CVE-2025-13238

CVE-2025-13238 affects Bdtask Flight Booking Software 4. The Edit Profile Page component (/agent/profile/edit) is susceptible to manipulation that enables unrestricted file uploads. The flaw can be exploited remotely and has publicly available exploit materials. Multiple sources corroborate the i...

CVE-2025-13238 Bdtask Flight Booking Software Edit Profile edit unrestricted upload

A weakness has been identified in Bdtask Flight Booking Software 4. Affected by this vulnerability is an unknown functionality of the file /agent/profile/edit of the component Edit Profile Page. This manipulation causes unrestricted upload. The attack may be initiated remotely. The exploit has be...

PT-2025-47073

Name of the Vulnerable Software and Affected Versions Bdtask Flight Booking Software version 4 Description A flaw exists in Bdtask Flight Booking Software version 4 that allows for unrestricted file upload through the Edit Profile Page, specifically via the /agent/profile/edit file. This...

Bdtask Flight Booking Software 代码问题漏洞

Bdtask Flight Booking Software is an airline booking software from Bdtask Bangladesh. A code issue vulnerability exists in Bdtask Flight Booking Software that stems from incorrect manipulation of the component Edit Profile Page in the file /agent/profile/edit, which could lead to unlimited upload...

Malicious code in flight-iltag-ziuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a74cc82227727b826382d1c37b7f77c2e152c5819764164f3be0cdd608ab2a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-138076

Malicious code in flight-ilutag-zilauma npm...

EUVD-2025-138084

Malicious code in flight-iloamatnag-ziumaa npm...

EUVD-2025-138080

Malicious code in flight-iltag-zilauma npm...

EUVD-2025-138081

Malicious code in flight-iloatag-ziumaa npm...

EUVD-2025-138077

Malicious code in flight-iltag-ziumaa npm...

EUVD-2025-138078

Malicious code in flight-iltag-ziuma npm...

EUVD-2025-138079

Malicious code in flight-iltag-ziluma npm...

EUVD-2025-138083

Malicious code in flight-iloamtag-ziumaa npm...

EUVD-2025-138085

Malicious code in flight-iloamatinag-ziumaa npm...

EUVD-2025-138082

Malicious code in flight-iloamtnag-ziumaa npm...

Malicious code in flight-dang-ufua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cce7d13cbf4cbbd05a5d6e35ef6b6b7b637d5dea25097a17b1ef47fcd74d8ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flight-dangw-ufua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c77ed3f65b1529d9b70920b67f5f3a1f70e724c31c3bc9d999ab6ef64b2e2b9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flight-da-ufua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2db8f679a974eb31caf53ca6ed9ea68d4e4fd3c572e107ea33c0d7fc10d1172 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flight-dangers-fantm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8845c55a0327f49866719370dbbdef425345117fb85a3cd105417359792df8d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155258 Malicious code in flight-danger-fanthomia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 644c828982141928f5b9d2f973e1ec9fcbd632302e10cfbaea5c12fdd3db0203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...