EUVD-2025-32472

A vulnerability was identified in Vanderlande Baggage 360 7.0.0. This issue affects some unknown processing of the file /api-addons/v1/messages. Such manipulation of the argument Message leads to cross site scripting. The attack may be performed from remote. The exploit is publicly available and...

SICK AG Baggage Analytics 安全漏洞

SICK AG Baggage Analytics is a visualization and analysis software for airport tracking systems from SICK AG, Germany. A security vulnerability exists in SICK AG Baggage Analytics that originates from providing a full stack trace to the user when an error occurs, potentially disclosing technical...

SICK AG Baggage Analytics 安全漏洞

SICK AG Baggage Analytics is a visualization and analysis software for airport tracking systems from SICK AG, Germany. A security vulnerability exists in SICK AG Baggage Analytics that originates from running JavaScript via the dashboard in the Open in New Tab button, which could lead to session...

SICK AG Baggage Analytics 安全漏洞

SICK AG Baggage Analytics is a visualization and analysis software for airport tracking systems from SICK AG, Germany. A security vulnerability exists in SICK AG Baggage Analytics that stems from multiple endpoints that do not require authentication, which could lead to information collection...

SICK AG Baggage Analytics 安全漏洞

SICK AG Baggage Analytics is a visualization and analysis software for airport tracking systems from SICK AG, Germany. A security vulnerability exists in SICK AG Baggage Analytics that stems from the possibility of brute-force breaking of folders and files, which could lead to the disclosure of...

SICK AG Baggage Analytics 安全漏洞

SICK AG Baggage Analytics is a visualization and analysis software for airport tracking systems from SICK AG, Germany. A security vulnerability exists in SICK AG Baggage Analytics that stems from user credentials being stored in a local database, which could lead to unauthorized access...

SICK AG Baggage Analytics 安全漏洞

SICK AG Baggage Analytics is a visualization and analysis software for airport tracking systems from SICK AG, Germany. A security vulnerability exists in SICK AG Baggage Analytics that originates from a remote, unauthorized attacker being able to brute-force decrypt folders and files and read...

SICK AG Baggage Analytics 安全漏洞

SICK AG Baggage Analytics is a visualization and analysis software for airport tracking systems from SICK AG, Germany. A security vulnerability exists in SICK AG Baggage Analytics that stems from a lack of authentication and could lead to a user enumeration attack...

SICK AG Baggage Analytics 安全漏洞

SICK AG Baggage Analytics is a visualization and analysis software for airport tracking systems from SICK AG, Germany. A security vulnerability exists in SICK AG Baggage Analytics that stems from a different error message being returned on login failure, which could lead to a username enumeration...

SICK AG Baggage Analytics 安全漏洞

SICK AG Baggage Analytics is a visualization and analysis software for airport tracking systems from SICK AG, Germany. A security vulnerability exists in SICK AG Baggage Analytics that stems from the transmission of usernames and passwords directly in URL parameters, which could lead to the...

CVE-2025-11308

A vulnerability was identified in Vanderlande Baggage 360 7.0.0. This issue affects some unknown processing of the file /api-addons/v1/messages. Such manipulation of the argument Message leads to cross site scripting. The attack may be performed from remote. The exploit is publicly available and...

CVE-2025-11308 Vanderlande Baggage 360 messages cross site scripting

A vulnerability was identified in Vanderlande Baggage 360 7.0.0. This issue affects some unknown processing of the file /api-addons/v1/messages. Such manipulation of the argument Message leads to cross site scripting. The attack may be performed from remote. The exploit is publicly available and...

CVE-2025-11308 Vanderlande Baggage 360 messages cross site scripting

A vulnerability was identified in Vanderlande Baggage 360 7.0.0. This issue affects some unknown processing of the file /api-addons/v1/messages. Such manipulation of the argument Message leads to cross site scripting. The attack may be performed from remote. The exploit is publicly available and...

CVE-2025-11308

CVE-2025-11308 affects Vanderlande Baggage 360 v7.0.0. The issue arises from processing the Message argument in the /api-addons/v1/messages endpoint, where manipulation can lead to cross-site scripting. Attack from remote is possible; a public PoC is noted. Documents confirm impact described as X...

PT-2025-40824

Name of the Vulnerable Software and Affected Versions Vanderlande Baggage 360 version 7.0.0 Description An issue exists in the processing of files within Vanderlande Baggage 360. Manipulation of the Message argument in the /api-addons/v1/messages API endpoint can lead to cross site scripting. Thi...

Vanderlande Baggage 360 安全漏洞

Vanderlande Baggage 360 is an airport baggage handling system from the Dutch company Vanderlande. A security vulnerability exists in Vanderlande Baggage 360 version 7.0.0, which stems from an incorrect manipulation of the parameter Message in the file /api-addons/v1/messages, which could lead to ...

Baggage Tag Scam

I just heard about this: There's a travel scam warning going around the internet right now: You should keep your baggage tags on your bags until you get home, then shred them, because scammers are using luggage tags to file fraudulent claims for missing baggage with the airline. First, the scam i...

WordPress Baggage Freight Shipping Australia plugin 0.1.0 - Unauthenticated Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload vulnerability found by Kaimi in WordPress Baggage Freight Shipping Australia plugin version 0.1.0. Solution 08.01.2019 - we were unable to find a patched version of this plugin...

WordPress Plugin Baggage Freight Shipping Australia Arbitrary File Upload Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. An arbitrary file upload vulnerability exists in the WordPress plugin Baggage Freight Shipping Australia. Allows an attacker ...

WordPress Baggage Freight Shipping Australia 0.1.0 Plugin - Arbitrary File Upload

Exploit for php platform in category web applications Exploit Title: WordPress Plugin Baggage Freight Shipping Australia 0.1.0 - Arbitrary File Upload Software Link: https://wordpress.org/plugins/baggage-freight/ Exploit Author: Kaimi Website: https://kaimi.io Version: 0.1.0 Category: webapps...