668 matches found
CVE-2025-58593
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeisle Orbit Fox by ThemeIsle themeisle-companion allows Stored XSS.This issue affects Orbit Fox by ThemeIsle: from n/a through = 3.0.0...
CVE-2025-58593
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeisle Orbit Fox by ThemeIsle themeisle-companion allows Stored XSS.This issue affects Orbit Fox by ThemeIsle: from n/a through = 3.0.0...
WordPress Orbit Fox by ThemeIsle Plugin <= 3.0.0 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by Michael in WordPress Plugin Orbit Fox by ThemeIsle versions = 3.0.0...
CVE-2025-58593 WordPress Orbit Fox by ThemeIsle Plugin <= 3.0.0 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeisle Orbit Fox by ThemeIsle themeisle-companion allows Stored XSS.This issue affects Orbit Fox by ThemeIsle: from n/a through = 3.0.0...
CVE-2025-58593 WordPress Orbit Fox by ThemeIsle Plugin <= 3.0.0 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeisle Orbit Fox by ThemeIsle themeisle-companion allows Stored XSS.This issue affects Orbit Fox by ThemeIsle: from n/a through = 3.0.0...
CVE-2025-58593
CVE-2025-58593 : Stored XSS in Orbit Fox by ThemeIsle (WordPress plugin) due to improper input neutralization during web page generation. Affected: Orbit Fox versions up to and including 3.0.0. Remediation: update Orbit Fox to a version later than 3.0.0. Details are corroborated by Patchstack/PT-...
PT-2025-35728
Name of the Vulnerable Software and Affected Versions: Orbit Fox versions through 3.0.0 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Stored Cross-site Scripting XSS. Recommendations: Update Orbit Fox to a version later...
WordPress plugin Orbit Fox by ThemeIsle 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...
Silver Fox APT Exploits Signed Windows Driver to Deliver ValleyRAT
Check Point reports Silver Fox APT using a signed WatchDog driver flaw to disable Windows security and deliver…...
CVE-2025-55420
A Reflected Cross Site Scripting XSS vulnerability was found in /index.php in FoxCMS v1.2.6. When a crafted script is sent via a GET request, it is reflected unsanitized into the HTML response. This permits execution of arbitrary JavaScript code when a logged-in user submits the malicious input...
Malicious code in fox-cloud-mjp330-project (npm)
The package fox-cloud-mjp330-project was found to contain malicious code...
Malicious code in prairie-fox-oai169-project (npm)
The package prairie-fox-oai169-project was found to contain malicious code...
Malicious code in yonder-fox-kwk428-project (npm)
The package yonder-fox-kwk428-project was found to contain malicious code...
Malicious code in fox-lagoon-hub517-project (npm)
The package fox-lagoon-hub517-project was found to contain malicious code...
Malicious code in fox-thunder-hlv017-project (npm)
The package fox-thunder-hlv017-project was found to contain malicious code...
Malicious code in fox-island-zot837-project (npm)
The package fox-island-zot837-project was found to contain malicious code...
Malicious code in fox-tundra-vjc448-project (npm)
The package fox-tundra-vjc448-project was found to contain malicious code...
Malicious code in fox-nugget-spj176-project (npm)
The package fox-nugget-spj176-project was found to contain malicious code...
fox (>=1.5.0 <=1.6.2), pomodoro-timer (>=0.0.4 <=0.0.5) +3 more potentially affected by unknown CVE via after-time (>=0.0.0 <=0.0.1)
after-time NPM version =0.0.0, =1.5.0, =0.0.4, =0.0.0, =0.0.0, =0.0.1 - tomato-timer =0.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-14147...