CVE-2025-45468

CVE-2025-45468 affects fc-stable-diffusion-plus v1.0.18, caused by insecure permissions that enable privilege escalation and potential compromise of the customer cloud account. CVSS 3.1 base score 8.8 (HIGH) with network attack vector, low attack complexity, and privileges required: LOW. Exploita...

fc-stable-diffusion 安全漏洞

fc-stable-diffusion is an open source tool from Serverless Devs Registry for deploying stable-diffusion to AliCloud Functional Computing. A security vulnerability exists in fc-stable-diffusion v1.0.18, which stems from improper privileges and could lead to elevated privileges and customer cloud...

CVE-2025-45468

Insecure permissions in fc-stable-diffusion-plus v1.0.18 allows attackers to escalate privileges and compromise the customer cloud account...

CVE-2025-45468

Insecure permissions in fc-stable-diffusion-plus v1.0.18 allows attackers to escalate privileges and compromise the customer cloud account...

MAL-2025-3490 Malicious code in fc-online (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a64a01d4995610a37c1690ecaecc64be60f68c266b77ef1c80acceeb303ac71c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fc-online (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a64a01d4995610a37c1690ecaecc64be60f68c266b77ef1c80acceeb303ac71c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

fc-fanshop.de Cross Site Scripting vulnerability OBB-4042896

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious code in alibabacloud-gateway-fc-util-py2 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

kernel: nvme-fc: do not wait in vain when unloading module

In the Linux kernel, the following vulnerability has been resolved: nvme-fc: do not wait in vain when unloading module The module exit path has race between deleting all controllers and freeing 'left over IDs'. To prevent double free a synchronization between nvmedeletectrl and idadestroy has bee...

Linux Distros Unpatched Vulnerability : CVE-2023-52508

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvme-fc: Prevent null pointer dereference in nvmefciogetuuid The nvmefcfcpop structure describing an AEN operation is initialized with a null request structure...

DEBIAN-CVE-2022-49348

In the Linux kernel, the following vulnerability has been resolved: ext4: filter out EXT4FCREPLAY from on-disk superblock field sstate The EXT4FCREPLAY bit in sbi-smountstate is used to indicate that we are in the middle of replay the fast commit journal. This was actually a mistake, since the...

SUSE CVE-2024-56534

In the Linux kernel, the following vulnerability has been resolved: isofs: avoid memory leak in iocharset A memleak was found as below: unreferenced object 0xffff0000d10164d8 size 8: comm "pool-udisksd", pid 108217, jiffies 4295408555 hex dump first 8 bytes: 75 74 66 38 00 cc cc cc utf8...

The vulnerability of the nvme-fc component of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the nvme-fc component in the Linux operating system’s kernel is related to double-freeing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Malicious code in fc-clip (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e13c5bc599f0fffb5c78c22855a708ec4b4d9e4ecafc4868d45f1be980a6d519 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10834 Malicious code in fc-clip (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e13c5bc599f0fffb5c78c22855a708ec4b4d9e4ecafc4868d45f1be980a6d519 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

ROS-20241025-02

Vulnerability of usb-audio component of Linux kernel is related to NULL pointer dereferencing in the sndusbsetsampleratev2v3 function in sound/usb/clock.c. Exploitation of the vulnerability could allow an attacker to cause a denial of service A vulnerability in the target component of the target...

ROS-20241021-09

A vulnerability in the ntfs3 component of the Linux operating system kernel is related to read errors outside the bounds in the ntfslistea function in fs/ntfs3/xattr.c. Exploitation of the vulnerability could allow an attacker to cause a denial of service A vulnerability in the qedr component of...

CVE-2024-50014

In the Linux kernel, the following vulnerability has been resolved: ext4: fix access to uninitialised lock in fc replay path The following kernel trace can be triggered with fstest generic/629 when executed against a filesystem with fast-commit feature enabled: INFO: trying to register non-static...

CVE-2024-50014 ext4: fix access to uninitialised lock in fc replay path

In the Linux kernel, the following vulnerability has been resolved: ext4: fix access to uninitialised lock in fc replay path The following kernel trace can be triggered with fstest generic/629 when executed against a filesystem with fast-commit feature enabled: INFO: trying to register non-static...

CVE-2024-50014 ext4: fix access to uninitialised lock in fc replay path

In the Linux kernel, the following vulnerability has been resolved: ext4: fix access to uninitialised lock in fc replay path The following kernel trace can be triggered with fstest generic/629 when executed against a filesystem with fast-commit feature enabled: INFO: trying to register non-static...