SpiceJet Booking System Flaws: PNR Enumeration & No-Auth Access (CVSS 7.5)
A newly disclosed vulnerability in the SpiceJet Online Booking System exposes passengers' personal information through two critical security flaws: PNR enumeration and a missing authentication check....