1158 matches found
CVE-2022-46089
Cross Site Scripting XSS vulnerability in the add-airline form of Online Flight Booking Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the airline parameter...
CVE-2022-46091
The Online Flight Booking Management System v1.0 is vulnerable to a Cross Site Scripting (XSS) flaw in its feedback form. The root cause is the improper neutralization of input, which allows an attacker to inject a crafted payload into the airline parameter to execute arbitrary web scripts or HTM...
CVE-2022-46091: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability in the feedback form of Online Flight Booking Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the airline parameter...
CVE-2022-46089
The Online Flight Booking Management System version 1.0 is vulnerable to a Cross-Site Scripting (XSS) vulnerability in the add-airline form. The root cause is the improper neutralization of input during web page generation, specifically allowing a crafted payload to be injected into the airline p...
CVE-2022-46089: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability in the add-airline form of Online Flight Booking Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the airline parameter...
Online Flight Booking Management System Security Vulnerability
Online Flight Booking Management System is an online booking management system from the personal developer Carlo Montero. A security vulnerability exists in Online Flight Booking Management System version v1.0 due to a cross-site scripting XSS vulnerability in the Add Airline form...
Online Flight Booking Management System Security Vulnerability
Online Flight Booking Management System is an online booking management system from the individual developer Carlo Montero. A security vulnerability exists in Online Flight Booking Management System v1.0, which stems from a cross-site scripting XSS vulnerability in the feedback form...
CVE-2022-46088
Online Flight Booking Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the feedback form...
CVE-2022-46088
Online Flight Booking Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the feedback form...
CVE-2022-46088
Online Flight Booking Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the feedback form...
Cross site scripting
Online Flight Booking Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the feedback form...
Online Flight Booking Management System Security Vulnerability
Online Flight Booking Management System is an online booking management system by Carlo Montero, an individual developer. A security vulnerability exists in Online Flight Booking Management System v1.0, which is caused by a cross-site scripting XSS vulnerability in the feedback form...
CVE-2022-46088
Online Flight Booking Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the feedback form...
CVE-2022-46088: Improper Neutralization of Input During Web Page Generation
Online Flight Booking Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the feedback form...
CVE-2022-46088
CVE-2022-46088 affects Online Flight Booking Management System v1.0. Multiple connected sources report a cross-site scripting (XSS) vulnerability via the feedback form, caused by improper handling of user-supplied input. The descriptions consistently identify the feedback form as the entry point ...
CVE-2023-6937
wolfSSL prior to 5.6.6 did not check that messages in one DTLS record do not span key boundaries. As a result, it was possible to combine DTLS messages using different keys into one DTLS record. The most extreme edge case is that, in DTLS 1.3, it was possible that an unencrypted DTLS 1.3 record...
Hacking Electronic Flight Bags. Airbus NAVBLUE Flysmart+ Manager
We’ve been testing the security of a number of different electronic flight bag, or EFB, applications for a few years now. Here’s the latest on that now it has been remediated, 19 months after our initial disclosure to Airbus. TL;DR Flysmart+ is a suite of apps for pilot EFBs, helping deliver...
Internet Bug Bounty: Argo CD CSRF leads to Kubernetes cluster compromise
Cross-Site Request Forgery CSRF in github.com/argoproj/argo-cd CVE-2024-22424 Severity: High Impact The Argo CD API prior to versions 2.10-rc2, 2.9.4, 2.8.8, and 2.7.16 are vulnerable to a cross-server request forgery CSRF attack when the attacker has the ability to write HTML to a page on the sa...
Cockpit door lock auto-unlock is no surprise
TL;DR Through reverse engineering a cockpit door lock controller several years ago, we’ve known about the auto-unlatch issue We couldn’t publish owing to the risk to flight safety, even though some airplane type manuals already described the behaviour in a depressurisation event Now that the Alas...