131 matches found
PT-2025-33262 · Unknown · Campcodes Online Flight Booking Management System
Name of the Vulnerable Software and Affected Versions: Campcodes Online Flight Booking Management System version 1.0 Description: A vulnerability exists in Campcodes Online Flight Booking Management System 1.0, specifically within an unknown functionality of the /admin/save airlines.php file...
CampCodes Online Flight Booking Management System 注入漏洞
CampCodes Online Flight Booking Management System is an online flight booking management system from CampCodes Philippines. An injection vulnerability exists in version 1.0 of the CampCodes Online Flight Booking Management System, which originates from a SQL injection due to an incorrect...
A Group of Young Cybercriminals Poses the ‘Most Imminent Threat’ of Cyberattacks Right Now
The Scattered Spider hacking group has caused chaos among retailers, insurers, and airlines in recent months. Researchers warn that its flexible structure poses challenges for defense...
Airlines Don’t Want You to Know They Sold Your Flight Data to DHS
A contract obtained by 404 Media shows that an airline-owned data broker forbids the feds from revealing it sold them detailed passenger data...
Anonymous Hackers Steal Flight Data from US Deportation Airline GlobalX
A hacker group claiming affiliation with Anonymous says it breached GlobalX Airlines, leaking sensitive flight and passenger data…...
CVE-2025-2354
A vulnerability has been found in VAM Virtual Airlines Manager 2.6.2 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /vam/index.php. The manipulation of the argument registryid/planeicao/hubid leads to cross site scripting. The attack can be...
CVE-2025-2353
A vulnerability, which was classified as critical, was found in VAM Virtual Airlines Manager up to 2.6.2. Affected is an unknown function of the file /vam/index.php of the component HTTP GET Parameter Handler. The manipulation of the argument ID/registryid/planeicao leads to sql injection. It is...
CVE-2025-2354
A vulnerability has been found in VAM Virtual Airlines Manager 2.6.2 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /vam/index.php. The manipulation of the argument registryid/planeicao/hubid leads to cross site scripting. The attack can be...
CVE-2025-2353
A vulnerability, which was classified as critical, was found in VAM Virtual Airlines Manager up to 2.6.2. Affected is an unknown function of the file /vam/index.php of the component HTTP GET Parameter Handler. The manipulation of the argument ID/registryid/planeicao leads to sql injection. It is...
CVE-2025-2354 VAM Virtual Airlines Manager index.php cross site scripting
A vulnerability has been found in VAM Virtual Airlines Manager 2.6.2 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /vam/index.php. The manipulation of the argument registryid/planeicao/hubid leads to cross site scripting. The attack can be...
CVE-2025-2354
CVE-2025-2354 affects VAM Virtual Airlines Manager 2.6.2. The vulnerability is a cross-site scripting flaw in an unknown function of the file /vam/index.php, triggered by manipulating the parameters registry_id, plane_icao, or hub_id. It can be exploited remotely and the exploit has been disclose...
CVE-2025-2354 VAM Virtual Airlines Manager index.php cross site scripting
A vulnerability has been found in VAM Virtual Airlines Manager 2.6.2 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /vam/index.php. The manipulation of the argument registryid/planeicao/hubid leads to cross site scripting. The attack can be...
Virtual Airlines Manager 代码注入漏洞
Virtual Airlines Manager VAM is an open source web-based system for managing virtual airlines from Virtual Airlines Manager, Inc. It supports different ACARS and flight trackers to manage virtual airlines. A code injection vulnerability exists in Virtual Airlines Manager version 2.6.2, which...
CVE-2025-2353 VAM Virtual Airlines Manager HTTP GET Parameter index.php sql injection
A vulnerability, which was classified as critical, was found in VAM Virtual Airlines Manager up to 2.6.2. Affected is an unknown function of the file /vam/index.php of the component HTTP GET Parameter Handler. The manipulation of the argument ID/registryid/planeicao leads to sql injection. It is...
CVE-2025-2353 VAM Virtual Airlines Manager HTTP GET Parameter index.php sql injection
A vulnerability, which was classified as critical, was found in VAM Virtual Airlines Manager up to 2.6.2. Affected is an unknown function of the file /vam/index.php of the component HTTP GET Parameter Handler. The manipulation of the argument ID/registryid/planeicao leads to sql injection. It is...
CVE-2025-2353
CVE-2025-2353 affects VAM Virtual Airlines Manager (up to 2.6.2). The root cause is SQL injection in an HTTP GET parameter handler in the /vam/index.php file, via the arguments ID/registry_id/plane_icao. This permits remote exploitation and can lead to unauthorized database access or manipulation...
Virtual Airlines Manager 安全漏洞
Virtual Airlines Manager VAM is an open source web-based system for managing virtual airlines from Virtual Airlines Manager, Inc. Supporting different ACARS and flight trackers, it can manage virtual airlines. A security vulnerability exists in Virtual Airlines Manager version 2.6.2 and earlier,...
Why Are Airlines a Prime Target for Cyberattacks?
...
The massive computer outage over the weekend was not a cyber attack, and I’m not sure why we have to keep saying that
Youre not going to believe this, but there was a lot of misinformation on social media over the weekend after the massive CrowdStrike/Microsoft outage. As airlines cancelled flights, hospitals had to reschedule patients and some companies just flat-out couldnt work on Friday, people were quick to...
