EUVD-2025-36076

A vulnerability was detected in Bdtask Flight Booking Software up to 3.1. This affects an unknown part of the file /b2c/package-information of the component Package Information Module. The manipulation results in unrestricted upload. The attack can be launched remotely. The exploit is now public...

CVE-2025-12223

The vulnerability CVE-2025-12223 affects Bdtask Flight Booking Software up to version 3.1, specifically the Package Information Module’s /b2c/package-information file. It enables unrestricted remote file uploads due to an upload restriction flaw, with exploitation reported as public. Multiple sou...

CVE-2025-12222

CVE-2025-12222 affects Bdtask Flight Booking Software up to v3.1. The vulnerability exists in the Deposit Handler’s Deposit component, specifically the /admin/transaction/deposit path, where an unknown functionality allows unrestricted file upload. This can be exploited remotely and was publicly ...

EUVD-2025-36077

A security vulnerability has been detected in Bdtask Flight Booking Software up to 3.1. Affected by this issue is some unknown functionality of the file /admin/transaction/deposit of the component Deposit Handler. The manipulation leads to unrestricted upload. The attack can be initiated remotely...

CVE-2025-12222 Bdtask Flight Booking Software Deposit deposit unrestricted upload

A security vulnerability has been detected in Bdtask Flight Booking Software up to 3.1. Affected by this issue is some unknown functionality of the file /admin/transaction/deposit of the component Deposit Handler. The manipulation leads to unrestricted upload. The attack can be initiated remotely...

CVE-2025-12222 Bdtask Flight Booking Software Deposit deposit unrestricted upload

A security vulnerability has been detected in Bdtask Flight Booking Software up to 3.1. Affected by this issue is some unknown functionality of the file /admin/transaction/deposit of the component Deposit Handler. The manipulation leads to unrestricted upload. The attack can be initiated remotely...

PT-2025-43876

Name of the Vulnerable Software and Affected Versions Bdtask Flight Booking Software versions prior to 3.1 Description A security issue exists in Bdtask Flight Booking Software. The issue involves unrestricted upload capabilities through an unknown functionality within the...

Bdtask Flight Booking Software 代码问题漏洞

Bdtask Flight Booking Software is an airline booking software from Bdtask Bangladesh. A code issue vulnerability exists in Bdtask Flight Booking Software version 3.1 and earlier, which stems from an unrestricted upload function in the component Deposit Handler in the file...

Bdtask Flight Booking Software 代码问题漏洞

Bdtask Flight Booking Software is an airline booking software from Bdtask Bangladesh. A code issue vulnerability exists in Bdtask Flight Booking Software version 3.1 and earlier, which stems from a missing upload restriction in the Package Information Module, a component in the file...

PT-2025-43877

Name of the Vulnerable Software and Affected Versions Bdtask Flight Booking Software versions prior to 3.2 Description A flaw exists in Bdtask Flight Booking Software that allows for unrestricted file uploads. This issue affects the Package Information Module, specifically within the...

Malicious Package

Overview flight-debug is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

CVE-2025-62515 Remote Code Execution by Pickle Deserialization via FlightServer in pyquokka

pyquokka is a framework for making data lakes work for time series. In versions 0.3.1 and prior, the FlightServer class directly uses pickle.loads to deserialize action bodies received from Flight clients without any sanitization or validation in the doaction method. The vulnerable code is locate...

pyquokka is Vulnerable to Remote Code Execution by Pickle Deserialization via FlightServer

Description In the FlightServer class of the pyquokka framework, the doaction method directly uses pickle.loads to deserialize action bodies received from Flight clients without any sanitization or validation, which results in a remote code execution vulnerability. The vulnerable code is located...

GHSA-F74J-GFFQ-VM9P pyquokka is Vulnerable to Remote Code Execution by Pickle Deserialization via FlightServer

Description In the FlightServer class of the pyquokka framework, the doaction method directly uses pickle.loads to deserialize action bodies received from Flight clients without any sanitization or validation, which results in a remote code execution vulnerability. The vulnerable code is located...

Don't Look Up: There Are Sensitive Internal Links in the Clear on GEO Satellites

Geosynchronous GEO satellite links provide IP backhaul to remote critical infrastructure for utilities, telecom, government, military, and commercial users. To date, academic studies of GEO infrastructure have focused on a handful of satellites and specific use cases. The authors of this paper...

EUVD-2025-33589

Malicious code in flight-suit npm...

Malicious Package

Overview flight-suit is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

Malicious Package

Overview @aviatrixdev/flight-suit is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview @aviatrixdev/flight-suit is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

MAL-2025-48092 Malicious code in @aviatrixdev/flight-suit1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f67f0297879682bb09001ab95a186ca13c641603c6a4694b81972b68d8a7b55d The OpenSSF Package Analysis project identified '@aviatrixdev/flight-suit1' @ 1.1.25050 npm as malicious. It is considered malicious because: -...