220 matches found
EUVD-2025-24798
Malicious code in bioql PyPI...
WordPress Flights & Hotels Booking WP Plugin plugin <= 3.1 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Flights & Hotels Booking WP Plugin versions = 3.1...
CVE-2025-8957
A vulnerability was determined in Campcodes Online Flight Booking Management System 1.0. Affected is an unknown function of the file /flights.php. The manipulation of the argument departureairportid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...
CVE-2025-8957
A vulnerability was determined in Campcodes Online Flight Booking Management System 1.0. Affected is an unknown function of the file /flights.php. The manipulation of the argument departureairportid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...
CVE-2025-8957 Campcodes Online Flight Booking Management System flights.php sql injection
A vulnerability was determined in Campcodes Online Flight Booking Management System 1.0. Affected is an unknown function of the file /flights.php. The manipulation of the argument departureairportid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...
CVE-2025-8957
CVE-2025-8957 affects Campcodes Online Flight Booking Management System 1.0. The vulnerability is an SQL injection in the file /flights.php via the departure_airport_id parameter. It can be exploited remotely, and public disclosures exist. Connected documents consistently describe the issue and i...
CVE-2025-8957 Campcodes Online Flight Booking Management System flights.php sql injection
A vulnerability was determined in Campcodes Online Flight Booking Management System 1.0. Affected is an unknown function of the file /flights.php. The manipulation of the argument departureairportid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...
PT-2025-33260 · Unknown · Campcodes Online Flight Booking Management System
Name of the Vulnerable Software and Affected Versions: Campcodes Online Flight Booking Management System version 1.0 Description: A SQL injection issue exists in Campcodes Online Flight Booking Management System version 1.0. Manipulation of the departure airport id argument in the /flights.php fi...
PT-2024-38389 · Unknown · Airline Reservation System
Name of the Vulnerable Software and Affected Versions: Airline Reservation System version 1.0 Description: A critical issue was found in the Airline Reservation System, affecting an unknown functionality of the file flights.php. The manipulation of the departure airport id argument leads to SQL...
CrowdStrike Update Causes Havoc, Grounding Flights and Disrupting Businesses
The Biggest IT Outage in Recent Memory? A faulty CrowdStrike update triggered a global tech meltdown, grounding flights,…...
Israeli El Al Alleges Hackers Targeted Flights in Mid-Air Hijack Attempt
By Deeba Ahmed The aircraft was reportedly flying over an area inhabited by Iranian-backed Houthis. This is a post from HackRead.com Read the original post: Israeli El Al Alleges Hackers Targeted Flights in Mid-Air Hijack Attempt...
Design/Logic Flaw
MSS Mission Support System is an open source package designed for planning atmospheric research flights. In file: index.py, there is a method that is vulnerable to path manipulation attack. By modifying file paths, an attacker can acquire sensitive information from different resources. The filena...
Marvin Attack
Overview Affected versions of this package are vulnerable to Marvin Attack due to the improper handling of DTLS records that do not check if messages span key boundaries. An attacker can exploit this vulnerability to combine DTLS messages using different keys into one DTLS record. Notes: 1 An...
Google Pay accidentally handed out free money, bug now fixed
Days ago, several Google Pay users in the US received some unexpected cashback from Google, congratulating them "for dogfooding the Google Pay Remittance experience". Confused and a tad happy, some looked to Twitter for answers, while others aired their experiences on the /r/googlepay/ Reddit pag...
world-of-flights.de Cross Site Scripting vulnerability OBB-2818852
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
How Tesla and HyperLoop accelerations help people with rocket flights
We don’t need that crazy acceleration for Tesla cars and Hyperloop for daily life in a few words. It’s a lot of fun, for sure, and some marketing feature that puts electric cars in supercars bucket. At the same time, that crazy acceleration train people to take overloads. In my personal experienc...
flights.hotelplanner.com XSS vulnerability
Open Bug Bounty ID: OBB-684675 Description| Value ---|--- Affected Website:| flights.hotelplanner.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Eurowings - cheap flights - Dangerous filesystem permissions, Insecure KeyStore, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Eurowings - cheap flights published at the 'play' market has multiple vulnerabilities...
MakeMyTrip-Flights Hotels Cabs - Exported ContentProvider, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application MakeMyTrip-Flights Hotels Cabs published at the 'play' market has multiple vulnerabilities...