EUVD-2025-51543

Malicious code in thick-yellow-rooster npm...

EUVD-2025-51549

Malicious code in thick-azure-horse npm...

EUVD-2025-51548

Malicious code in thick-blue-barracuda npm...

Malicious code in thick-yellow-rooster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6f17db88e61b15f9b5fdfcfaea225d066c96b38cb1b10ed234a5190b0d9bdb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51547

Malicious code in thick-blush-hyena npm...

EUVD-2025-51545

Malicious code in thick-harlequin-panda npm...

MAL-2025-71104 Malicious code in thick-harlequin-panda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f65fce271b408d5f9a8895fa6c3c10c67eb67a5d95e75eb0cd5d60279dadd9a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51544

Malicious code in thick-sapphire-asp npm...

MAL-2025-71101 Malicious code in thick-blue-barracuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51833b183cecfb67e44f4954fcc38ce7f3186a497b732fa67f1615ba597052f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71106 Malicious code in thick-yellow-rooster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6f17db88e61b15f9b5fdfcfaea225d066c96b38cb1b10ed234a5190b0d9bdb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thick_wren_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44f8d1600f4df85dee5e79d2ef50740f02eb914aec1972c3126cc32924d705f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2024-46505

Infoblox BloxOne v2.4 was discovered to contain a business logic flaw due to thick client vulnerabilities...

Important: Red Hat Bug Fix Advisory: LVMS 4.17.4 Bug Fix Update

Updated container images that fix multiple bugs are now available for LVMS 4.17 Logical Volume Manager Storage uses lvm2 through the TopoLVM CSI driver to dynamically provision thin and thick local storage on a cluster with limited resources. Users of LVMS are advised to upgrade to the latest...

CVE-2024-46505

Infoblox BloxOne v2.4 was discovered to contain a business logic flaw due to thick client vulnerabilities...

PT-2025-2738 · Infoblox · Infoblox Bloxone

Name of the Vulnerable Software and Affected Versions: Infoblox BloxOne version 2.4 Description: A business logic flaw was discovered due to thick client vulnerabilities. Recommendations: For Infoblox BloxOne version 2.4, consider restricting access to the thick client until a patch is available...

CVE-2024-46505

CVE-2024-46505 affects Infoblox BloxOne v2.4. The vulnerability is described as a business logic flaw arising from thick-client vulnerabilities in the product. The CVSS v3.1 vector indicates high impact with critical severity (Network attack, no privileges, no user interaction required for exploi...

CVE-2024-46505

Infoblox BloxOne v2.4 was discovered to contain a business logic flaw due to thick client vulnerabilities...

CVE-2024-46505

Infoblox BloxOne v2.4 was discovered to contain a business logic flaw due to thick client vulnerabilities...

CVE-2023-49312

Precision Bridge PrecisionBridge.exe aka the thick client before 7.3.21 allows an integrity violation in which the same license key is used on multiple systems, via vectors involving a Process Hacker memory dump, error message inspection, and modification of a MAC address...

CVE-2023-49312

Precision Bridge PrecisionBridge.exe aka the thick client before 7.3.21 allows an integrity violation in which the same license key is used on multiple systems, via vectors involving a Process Hacker memory dump, error message inspection, and modification of a MAC address...