Data Tables Generator by Supsystic < 1.10.20 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape some of its Table settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfilteredhtml capability is disallowed for example in multisite setup Create/edit a table, go to its settings, enabled...

Malicious code in perf-data-tables (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8dbafd7f735f6fa5bec3af236673c8d99293ed8731c9e57fe12120420d23582f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5281 Malicious code in perf-data-tables (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8dbafd7f735f6fa5bec3af236673c8d99293ed8731c9e57fe12120420d23582f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @azure-tests/perf-data-tables (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90108fb1a0ccfeb0b3a7ed413189982b1a936052f4af6f004793f81040b67e8e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-100 Malicious code in @azure-tests/perf-data-tables (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90108fb1a0ccfeb0b3a7ed413189982b1a936052f4af6f004793f81040b67e8e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-data-tables-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7368d7ea26dee4585d779dfb147816f903fc6af930ca341c51bf8d58569d1972 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-data-tables (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a089d92180517cd0c841e0b1e42e271776332b6f9bcc1f4386c18169ec3b6cf5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-data-tables-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f12451ce5dfc182de3cf34ae16c5a54d089805c93efabed52b2ee148cd3c379d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1320 Malicious code in azure-data-tables (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a089d92180517cd0c841e0b1e42e271776332b6f9bcc1f4386c18169ec3b6cf5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1322 Malicious code in azure-data-tables-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f12451ce5dfc182de3cf34ae16c5a54d089805c93efabed52b2ee148cd3c379d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1321 Malicious code in azure-data-tables-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7368d7ea26dee4585d779dfb147816f903fc6af930ca341c51bf8d58569d1972 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security Bulletin: Vulnerabilities in PostgreSQL, Node.js, and Data Tables from Spry Media may affect IBM Spectrum Protect Plus

Summary Vulnerabilities in PostgreSQL, Node.js, and Data Tables from Spry Media such as SQL injection, HTTP request smuggling, cross-site scripting, bypass of security restrictions, and weaker than expected security, may affect IBM Spectrum Protect Plus. Vulnerability Details CVEID: CVE-2021-2321...

CVE-2021-40909

Cross site scripting XSS vulnerability in sourcecodester PHP CRUD without Refresh/Reload using Ajax and DataTables Tutorial v1 by oretnom23, allows remote attackers to execute arbitrary code via the firstname, lastname, and email parameters to /ajaxcrud...

sourcecodester PHP CRUD without Refresh/Reload using Ajax and DataTables Tutorial SQL注入漏洞

sourcecodester PHP CRUD without Refresh/Reload using Ajax and DataTables Tutorial is an open source project to help people learn how to build or develop a PHP CRUD without refresh/reload using Ajax and DataTables. sourcecodester PHP CRUD without Refresh/Reload using Ajax and DataTables Tutorial i...

Cross-site Scripting (XSS)

Overview datatables.net is a DataTables for jQuery Affected versions of this package are vulnerable to Cross-site Scripting XSS. If an array is passed to the HTML escape entities function it would not have its contents escaped. PoC DataTables.net Name Name let test = "name" : "Hello World! " ,...

CVE-2021-24199

The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 allows a low privilege authenticated user to perform Boolean-based blind SQL Injection in the table list page on the endpoint /wp-admin/admin-ajax.php?action=getwdtable&tableid=1, on the 'start' HTTP POST parameter. Th...

WordPress Data Tables Generator by Supsystic plugin <= 1.9.96 - SQL injection (SQLi) vulnerability

SQL injection SQLi vulnerability found by Erik David Martin in WordPress Data Tables Generator by Supsystic plugin versions = 1.9.96. Solution Update the WordPress Data Tables Generator by Supsystic plugin to the latest available version at least 1.9.97...

WordPress Supsystic Data Tables Generator 1.9.96 XSS / SQL Injection

Exploit Title: WordPress Plugin Supsystic Data Tables Generator 1.9.96 - Multiple Vulnerabilities Date: 24/07/2020 Exploit Author: Erik David Martin Vendor Homepage: https://supsystic.com/ Software Link: https://downloads.wordpress.org/plugin/data-tables-generator-by-supsystic.1.9.96.zip Category...

Data Tables Generator by Supsystic < 1.10.1 - Authenticated Stored Cross-Site Scripting (XSS)

The "Editor" tab under the "Tables" section is vulnerable to stored XSS. It is possible to store XSS in all input fields as the code does not sanitise any of the user input. PoC Open a Table, go to the editor and enter a payload below in a cell, then save the Table = 1.9.99 - = 1.10.0 -...

WordPress Data Tables Generator by Supsystic plugin <= 1.9.96 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability found by Erik David Martin in WordPress Data Tables Generator by Supsystic plugin versions = 1.9.96. Solution Update the WordPress Data Tables Generator by Supsystic plugin to the latest available version at least 1.9.97...