GHSA-JQGH-W3CC-7JQW Highcharts Dashboards: `__proto__` data table id writes sync listeners to `Object.prototype`

Impact The data cursor keeps its listener and state bookkeeping in plain objects keyed by data table id, so a table id of proto supplied in the dataPool connector configuration resolves to Object.prototype when a sync registers its listeners, and the registration creates a property on...

CVE-2026-14877 Data Tables Generator by Supsystic <= 1.12.03 - Authenticated (Contributor+) Stored Cross-Site Scripting via Table 'id' HTML Attribute

The Data Tables Generator by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the id attribute in all versions up to, and including, 1.12.03 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-14877 Data Tables Generator by Supsystic <= 1.12.03 - Authenticated (Contributor+) Stored Cross-Site Scripting via Table 'id' HTML Attribute

The Data Tables Generator by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the id attribute in all versions up to, and including, 1.12.03 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-97598

In the Linux kernel, the following vulnerability has been resolved: ipv4: fib: bound automatic table ID allocation fibemptytable probes every table ID from 1 until it finds a free one. IPv4 tables are stored in a 256-bucket hash table, so a dense set of IDs makes each probe walk a growing hash...

EUVD-2020-10609

Malware in sbrugna...

PT-2024-36067

Name of the Vulnerable Software and Affected Versions: Combodo iTop versions prior to 2.7.11 Combodo iTop versions prior to 3.1.2 Combodo iTop versions prior to 3.2.0 Description: Combodo iTop is an open source and web-based IT service management platform. The platform has a cross-site scripting...

Combodo iTop cross-site scripting vulnerability

Combodo iTop is a set of open source web applications developed by Combodo France based on ITIL and used for the daily operation of IT environments. The program provides incident management, configuration management and problem management. A cross-site scripting vulnerability exists in Combodo iT...

CVE-2020-29284

The file view-chair-list.php in Multi Restaurant Table Reservation System 1.0 does not perform input validation on the tableid parameter which allows unauthenticated SQL Injection. An attacker can send malicious input in the GET request to /dashboard/view-chair-list.php?tableid= to trigger the...

PT-2020-17133

Name of the Vulnerable Software and Affected Versions Multi Restaurant Table Reservation System version 1.0 Description The issue arises from the lack of input validation on the table id parameter in the file view-chair-list.php, allowing unauthenticated SQL Injection. An attacker can exploit thi...

PT-2014-8866

Name of the Vulnerable Software and Affected Versions wpDataTables plugin version 1.5.3 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the table id parameter in a get wdtable action to the "/wp-admin/admin-ajax.php" API endpoint...

iDefense Security Advisory 03.05.07: Apple QuickTime Color Table ID Heap Corruption Vulnerability

Apple QuickTime Color Table ID Heap Corruption Vulnerability iDefense Security Advisory 03.05.07 http://labs.idefense.com/intelligence/vulnerabilities/ Mar 05, 2007 I. BACKGROUND Quicktime is Apple's media player product used to render video and other media. For more information visit...

[Reversemode Advisory] Apple Quicktime Color ID remote heap corruption

APPLE QUICKTIME COLOR TABLE ID REMOTE HEAP CORRUPTION Rubйn Santamarta [email protected] Affected products and/or platforms: Mac OS X v10.3.9 and later Windows Vista Windows XP Windows 2000 Color table ID A 16-bit integer that identifies which color table to use. If this field is set to –1, t...