Online Flight Booking Management System Security Vulnerability

Online Flight Booking Management System is an online booking management system from the individual developer Carlo Montero. A security vulnerability exists in Online Flight Booking Management System v1.0, which stems from a cross-site scripting XSS vulnerability in the feedback form...

CVE-2022-46089

CVE-2022-46089 is a Cross Site Scripting (XSS) vulnerability in the Online Flight Booking Management System v1.0, specifically in the add-airline form where an attacker can inject a payload via the airline parameter to execute arbitrary client-side scripts. The common details across connected doc...

CVE-2022-46091

Cross Site Scripting XSS vulnerability in the feedback form of Online Flight Booking Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the airline parameter...

CVE-2022-46091

CVE-2022-46091 affects Online Flight Booking Management System v1.0, with a Cross Site Scripting (XSS) flaw in the feedback form. The vulnerability arises from a crafted payload injected into the airline parameter, enabling execution of arbitrary client-side scripts/HTML. Connected sources confir...

CVE-2022-46088

Online Flight Booking Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the feedback form...

CVE-2022-46088

Online Flight Booking Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the feedback form...

CVE-2022-46088

Online Flight Booking Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the feedback form...

Cross site scripting

Online Flight Booking Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the feedback form...

CVE-2022-46088

CVE-2022-46088 affects Online Flight Booking Management System v1.0. Multiple connected sources report a cross-site scripting (XSS) vulnerability via the feedback form, caused by improper handling of user-supplied input. The descriptions consistently identify the feedback form as the entry point ...

Online Flight Booking Management System Security Vulnerability

Online Flight Booking Management System is an online booking management system by Carlo Montero, an individual developer. A security vulnerability exists in Online Flight Booking Management System v1.0, which is caused by a cross-site scripting XSS vulnerability in the feedback form...

CVE-2022-46088

Online Flight Booking Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the feedback form...

CVE-2023-6937

wolfSSL prior to 5.6.6 did not check that messages in one DTLS record do not span key boundaries. As a result, it was possible to combine DTLS messages using different keys into one DTLS record. The most extreme edge case is that, in DTLS 1.3, it was possible that an unencrypted DTLS 1.3 record...

Hacking Electronic Flight Bags. Airbus NAVBLUE Flysmart+ Manager

We’ve been testing the security of a number of different electronic flight bag, or EFB, applications for a few years now. Here’s the latest on that now it has been remediated, 19 months after our initial disclosure to Airbus. TL;DR Flysmart+ is a suite of apps for pilot EFBs, helping deliver...

Internet Bug Bounty: Argo CD CSRF leads to Kubernetes cluster compromise

Cross-Site Request Forgery CSRF in github.com/argoproj/argo-cd CVE-2024-22424 Severity: High Impact The Argo CD API prior to versions 2.10-rc2, 2.9.4, 2.8.8, and 2.7.16 are vulnerable to a cross-server request forgery CSRF attack when the attacker has the ability to write HTML to a page on the sa...

Cockpit door lock auto-unlock is no surprise

TL;DR Through reverse engineering a cockpit door lock controller several years ago, we’ve known about the auto-unlatch issue We couldn’t publish owing to the risk to flight safety, even though some airplane type manuals already described the behaviour in a depressurisation event Now that the Alas...

CVE-2023-50121

Autel EVO NANO drone flight control firmware version 1.6.5 is vulnerable to denial of service DoS...

CVE-2023-50121

CVE-2023-50121 affects the Autel EVO NANO drone flight control firmware, specifically version 1.6.5. The available documents state a denial of service (DoS) vulnerability but do not provide concrete details on the root cause, vulnerable function/file, or affected hardware variants beyond this fir...

flight-case-sur-mesure.com Improper Access Control vulnerability OBB-3799296

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

e-flight-forum.com Improper Access Control vulnerability OBB-3798856

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

UBUNTU-CVE-2022-41678

Once an user is authenticated on Jolokia, he can potentially trigger arbitrary code execution. In details, in ActiveMQ configurations, jetty allows org.jolokia.http.AgentServlet to handler request to /api/jolokia org.jolokia.http.HttpRequestHandlerhandlePostRequest is able to create JmxRequest...