Malicious code in tools-fb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30da78dfec11e1d381c43bdd8a43c45655acd9e01594fe5a1285e6b42d51b030 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fb-chat-fca (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40cfd2dc0e1c91cb5fe67a2826fcfbea3df53885e338a77776a08efcfa7513f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-326 Malicious code in fb-chat-fca (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40cfd2dc0e1c91cb5fe67a2826fcfbea3df53885e338a77776a08efcfa7513f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress WP-FB-AutoConnect Plugin <= 4.6.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software WP-FB-AutoConnect Type Plugin Vulnerable versions = 4.6.1 Fixed in 4.6.2 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-37974 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 6dc7649557b3 Credits Nguyen Xuan Chien...

kernel: drm/fb-helper: Fix out-of-bounds access

In the Linux kernel, the following vulnerability has been resolved: drm/fb-helper: Fix out-of-bounds access Clip memory range to screen-buffer size to avoid out-of-bounds access in fbdev deferred I/O's damage handling. Fbdev's deferred I/O can only track pages. From the range of pages, the damage...

PT-2025-26147

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns an out-of-bounds access in the Linux kernel's drm/fb-helper. It occurs because fbdev's deferred I/O can only track pages, and when the fbdev screen buffer ends near th...

fb-marketing.hu Cross Site Scripting vulnerability OBB-3273544

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2023-36610

Уязвимость функции drm fb helper damage модуля drivers/gpu/drm/drm fb helper.c драйвера инфраструктуры прямого рендеринга DRI ядра операционной системы Linux связана с ошибкой единичного смещения. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

fb-rm.de Cross Site Scripting vulnerability OBB-3255436

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ax-env (>=0.2.2, <=0.3.1), fb-sapp (>=0.5.3, <=0.5.4) +4 more potentially affected by CVE-2022-4899 via zstd (>=1.4.4.0, <=1.5.2.6)

zstd PYPI version =1.4.4.0, =0.2.2, =0.5.3, =0.0.1a0, =1.0.0rc1, =1.3.0 Source cves: CVE-2022-4899 Source advisory: OSV:GHSA-5C9C-6X87-F9VM...

Malicious code in fb-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 239d16a80a782968d51143e524467e81bd07b6f9ab7037cbdda7254263dbfbe1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fb-chat-api2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9b51dc190a665e3875553fa564c55b34ab3ac98839656f3033486544d386449 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-325 Malicious code in fb-chat-api2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9b51dc190a665e3875553fa564c55b34ab3ac98839656f3033486544d386449 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-327 Malicious code in fb-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 239d16a80a782968d51143e524467e81bd07b6f9ab7037cbdda7254263dbfbe1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

priyanshbot12 (1.0.2) potentially affected by unknown CVE via fb-tools (0.0.1-security)

fb-tools NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on fb-tools and may be impacted: - priyanshbot12 1.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2023-327...

SUSE CVE-2020-10699

A flaw was found in Linux, in targetcli-fb versions 2.1.50 and 2.1.51 where the socket used by targetclid was world-writable. If a system enables the targetclid socket, a local attacker can use this flaw to modify the iSCSI configuration and escalate their privileges to root...

SUSE CVE-2020-13867

Open-iSCSI targetcli-fb through 2.1.52 has weak permissions for /etc/target and for the backup directory and backup files...

Ubuntu: Security Advisory (USN-4871-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-53133

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains use-after-free flaws within the fbdev and smscufx components. These flaws can occur when a USB device is physically removed. The fix introduces the ufx ops...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, and more, from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices version 3.5.51, which originates from an improper access control vulnerability in...