EFB vulnerability in Lufthansa’s Lido eRouteManual

Almost all commercial airlines now use electronic flight bags EFBs to drive efficiency and safety in their operations. We’ve been testing the security of EFBs and their apps, here’s our latest findings. TL;DR Many airlines use Lufthansa Systems Lido eRoute Manual for their EFB approach plates. We...

Matrix42 Workspace Management 9.1.2.2765 Cross Site Scripting Vulnerability

Matrix42 Workspace Management version 9.1.2.2765 suffers from a persistent cross site scripting vulnerability. Matrix42 Workspace Management 9.1.2.2765 – Stored Cross-Site Scripting =============================================================================== Identifiers...

lufthansa-aviation-training.com XSS vulnerability

Open Bug Bounty ID: OBB-664700 Description| Value ---|--- Affected Website:| lufthansa-aviation-training.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

lufthansa-aviation-training.com XSS vulnerability

Open Bug Bounty ID: OBB-660111 Description| Value ---|--- Affected Website:| lufthansa-aviation-training.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mediabase.lufthansa.com XSS vulnerability

Open Bug Bounty ID: OBB-620457 Description| Value ---|--- Affected Website:| mediabase.lufthansa.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

lufthansa.com XSS vulnerability

Vulnerable URL: https://www.lufthansa.com/deeplink/mybookings?country=xxx="%3E%3Cxxx%2Fonbeforescriptexecute%3DpromptXSSPOSED%3E Details: Description| Value ---|--- Patched:| Yes, at 04.01.2018 Latest check for patch:| 04.01.2018 10:15 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

lufthansa.com XSS vulnerability

Vulnerable URL: https://www.lufthansa.com/deeplink/cockpit?country=XXX="%3E%3Cxxx%2Fonbeforescriptexecute%3DpromptXSSPOSED%3E Details: Description| Value ---|--- Patched:| Yes, at 27.12.2017 Latest check for patch:| 27.12.2017 13:54 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

Why It’s Still A Bad Idea to Post or Trash Your Airline Boarding Pass

An October 2015 piece published here about the potential dangers of tossing out or posting online your airline boarding pass remains one of the most-read stories on this site. One reason may be that the advice remains timely and relevant: A talk recently given at a Czech security conference...

Lufthansa AG - (Limbo) Open Redirect Web Vulnerability

Document Title: =============== Lufthansa AG - Limbo Open Redirect Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2060 LHPROD-66558 COM-1036050 Release Date: ============= 2017-05-23 Vulnerability Laboratory ID VL-ID:...

Lufthansa AG - (Limbo) Open Redirect Web Vulnerability

Document Title: =============== Lufthansa AG - Limbo Open Redirect Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2060 LHPROD-66558 COM-1036050 Release Date: ============= 2017-05-22 Vulnerability Laboratory ID VL-ID:...

lufthansa.com XSS vulnerability

Vulnerable URL: http://www.lufthansa.com/fly/ke/flightsfrom-nairobi&wt.mc;id=%22%3e%3csvg/onload=alert%60OPENBUGBOUNTY%60%3e/? Details: Description| Value ---|--- Patched:| Yes, at 23.10.2017 Latest check for patch:| 23.10.2017 07:20 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

lufthansa.com XSS vulnerability

Vulnerable URL: http://www.lufthansa.com/co/es/Ayuda-y-contactos Details: Description| Value ---|--- Patched:| Yes, at 18.10.2016 Latest check for patch:| 18.10.2016 23:05 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2960 VIP website status:| Yes Check...

chronik.lufthansagroup.com XSS vulnerability

Vulnerable URL: http://chronik.lufthansagroup.com/fe/timeline.php?lan=1alert'OPENBUGBOUNTY' Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

a380.lufthansa.com XSS vulnerability

Vulnerable URL: http://a380.lufthansa.com/SHARED/flightplan/flightplan.php?language=en=b2c";alert'OPENBUGBOUNTY';z="z":"1 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

snippets.developer.lufthansa.com XSS vulnerability

Vulnerable URL: http://snippets.developer.lufthansa.com/?lang=php=oAuth/oAuth with CURL" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

lht.app.lufthansa.com XSS vulnerability

Open Bug Bounty ID: OBB-157876 Description| Value ---|--- Affected Website:| lht.app.lufthansa.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

Lufthansa Quartett - BSD license, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Lufthansa Quartett published at the 'play' market has multiple vulnerabilities...

Lufthansa - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Lufthansa published at the 'play' market has multiple vulnerabilities...