EUVD-2023-12362

Malicious code in bioql PyPI...

The vulnerability of the NEBOSV flight information system, related to insufficient protection of operational data, allows a intruder to gain unauthorized access to the protected information.

The vulnerability of the Flight Information System of the NBOS is related to insufficient protection of operational data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the protected information...

The vulnerability of the NEBOSV flight information system, related to insufficient protection of operational data, allows a intruder to gain unauthorized access to the protected information.

The vulnerability of the Flight Information System of the NBOS is related to insufficient protection of operational data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the protected information...

The vulnerability of the NEBOSV flight information system, related to uncontrolled resource consumption, allows a perpetrator to cause a service failure.

The vulnerability of the Flight Information System of the NBOS is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...

The vulnerability of the NEBOSV flight information system, related to insufficient protection of operational data, allows a intruder to gain unauthorized access to the protected information.

The vulnerability of the Flight Information System of the NBOS is related to insufficient protection of operational data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the protected information...

CVE-2025-59534

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures SDLS-EP to secure communications between a spacecraft running the core Flight System cFS and a ground station. Prior to version 1.4.2, there is a command Injection vulnerability in...

Cyberattack Disrupts Airport Check-In Systems Across Europe

Cyberattack on Collins Aerospace check-in system disrupts major European airports, causing flight delays and cancellations across hubs...

Malicious code in flight-rest-successful (npm)

The package flight-rest-successful was found to contain malicious code...

MAL-2025-44284 Malicious code in flight-rest-successful (npm)

The package flight-rest-successful was found to contain malicious code...

CVE-2014-125127

The mikecao/flight PHP framework in versions prior to v1.2 is vulnerable to Denial of Service DoS attacks due to eager loading of request bodies in the Request class constructor. The framework automatically reads the entire request body on every HTTP request, regardless of whether the application...

CVE-2014-125127

The mikecao/flight PHP framework in versions prior to v1.2 is vulnerable to Denial of Service DoS attacks due to eager loading of request bodies in the Request class constructor. The framework automatically reads the entire request body on every HTTP request, regardless of whether the application...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to eager loading of request bodies in the Request constructor. An attacker can cause excessive memory consumption and potentially exhaust server resources by sending requests with...

CVE-2014-125127 Denial of Service (DoS) vulnerability in mikecao/flight

The mikecao/flight PHP framework in versions prior to v1.2 is vulnerable to Denial of Service DoS attacks due to eager loading of request bodies in the Request class constructor. The framework automatically reads the entire request body on every HTTP request, regardless of whether the application...

CVE-2014-125127

The mikecao/flight PHP framework in versions prior to v1.2 is vulnerable to Denial of Service DoS attacks due to eager loading of request bodies in the Request class constructor. The framework automatically reads the entire request body on every HTTP request, regardless of whether the application...

CVE-2014-125127

The CVE-2014-125127 entry concerns the mikecao/flight PHP framework. Affected versions prior to v1.2 are vulnerable to Denial of Service due to eager loading of request bodies in the Request constructor, causing the framework to read the entire body on every HTTP request and risking memory exhaus...

CVE-2014-125127 Denial of Service (DoS) vulnerability in mikecao/flight

The mikecao/flight PHP framework in versions prior to v1.2 is vulnerable to Denial of Service DoS attacks due to eager loading of request bodies in the Request class constructor. The framework automatically reads the entire request body on every HTTP request, regardless of whether the application...

Flight 安全漏洞

Flight is a PHP microframework by Mike Cao's personal developer. A security vulnerability exists in versions prior to Flight v1.2, which stems from eager loading of the request body in the constructor of the Request class, which could lead to a denial-of-service attack...

CVE-2014-125127: Allocation of Resources Without Limits or Throttling

The mikecao/flight PHP framework in versions prior to v1.2 is vulnerable to Denial of Service DoS attacks due to eager loading of request bodies in the Request class constructor. The framework automatically reads the entire request body on every HTTP request, regardless of whether the application...

kernel: Bluetooth: hci_core: Fix use-after-free in vhci_flush()

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcicore: Fix use-after-free in vhciflush syzbot reported use-after-free in vhciflush without repro. 0 From the splat, a thread closed a vhci file descriptor while its device was being used by iotcl on another thread...

Malicious code in @flight-common/services (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9f79d53932b1163ec8f1f13fbb18de9439278bcf7ee1fe90dcd53d0349d24b72 The OpenSSF Package Analysis project identified '@flight-common/services' @ 1.2.9213 npm as malicious. It is considered malicious because: - The...