634 matches found
Orbit
ORBIT Herramienta de investigación de transacciones de blockchain 3.2-blue.svg" Introducción Orbit está diseñado para explorar la red de una wallet blockchain mediante el rastreo recursivo del historial de transacciones. Los datos se renderizan como un gráfico para revelar fuentes principales,...
Orbit Tracer
Orbit Tracer Orbit Tracer Security Agent for Intelligent Security Remediation Automatice el análisis de vulnerabilidades de seguridad, la evaluación de riesgos y la corrección en toda su base de código utilizando IA y el grafo de conocimiento de Orbit El Problema Los equipos de seguridad enfrenta...
Orbit-Fox_SSRF_CVE-2025-10874
CVE-2025-10874 - Orbit Fox SSRF Proof of Concept Proof of concept exploit demonstrating Server-Side Request Forgery SSRF vulnerability in the Orbit Fox WordPress plugin with null byte injection bypass. Detailed blog post: https://ryanmroth.com/articles/orbit-fox-ssrf Vulnerability Details...
CVE-2026-85418
The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin before 3.0.9 does not validate a user-supplied HTML tag name in one of its Beaver Builder widgets before echoing it into the rendered markup, allowing users with contributor-level access an...
WordPress Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More plugin < 3.0.9 - Contributor+ Stored XSS vulnerability
Contributor+ Stored XSS vulnerability discovered by Farid Narimanov in WordPress Plugin Orbit Fox by ThemeIsle versions 3.0.9...
CVE-2026-85418
The Orbit Fox WordPress plugin (versions before 3.0.9 ) contains a stored cross-site scripting (XSS) vulnerability in its Beaver Builder Pricing Table widget . A user-supplied HTML tag name is not validated before being echoed into rendered markup, allowing anyone with contributor-level access or...
EUVD-2026-74720
The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin before 3.0.9 does not validate a user-supplied HTML tag name in one of its Beaver Builder widgets before echoing it into the rendered markup, allowing users with contributor-level access an...
CVE-2026-85418 Orbit Fox < 3.0.9 - Contributor+ Stored XSS via Beaver Builder Pricing Table Widget
The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin before 3.0.9 does not validate a user-supplied HTML tag name in one of its Beaver Builder widgets before echoing it into the rendered markup, allowing users with contributor-level access an...
Malicious Package
Overview bellatrix-resolvers-inquirer-orbit is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...
CVE-2026-16583
The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin before 3.0.8 does not sanitize uploaded SVG files when its SVG upload feature is enabled, allowing authenticated users with the upload capability Author and above by default, without the...
CVE-2026-16583
CVE-2026-16583 affects the Orbit Fox by ThemeIsle WordPress plugin prior to 3.0.8. The SVG upload feature does not sanitize uploaded SVG files, enabling stored XSS: authenticated users with upload capability (Author and above by default, without unfiltered_html) can upload SVGs containing JavaScr...
EUVD-2026-53102
The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin before 3.0.8 does not sanitize uploaded SVG files when its SVG upload feature is enabled, allowing authenticated users with the upload capability Author and above by default, without the...
CVE-2026-16583 Orbit Fox by ThemeIsle < 3.0.8 - Author+ Stored XSS via SVG Upload
The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin before 3.0.8 does not sanitize uploaded SVG files when its SVG upload feature is enabled, allowing authenticated users with the upload capability Author and above by default, without the...
CVE-2026-65563
Author Cross Site Scripting XSS in Orbit Fox by ThemeIsle = 3.0.7 versions...
CVE-2026-65563
CVE-2026-65563 concerns a Cross Site Scripting (XSS) vulnerability in the WordPress Orbit Fox by ThemeIsle plugin, versioned
CVE-2026-65563
Author Cross Site Scripting XSS in Orbit Fox by ThemeIsle = 3.0.7 versions...
CVE-2026-65563 WordPress Orbit Fox by ThemeIsle plugin <= 3.0.7 - Cross Site Scripting (XSS) vulnerability
Author Cross Site Scripting XSS in Orbit Fox by ThemeIsle = 3.0.7 versions...
EUVD-2026-49236
Author Cross Site Scripting XSS in Orbit Fox by ThemeIsle = 3.0.7 versions...
WordPress Orbit Fox by ThemeIsle plugin <= 3.0.7 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Orbit Fox by ThemeIsle versions = 3.0.7...