1158 matches found
CVE-2023-0283
A vulnerability classified as critical has been found in SourceCodester Online Flight Booking Management System. This affects an unknown part of the file reviewsearch.php of the component POST Parameter Handler. The manipulation of the argument txtsearch leads to sql injection. It is possible to...
CVE-2023-0281
A vulnerability was found in SourceCodester Online Flight Booking Management System. It has been rated as critical. Affected by this issue is some unknown functionality of the file judgepanel.php. The manipulation of the argument subeventid leads to sql injection. The attack may be launched...
CVE-2023-46256
PX4-Autopilot provides PX4 flight control solution for drones. In versions 1.14.0-rc1 and prior, PX4-Autopilot has a heap buffer overflow vulnerability in the parser function due to the absence of parserbufindex value checking. A malfunction of the sensor device can cause a heap buffer overflow...
CVE-2022-46091
Cross Site Scripting XSS vulnerability in the feedback form of Online Flight Booking Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the airline parameter...
CVE-2022-46088
Online Flight Booking Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the feedback form...
CVE-2022-46089
Cross Site Scripting XSS vulnerability in the add-airline form of Online Flight Booking Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the airline parameter...
CVE-2019-3944
Parrot ANAFI is vulnerable to Wi-Fi deauthentication attack, allowing remote and unauthenticated attackers to disconnect drone from controller during mid-flight...
CVE-1999-0375
Buffer overflow in webd in Network Flight Recorder NFR 2.0.2-Research allows remote attackers to execute commands...
Anonymous Hackers Steal Flight Data from US Deportation Airline GlobalX
A hacker group claiming affiliation with Anonymous says it breached GlobalX Airlines, leaking sensitive flight and passenger data…...
VIMU: Effective Physics-Based Realtime Detection and Recovery against Stealthy Attacks on UAVs
Sensor attacks on robotic vehicles have become pervasive and manipulative. Their latest advancements exploit sensor and detector characteristics to bypass detection. Recent security efforts have leveraged the physics-based model to detect or mitigate sensor attacks. However, these approaches are...
CVE-2025-30356
CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures SDLS-EP to secure communications between a spacecraft running the core Flight System cFS and a ground station. In 1.3.3 and earlier, a heap buffer overflow vulnerability persists in...
Arteche saTECH BCU 安全漏洞
The Arteche saTECH BCU is a flight room control unit from Arteche. A security vulnerability exists in the Arteche saTECH BCU version 2.1.3, which stems from a stored cross-site scripting attack that could lead to malicious code execution...
Arteche saTECH BCU 安全漏洞
The Arteche saTECH BCU is a flight room control unit from Arteche. A security vulnerability exists in the Arteche saTECH BCU version 2.1.3 that originates from the transmission of unencrypted sensitive data using the HTTP protocol, which could lead to credential disclosure...
CVE-2025-25371
NASA cFS Core Flight System Aquila is vulnerable to path traversal in the OSAL module, allowing the override of any arbitrary file on the system...
CVE-2025-25374
In NASA cFS Core Flight System Aquila, it is possible to put the onboard software in a state that will prevent the launch of any external application, causing a platform denial of service...
CVE-2025-25372
NASA cFS Core Flight System Aquila is vulnerable to segmentation fault via sending a malicious telecommand to the Memory Management Module...
CVE-2025-25374
In NASA cFS Core Flight System Aquila, it is possible to put the onboard software in a state that will prevent the launch of any external application, causing a platform denial of service...
CVE-2025-25371
NASA cFS Core Flight System Aquila is vulnerable to path traversal in the OSAL module, allowing the override of any arbitrary file on the system...
Cross-site Scripting (XSS)
Overview fprime-gds is a F Prime Flight Software Ground Data System layer Affected versions of this package are vulnerable to Cross-site Scripting XSS on the Run Commands table. An attacker can execute scripts in the context of the browser by injecting malicious strings as cmdDisp.CMDNOOPSTRING...
