WordPress Orbit Fox by ThemeIsle Plugin < 2.10.24 is vulnerable to Server Side Request Forgery (SSRF)

Software Orbit Fox by ThemeIsle Type Plugin Vulnerable versions 2.10.24 Fixed in 2.10.24 OWASP Top 10 A3: Sensitive Data Exposure Classification Server Side Request Forgery SSRF CVE CVE-2023-2287 Patch priority Medium CVSS severity Medium 5.5 Developer Claim ownership PSID b60604d1a545 Credits Al...

orbit:ElfFileLoadSymbolsFuzzer: Heap-buffer-overflow in llvm::object::COFFObjectFile::initialize

Detailed Report: https://oss-fuzz.com/testcase?key=6556977234051072 Project: orbit Fuzzing Engine: libFuzzer Fuzz Target: ElfFileLoadSymbolsFuzzer Job Type: libfuzzerasanorbit Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x60c000000b47 Crash State:...

orbit:ElfFileLoadSymbolsFuzzer: Heap-buffer-overflow in checkLinkerOptCommand

Detailed Report: https://oss-fuzz.com/testcase?key=6363674672758784 Project: orbit Fuzzing Engine: libFuzzer Fuzz Target: ElfFileLoadSymbolsFuzzer Job Type: libfuzzerasanorbit Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6040000031bc Crash State: checkLinkerOptComma...

orbitcommunications.com Cross Site Scripting vulnerability OBB-2866824

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

New Linux Malware Framework Lets Attackers Install Rootkit on Targeted Systems

A never-before-seen Linux malware has been dubbed a "Swiss Army Knife" for its modular architecture and its capability to install rootkits. This previously undetected Linux threat, called Lightning Framework by Intezer, is equipped with a plethora of features, making it one of the most intricate...

Researchers Warn of New OrBit Linux Malware That Hijacks Execution Flow

Cybersecurity researchers have taken the wraps off a new and entirely undetected Linux threat dubbed OrBit, signally a growing trend of malware attacks geared towards the popular operating system. The malware gets its name from one of the filenames that's utilized to temporarily store the output ...

Malicious code in eslint-plugin-orbit-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 672da2aa5045428dc24213c61bfec8482a5411b88fadac231c8e895e794364ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-orbit-kotko (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91a2bce7d7286dfc50ee1428b36a8546c1692b41d7bb75cea5e4410a0c99b58a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2821 Malicious code in eslint-plugin-orbit-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 672da2aa5045428dc24213c61bfec8482a5411b88fadac231c8e895e794364ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2822 Malicious code in eslint-plugin-orbit-kotko (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91a2bce7d7286dfc50ee1428b36a8546c1692b41d7bb75cea5e4410a0c99b58a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in orbit-tracking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b514c540f5d1347c7573a09c60655ff0d5981f14a3e86f7d0bfe30316c2e2894 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5118 Malicious code in orbit-tracking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b514c540f5d1347c7573a09c60655ff0d5981f14a3e86f7d0bfe30316c2e2894 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sg-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36ac39fd960a239453b0464c0a79b0727b241130740cdb9544e514cf39f7d8a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6068 Malicious code in sg-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36ac39fd960a239453b0464c0a79b0727b241130740cdb9544e514cf39f7d8a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

orbit:CaptureEventProcessorProcessEventsFuzzer: Stack-buffer-overflow in orbit_client_protos::ApiStringEvent::set_name

Detailed Report: https://oss-fuzz.com/testcase?key=4953198247411712 Project: orbit Fuzzing Engine: libFuzzer Fuzz Target: CaptureEventProcessorProcessEventsFuzzer Job Type: libfuzzerasanorbit Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address: 0x7f136d0cc860 Crash State:...

OSV-2021-906 Heap-buffer-overflow in orbit_object_utils::ElfFileImpl<llvm::object::ELFType<

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35617 Crash type: Heap-buffer-overflow READ 4 Crash state: orbitobjectutils::ElfFileImplllvm::object::ELFType orbitobjectutils::CreateElfFile orbitobjectutils::CreateElfFileFromBuffer...

orbit:ElfFileLoadSymbolsFuzzer: Heap-buffer-overflow in orbit_object_utils::ElfFileImpl<llvm::object::ELFType<

Detailed Report: https://oss-fuzz.com/testcase?key=5808835653664768 Project: orbit Fuzzing Engine: libFuzzer Fuzz Target: ElfFileLoadSymbolsFuzzer Job Type: libfuzzerasanorbit Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x61b000000d03 Crash State:...

orbit:CaptureEventProcessorProcessEventsFuzzer: Heap-use-after-free in orbit_capture_client::GpuQueueSubmissionProcessor::ProcessGpuQueueSubmission

Detailed Report: https://oss-fuzz.com/testcase?key=5684318251909120 Project: orbit Fuzzing Engine: libFuzzer Fuzz Target: CaptureEventProcessorProcessEventsFuzzer Job Type: libfuzzerasanorbit Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x612000078bc8 Crash State:...

orbit:CaptureEventProcessorProcessEventsFuzzer: Heap-use-after-free in GpuQueueSubmissionProcessor::ProcessGpuQueueSubmission

Detailed Report: https://oss-fuzz.com/testcase?key=6733568882638848 Project: orbit Fuzzing Engine: libFuzzer Fuzz Target: CaptureEventProcessorProcessEventsFuzzer Job Type: libfuzzerasanorbit Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x60c000000d48 Crash State:...

CVE-2021-24158

Orbit Fox by ThemeIsle has a feature to add a registration form to both the Elementor and Beaver Builder page builders functionality. As part of the registration form, administrators can choose which role to set as the default for users upon registration. This field is hidden from view for...