MAL-2025-20267 Malicious code in fb-jake (npm)

The package fb-jake was found to contain malicious code...

MAL-2025-18526 Malicious code in dl-fb (npm)

The package dl-fb was found to contain malicious code...

CVE-2025-7577

CVE-2025-7577 affects Teledyne FLIR FB-Series O and FLIR FH-Series ID, version 1.3.2.16. The root cause is a hard-coded password that enables a remote attack. Documented impact indicates potential exposure of credentials and partial confidentiality impact, with attack vector over the network and ...

CVE-2025-7577: Use of Hard-coded Password

A vulnerability was found in Teledyne FLIR FB-Series O and FLIR FH-Series ID 1.3.2.16. It has been classified as problematic. This affects an unknown part. The manipulation leads to use of hard-coded password. It is possible to initiate the attack remotely. The complexity of an attack is rather...

Teledyne FLIR FB-Series O和Teledyne FLIR FH-Series ID 安全漏洞

The Teledyne FLIR FB-Series O and Teledyne FLIR FH-Series ID are both a series of thermal imaging cameras from Teledyne FLIR USA. A security vulnerability exists in Teledyne FLIR FB-Series O and Teledyne FLIR FH-Series ID version 1.3.2.16, which stems from the use of hard-coded passwords...

PT-2025-29426 · Teledyne Flir · Teledyne Flir Fb-Series O +1

Name of the Vulnerable Software and Affected Versions: Teledyne FLIR FB-Series O versions 1.3.2.16 Teledyne FLIR FH-Series versions 1.3.2.16 Description: A critical issue exists in Teledyne FLIR FB-Series O and FLIR FH-Series. The vulnerability is related to improper access controls within the...

CVE-2025-7576: Improper Access Control

A vulnerability was found in Teledyne FLIR FB-Series O and FLIR FH-Series ID 1.3.2.16 and classified as critical. Affected by this issue is some unknown functionality of the file /priv/production/production.html of the component Production Tools. The manipulation leads to improper access controls...

CVE-2025-7578: Improper Neutralization of Special Elements used in a Command

A vulnerability was found in Teledyne FLIR FB-Series O and FLIR FH-Series ID 1.3.2.16. It has been declared as critical. This vulnerability affects the function sendCommand of the file runcmd.sh. The manipulation of the argument cmd leads to command injection. The attack can be initiated remotely...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a divide-by-0 error in the fbcvthperiod function, which could cause the kernel to crash...

Malicious code in fb-error-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7df1010f67c9aa7b88340ac8b1041d477068c17370f2d9eaa865a75e3e21deb7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5497 Malicious code in fb-error-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7df1010f67c9aa7b88340ac8b1041d477068c17370f2d9eaa865a75e3e21deb7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in fb-error-lite

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CVE-2025-50022

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JK WP-FB-AutoConnect wp-fb-autoconnect allows Stored XSS.This issue affects WP-FB-AutoConnect: from n/a through = 4.6.4...

CVE-2025-50022

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JK WP-FB-AutoConnect wp-fb-autoconnect allows Stored XSS.This issue affects WP-FB-AutoConnect: from n/a through = 4.6.4...

CVE-2025-50022 WordPress WP-FB-AutoConnect plugin <= 4.6.3 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in justink WP-FB-AutoConnect allows Stored XSS. This issue affects WP-FB-AutoConnect: from n/a through 4.6.3...

CVE-2025-50022

CVE-2025-50022 is a stored XSS in the WordPress plug‑in WP-FB-AutoConnect. Affected versions are WP-FB-AutoConnect up to 4.6.3 (per NVD/Red Hat/CVE records). Root cause: improper neutralization of input during web page generation leading to stored cross‑site scripting. Public details indicate the...

CVE-2025-50022: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JK WP-FB-AutoConnect wp-fb-autoconnect allows Stored XSS.This issue affects WP-FB-AutoConnect: from n/a through = 4.6.4...

WordPress plugin WP-FB-AutoConnect 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

PT-2025-26379 · WordPress · Wp-Fb-Autoconnect

Name of the Vulnerable Software and Affected Versions: WP-FB-AutoConnect versions through 4.6.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables potential attackers to inject...

SUSE CVE-2022-50221

In the Linux kernel, the following vulnerability has been resolved: drm/fb-helper: Fix out-of-bounds access Clip memory range to screen-buffer size to avoid out-of-bounds access in fbdev deferred I/O's damage handling. Fbdev's deferred I/O can only track pages. From the range of pages, the damage...