PT-2021-15703 · Themeisle · Orbit Fox

Name of the Vulnerable Software and Affected Versions: Orbit Fox by ThemeIsle affected versions not specified Description: The issue concerns a registration form feature in Orbit Fox by ThemeIsle that integrates with Elementor and Beaver Builder page builders. Administrators can set a default use...

WordPress Orbit Fox 安全漏洞

WordPress Orbit Fox is an open source application for WordPress. A user-centered plugin with an easy-to-use admin panel. A security vulnerability exists in Orbit Fox by ThemeIsle, which can be exploited by an attacker to update the registered default role by submitting the user role parameter...

[SECURITY] Fedora 34 Update: at-spi2-core-2.39.91-1.fc34

at-spi allows assistive technologies to access GTK-based applications. Essentially it exposes the internals of applications for automation, so tools such as screen readers, magnifiers, or even scripting interfaces can query and interact with GUI controls. This version of at-spi is a major break...

Critical WordPress-Plugin Bug Found in 'Orbit Fox' Allows Site Takeover

Two vulnerabilities one critical in a WordPress plugin called Orbit Fox could allow attackers to inject malicious code into vulnerable websites and/or take control of a website. Orbit Fox is a multi-featured WordPress plugin that works with the Elementor, Beaver Builder and Gutenberg site-buildin...

Orbit Fox by ThemeIsle < 2.10.3 - Authenticated Stored Cross Site Scripting

Orbit Fox by ThemeIsle has a feature to add custom scripts to the header and footer of a page or post. There were no checks to verify that a user had the unfilteredhtml capability prior to saving the script tags, thus allowing lower-level users to inject scripts that could potentially be maliciou...

Orbit Fox by ThemeIsle < 2.10.3 - Authenticated Privilege Escalation

Orbit Fox by ThemeIsle has a feature to add a registration form to both the Elementor and Beaver Builder page builders functionality. As part of the registration form, administrators can choose which role to set as the default for users upon registration. This field is hidden from view for...

WordPress Orbit Fox by ThemeIsle plugin <= 2.10.2 - Authenticated Privilege Escalation vulnerability

Authenticated Privilege Escalation vulnerability found by Chloe Chamberland in WordPress Orbit Fox by ThemeIsle plugin versions = 2.10.2. Solution Update the WordPress Orbit Fox by ThemeIsle plugin to the latest available version at least 2.10.3...

Orbit Fox by ThemeIsle < 2.10.3 - Authenticated Privilege Escalation

Orbit Fox by ThemeIsle has a feature to add a registration form to both the Elementor and Beaver Builder page builders functionality. As part of the registration form, administrators can choose which role to set as the default for users upon registration. This field is hidden from view for...

WordPress Orbit Fox by ThemeIsle plugin <= 2.10.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability found by Chloe Chamberland in WordPress Orbit Fox by ThemeIsle plugin versions = 2.10.2. Solution Update the WordPress Orbit Fox by ThemeIsle plugin to the latest available version at least 2.10.3...

Securing Space 4.0 – One Small Step or a Giant Leap? - Part 1

ARCHIVED STORY Securing Space 4.0 – One Small Step or a Giant Leap? - Part 1 By Eoin Carroll · September 30, 2020 McAfee Advanced Threat Research ATR is collaborating with Cork Institute of Technology CIT and its Blackrock Castle Observatory BCO and the National Space Center NSC in Cork, Ireland...

orbit:ElfFileLoadSymbolsFuzzer: Heap-buffer-overflow in llvm::object::ELFFile<llvm::object::ELFType<

Detailed Report: https://oss-fuzz.com/testcase?key=5137699567304704 Project: orbit Fuzzing Engine: libFuzzer Fuzz Target: ElfFileLoadSymbolsFuzzer Job Type: libfuzzerasanorbit Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x6060000002af Crash State:...

Hackers Are Building an Army of Cheap Satellite Trackers

NyanSat is an open source ground station that lets you listen in on low-orbit transmissions for about $100 worth of gear...

What Keeps NSA Cybersecurity Boss Anne Neuberger Up at Night

At WIRED25, the NSA's Anne Neuberger talked election security, low-orbit satellites, and weaponized autonomous drones...

9 Trumpworld Figures Who Should Fear Mueller the Most

After Michael Cohen's sentencing, plenty more people and entities in Trump's orbit potentially sit in the special counsel's crosshairs...

Orbit Fox by ThemeIsle <= 2.6.3 -Does not properly Authenticate REST API Calls

Orbit Fox by Themeisle aka Themeisle Companion version = 2.6.3 does not properly authenticate REST API calls allowing unauthenticated users to execute several API calls. In some cases one of these calls can be used to upload arbitrary files which can lead to remote code execution...

Parental control spyware app Family Orbit hacked; 281 GB of data exposed

By Waqas Spyware is supposed to spy upon people, most notably criminals or threat actors. However, nowadays even spyware aren’t protected from vulnerabilities and are exposed to hackers. Recently we reported on the hacking of several spyware apps including FlexiSpy, Retina-X and TheTruthSpy. Now...

Satellite Tracking Application: Gpredict

Gpredict is a real-time satellite tracking and orbit prediction application. It can track a large number of satellites and display their position and other data in lists, tables, maps, and polar plots radar view. Gpredict can also predict the time of future passes for a satellite, and provide you...

Gpredict - Satellite Tracking Application

Gpredict is a real-time satellite tracking and orbit prediction application. It can track a large number of satellites and display their position and other data in lists, tables, maps, and polar plots radar view. Gpredict can also predict the time of future passes for a satellite, and provide you...

Orbit Browser: Safe & Fast - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Orbit Browser: Safe & Fast published at the 'play' market has multiple vulnerabilities...

Orbit Downloader - URL Unicode Conversion Overflow

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...