValidate in Go bindings

Impact Blst versions v0.3.0 through 0.3.10 failed to perform a signature group-check if the call to SigValidate in the Go bindings was complemented with a check for infinity. Formally speaking, infinity, or the identity element of the elliptic curve group, is a member of the group, and the...

CVE-2023-38751

Improper authorization vulnerability in Special Interest Group Network for Analysis and Liaison versions 4.4.0 to 4.7.7 allows the authorized API users to view the organization information of the information receiver that is set as "non-disclosure" in the information provision operation...

Authorization

Improper authorization vulnerability in Special Interest Group Network for Analysis and Liaison versions 4.4.0 to 4.7.7 allows the authorized API users to view the attribute information of the poster that is set as"non-disclosure" in the system settings...

CVE-2023-38752

Improper authorization vulnerability in Special Interest Group Network for Analysis and Liaison versions 4.4.0 to 4.7.7 allows the authorized API users to view the attribute information of the poster that is set as"non-disclosure" in the system settings...

CVE-2023-38751

CVE-2023-38751 affects Special Interest Group Network for Analysis and Liaison’s Inter-SOC Cooperation API. The vulnerability is an improper authorization in the Information Provision function, enabling authorized API users to view the information receiver’s organization data that is marked as no...

CVE-2023-38751

Improper authorization vulnerability in Special Interest Group Network for Analysis and Liaison versions 4.4.0 to 4.7.7 allows the authorized API users to view the organization information of the information receiver that is set as "non-disclosure" in the information provision operation...

CVE-2023-36889

Windows Group Policy Security Feature Bypass Vulnerability...

CVE-2023-36889

Windows Group Policy Security Feature Bypass Vulnerability...

CVE-2023-36889

Windows Group Policy Security Feature Bypass Vulnerability...

Security feature bypass

Windows Group Policy Security Feature Bypass Vulnerability...

CVE-2023-36889 Windows Group Policy Security Feature Bypass Vulnerability

...

CVE-2023-36889

Technical details about CVE-2023-36889 are not publicly available in the provided documents. Monitor for updates from vendors and vulnerability feeds for affected products, impact, and remediation.