MAL-2025-47876 Malicious code in fc-system-testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 192ca56fc1f77c6e39d9fdded9dbee0f4973f1fc49ee37e5f773d9f60d70858c The OpenSSF Package Analysis project identified 'fc-system-testing' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

CVE-2023-53245 scsi: storvsc: Fix handling of virtual Fibre Channel timeouts

In the Linux kernel, the following vulnerability has been resolved: scsi: storvsc: Fix handling of virtual Fibre Channel timeouts Hyper-V provides the ability to connect Fibre Channel LUNs to the host system and present them in a guest VM as a SCSI device. I/O to the vFC device is handled by the...

CLSA-2025-1757693980 kernel: Fix of 40 CVEs

x86/kvm: Disable kvmclock on all CPUs on shutdown CVE-2021-47110 - posix-cpu-timers: fix race between handleposixcputimers and posixcputimerdel CVE-2025-38352 - cifs: fix double free race when mount fails in cifsgetroot CVE-2022-48919 - aio: mark AIO pseudo-fs noexec CVE-2016-10044 - cifs:...

PT-2025-54974

Уязвимость функции nvme fc create association модуля drivers/nvme/host/fc.c драйвера NVME ядра операционной системы Linux связана с отсутствием синхронизации. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

Malicious code in @zalastax/nolb-fc (npm)

The package @zalastax/nolb-fc was found to contain malicious code...

MAL-2025-11436 Malicious code in @zalastax/nolb-fc (npm)

The package @zalastax/nolb-fc was found to contain malicious code...

Malicious code in fc-card-overview (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52e92e70129fc8f9de1f5052d516f6fd499edcfc902e3f08c68db8c3ea792448 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in fc-card-overview

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in fc-accordion

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in fc-accordion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 210de408ab14e017cef0be232b4fa4a6e52c465f94891c6101375adccd1df98c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-22503

Name of the Vulnerable Software and Affected Versions fc-stable-diffusion-plus version 1.0.18 Description The issue is related to insecure permissions, which can allow attackers to escalate privileges and compromise the customer cloud account. Recommendations For fc-stable-diffusion-plus version...

CVE-2025-45468: Incorrect Permission Assignment for Critical Resource

Insecure permissions in fc-stable-diffusion-plus v1.0.18 allows attackers to escalate privileges and compromise the customer cloud account...

fc-stable-diffusion 安全漏洞

fc-stable-diffusion is an open source tool from Serverless Devs Registry for deploying stable-diffusion to AliCloud Functional Computing. A security vulnerability exists in fc-stable-diffusion v1.0.18, which stems from improper privileges and could lead to elevated privileges and customer cloud...

CVE-2025-45468

Insecure permissions in fc-stable-diffusion-plus v1.0.18 allows attackers to escalate privileges and compromise the customer cloud account...

CVE-2025-45468

The open-source tool fc-stable-diffusion (and specifically fc-stable-diffusion-plus version 1.0.18 ) is vulnerable to a privilege escalation flaw caused by incorrect permission assignment for critical resources. This vulnerability allows an attacker to escalate privileges and potentially compromi...

CVE-2025-45468

Insecure permissions in fc-stable-diffusion-plus v1.0.18 allows attackers to escalate privileges and compromise the customer cloud account...

Malicious code in fc-online (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a64a01d4995610a37c1690ecaecc64be60f68c266b77ef1c80acceeb303ac71c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in fc-online

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-3490 Malicious code in fc-online (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a64a01d4995610a37c1690ecaecc64be60f68c266b77ef1c80acceeb303ac71c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

fc-fanshop.de Cross Site Scripting vulnerability OBB-4042896

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...