668 matches found
CVE-2025-58593
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeisle Orbit Fox by ThemeIsle themeisle-companion allows Stored XSS.This issue affects Orbit Fox by ThemeIsle: from n/a through = 3.0.0...
CVE-2025-58593
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeisle Orbit Fox by ThemeIsle themeisle-companion allows Stored XSS.This issue affects Orbit Fox by ThemeIsle: from n/a through = 3.0.0...
WordPress Orbit Fox by ThemeIsle Plugin <= 3.0.0 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by Michael in WordPress Plugin Orbit Fox by ThemeIsle versions = 3.0.0...
CVE-2025-58593 WordPress Orbit Fox by ThemeIsle Plugin <= 3.0.0 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeisle Orbit Fox by ThemeIsle themeisle-companion allows Stored XSS.This issue affects Orbit Fox by ThemeIsle: from n/a through = 3.0.0...
CVE-2025-58593 WordPress Orbit Fox by ThemeIsle Plugin <= 3.0.0 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeisle Orbit Fox by ThemeIsle themeisle-companion allows Stored XSS.This issue affects Orbit Fox by ThemeIsle: from n/a through = 3.0.0...
CVE-2025-58593
CVE-2025-58593 : Stored XSS in Orbit Fox by ThemeIsle (WordPress plugin) due to improper input neutralization during web page generation. Affected: Orbit Fox versions up to and including 3.0.0. Remediation: update Orbit Fox to a version later than 3.0.0. Details are corroborated by Patchstack/PT-...
PT-2025-35728
Name of the Vulnerable Software and Affected Versions: Orbit Fox versions through 3.0.0 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Stored Cross-site Scripting XSS. Recommendations: Update Orbit Fox to a version later...
WordPress plugin Orbit Fox by ThemeIsle 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...
Silver Fox APT Exploits Signed Windows Driver to Deliver ValleyRAT
Check Point reports Silver Fox APT using a signed WatchDog driver flaw to disable Windows security and deliver…...
CVE-2025-55420
A Reflected Cross Site Scripting XSS vulnerability was found in /index.php in FoxCMS v1.2.6. When a crafted script is sent via a GET request, it is reflected unsanitized into the HTML response. This permits execution of arbitrary JavaScript code when a logged-in user submits the malicious input...
MAL-2025-32710 Malicious code in saturn-fox-uil254-project (npm)
The package saturn-fox-uil254-project was found to contain malicious code...
Malicious code in yonder-fox-kwk428-project (npm)
The package yonder-fox-kwk428-project was found to contain malicious code...
Malicious code in fox-thunder-hlv017-project (npm)
The package fox-thunder-hlv017-project was found to contain malicious code...
Malicious code in fox-tundra-vjc448-project (npm)
The package fox-tundra-vjc448-project was found to contain malicious code...
Malicious code in fox-nugget-spj176-project (npm)
The package fox-nugget-spj176-project was found to contain malicious code...
Malicious code in kelp-fox-bkt354-project (npm)
The package kelp-fox-bkt354-project was found to contain malicious code...
attr (>=0.0.0 <=0.0.1), door (>=0.0.5 <=0.0.6) +6 more potentially affected by unknown CVE via new-pubsub (>=0.0.3 <=2.0.0)
new-pubsub NPM version =0.0.3, =0.0.0, =0.0.5, =0.0.7, =0.0.0, =0.0.0, =0.0.0, =0.0.2 - watch-array =0.0.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-27366...
Malicious code in ant-fox-fvm110-project (npm)
The package ant-fox-fvm110-project was found to contain malicious code...
brick (=0.0.0), fox (>=0.0.9 <=1.6.2) +2 more potentially affected by unknown CVE via core-modules (=0.0.0)
core-modules NPM version =0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on core-modules and may be impacted: - brick =0.0.0 - fox =0.0.9, =3.0.0, =0.0.0, =0.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17577...