Lucene search
+L

12 matches found

BDU FSTEC
BDU FSTEC
added 2026/02/09 12:0 a.m.14 views

The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL queries.

The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures taken to protect the SQL query structure during the processing of the testid parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

6.8CVSS6.2AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/02/09 12:0 a.m.6 views

The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the OpenSky flight planning and operational management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor, operating remotely, to perform cross-site scripting attacks XSS...

3.7CVSS5.8AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/02/09 12:0 a.m.8 views

The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the OpenSky flight planning and operational management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor, operating remotely, to perform cross-site scripting attacks XSS...

3.7CVSS5.8AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/02/09 12:0 a.m.17 views

The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL queries.

The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures taken to protect the SQL query structure during the processing of the filename parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotel...

7.7CVSS6.2AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/02/09 12:0 a.m.6 views

The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures taken to protect the website structure, allows a intruder to gain unauthorized access to the protected information.

The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the protected information...

6.8CVSS5.4AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/02/09 12:0 a.m.8 views

The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL queries.

The vulnerability of the OpenSky flight planning and operational management system lies in the failure to protect the SQL query structure during the processing of the QTestId parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

6.8CVSS6.1AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/02/02 12:0 a.m.27 views

The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL queries.

The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures taken to protect the SQL query structure when processing parameters periodOn and periodToOn. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries...

7.7CVSS6.2AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/02/02 12:0 a.m.5 views

The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL queries.

The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures taken to protect the SQL query structure during the processing of the tdat parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

7.7CVSS6.2AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/02/02 12:0 a.m.7 views

The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL queries.

The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures taken to protect the SQL query structure during the processing of the gettest parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

7.7CVSS6.2AI score
SaveExploits0Affected Software1
Cvelist
Cvelist
added 2025/11/04 4:15 p.m.19 views

CVE-2025-61956 Missing Authentication for Critical Function in Radiometrics VizAir

Radiometrics VizAir is vulnerable to a lack of authentication mechanisms for critical functions, such as admin access and API requests. Attackers can modify configurations without authentication, potentially manipulating active runway settings and misleading air traffic control ATC and pilots...

10CVSS0.0071EPSS
SaveExploits0References2
Pen Test Partners Blog
Pen Test Partners Blog
added 2021/09/10 6:3 a.m.24 views

EFB Tampering. The Human Factor

Like most people, pilots want to expedite things and generally make their work easier. A common conception about aviation is that its a leading industry with technology at its forefront. While this is generally true some of the systems in use today are rather dated to put it mildly. A great examp...

7.6AI score
SaveExploits0
Wired Threat Level
Wired Threat Level
added 2020/07/27 11:53 p.m.33 views

A Cyberattack on Garmin Disrupted More Than Workouts

A ransomware hit and subsequent outage caused problems in the company’s aviation services, including flight planning and mapping...

7.1AI score
SaveExploits0
Rows per page
Query Builder