Lucene search
+L

646 matches found

Kitploit
Kitploit
•added 2026/09/24 11:53 a.m.•18 views

Orbit

ORBIT Blockchain Transactions Investigation Tool 3.2-blue.svg" Introduction Orbit is designed to explore network of a blockchain wallet by recursively crawling through transaction history. The data is rendered as a graph to reveal major sources, sinks and suspicious connections. Note: Orbit only...

6AI score
SaveExploits0References3
Kitploit
Kitploit
•added 2026/09/18 2:59 p.m.•11 views

Orbit Tracer

Orbit Tracer Orbit Tracer Security Agent for Intelligent Security Remediation Automate security vulnerability analysis, risk assessment, and remediation across your entire codebase using AI and Orbit's knowledge graph The Problem Security teams face a critical challenge: Finding vulnerabilities i...

6.1AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/16 5:22 p.m.•16 views

Orbit-Fox_SSRF_CVE-2025-10874

CVE-2025-10874 - Prueba de Concepto SSRF en Orbit Fox Exploit de prueba de concepto que demuestra la vulnerabilidad de Server-Side Request Forgery SSRF en el plugin Orbit Fox de WordPress con bypass de inyección de byte nulo. Artículo detallado: https://ryanmroth.com/articles/orbit-fox-ssrf...

5.7AI score0.0019EPSS
SaveExploits0
NVD
NVD
•added 2026/09/09 6:17 a.m.•17 views

CVE-2026-85418

The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin before 3.0.9 does not validate a user-supplied HTML tag name in one of its Beaver Builder widgets before echoing it into the rendered markup, allowing users with contributor-level access an...

5.4CVSS0.00226EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/09/09 6:00 a.m.•6 views

WordPress Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More plugin < 3.0.9 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Farid Narimanov in WordPress Plugin Orbit Fox by ThemeIsle versions 3.0.9...

5.4CVSS5.7AI score0.00226EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/09/09 6:00 a.m.•8 views

CVE-2026-85418 Orbit Fox < 3.0.9 - Contributor+ Stored XSS via Beaver Builder Pricing Table Widget

The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin before 3.0.9 does not validate a user-supplied HTML tag name in one of its Beaver Builder widgets before echoing it into the rendered markup, allowing users with contributor-level access an...

5.9AI score0.00226EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/09 6:00 a.m.•13 views

CVE-2026-85418

The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin (versions before 3.0.9 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is a failure to validate user-supplied HTML tag names within one of its Beaver Builder widgets b...

5.9AI score0.00226EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/09 6:00 a.m.•43 views

CVE-2026-85418 Orbit Fox < 3.0.9 - Contributor+ Stored XSS via Beaver Builder Pricing Table Widget

The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin before 3.0.9 does not validate a user-supplied HTML tag name in one of its Beaver Builder widgets before echoing it into the rendered markup, allowing users with contributor-level access an...

0.00226EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/09 6:00 a.m.•8 views

EUVD-2026-74720

The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin before 3.0.9 does not validate a user-supplied HTML tag name in one of its Beaver Builder widgets before echoing it into the rendered markup, allowing users with contributor-level access an...

5.4CVSS5.9AI score0.00226EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•13 views

PT-2026-88877

The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin before 3.0.9 does not validate a user-supplied HTML tag name in one of its Beaver Builder widgets before echoing it into the rendered markup, allowing users with contributor-level access an...

5.9AI score0.00226EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/09/02 11:17 a.m.•8 views

Malicious Package

Overview bellatrix-resolvers-inquirer-orbit is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

9.8CVSS5.5AI score
SaveExploits0References2
NVD
NVD
•added 2026/08/05 7:16 a.m.•16 views

CVE-2026-16583

The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin before 3.0.8 does not sanitize uploaded SVG files when its SVG upload feature is enabled, allowing authenticated users with the upload capability Author and above by default, without the...

6.1CVSS0.00253EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/05 6:00 a.m.•13 views

CVE-2026-16583 Orbit Fox by ThemeIsle < 3.0.8 - Author+ Stored XSS via SVG Upload

The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin before 3.0.8 does not sanitize uploaded SVG files when its SVG upload feature is enabled, allowing authenticated users with the upload capability Author and above by default, without the...

5.2AI score0.00253EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/08/05 6:00 a.m.•40 views

CVE-2026-16583 Orbit Fox by ThemeIsle < 3.0.8 - Author+ Stored XSS via SVG Upload

The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin before 3.0.8 does not sanitize uploaded SVG files when its SVG upload feature is enabled, allowing authenticated users with the upload capability Author and above by default, without the...

0.00253EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/05 6:00 a.m.•57 views

CVE-2026-16583

The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin before 3.0.8 does not sanitize uploaded SVG files when its SVG upload feature is enabled, allowing authenticated users with the upload capability Author and above by default, without the...

5.2AI score0.00253EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/05 6:00 a.m.•17 views

EUVD-2026-53102

The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin before 3.0.8 does not sanitize uploaded SVG files when its SVG upload feature is enabled, allowing authenticated users with the upload capability Author and above by default, without the...

6.1CVSS5.2AI score0.00253EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2026/07/30 4:58 p.m.•15 views

SUSE CVE-2026-27806

Fleet is open source device management software. Prior to 4.81.1, the Orbit agent's FileVault disk encryption key rotation flow on collects a local user's password via a GUI dialog and interpolates it directly into a Tcl/expect script executed via exec.Command"expect", "-c", script. Because the...

7.8CVSS7.8AI score0.00114EPSS
SaveExploits0References2
NVD
NVD
•added 2026/07/27 3:17 p.m.•18 views

CVE-2026-65563

Author Cross Site Scripting XSS in Orbit Fox by ThemeIsle = 3.0.7 versions...

5.9CVSS0.0024EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/07/27 1:59 p.m.•14 views

CVE-2026-65563 WordPress Orbit Fox by ThemeIsle plugin <= 3.0.7 - Cross Site Scripting (XSS) vulnerability

Author Cross Site Scripting XSS in Orbit Fox by ThemeIsle = 3.0.7 versions...

5.9CVSS5.8AI score0.0024EPSS
SaveExploits0References1
CVE
CVE
•added 2026/07/27 1:59 p.m.•32 views

CVE-2026-65563

CVE-2026-65563 concerns a Cross Site Scripting (XSS) vulnerability in the WordPress Orbit Fox by ThemeIsle plugin, versioned

5.9CVSS5.8AI score0.0024EPSS
SaveExploits0References1
Rows per page
Query Builder