CVE-2026-48117 DroneAware's Improper Account Activation in Registration and SSO Flows Leads to Account Takeover

DroneAware is a drone detection platform. The centralized DroneAware server backing droneaware.io was vulnerable to an account pre-hijacking attack in which an attacker could register an account using a victim's email address with an attacker-controlled password before the victim completed accoun...

CVE-2026-48117 DroneAware's Improper Account Activation in Registration and SSO Flows Leads to Account Takeover

DroneAware is a drone detection platform. The centralized DroneAware server backing droneaware.io was vulnerable to an account pre-hijacking attack in which an attacker could register an account using a victim's email address with an attacker-controlled password before the victim completed accoun...

PT-2026-50441

DroneAware is a drone detection platform. The centralized DroneAware server backing droneaware.io was vulnerable to an account pre-hijacking attack in which an attacker could register an account using a victim's email address with an attacker-controlled password before the victim completed accoun...

CVE-2022-2778

creationtimestamp| type| source ---|---|--- 2025-05-20 20:41:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17088...

CVE-2024-12679

creationtimestamp| type| source ---|---|--- 2025-05-20 19:43:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17066...

CVE-2022-41846

creationtimestamp| type| source ---|---|--- 2025-05-20 19:43:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17061...

CVE-2024-11718

creationtimestamp| type| source ---|---|--- 2025-05-20 19:42:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17060...

CVE-2024-11141

creationtimestamp| type| source ---|---|--- 2025-05-20 19:41:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17048...

CVE-2024-10818

creationtimestamp| type| source ---|---|--- 2025-05-20 19:41:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17047...

CVE-2024-10639

creationtimestamp| type| source ---|---|--- 2025-05-20 19:40:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17046...

CVE-2025-37975

creationtimestamp| type| source ---|---|--- 2025-05-20 17:47:10+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17040...

CVE-2025-37977

creationtimestamp| type| source ---|---|--- 2025-05-20 17:47:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17038...

CVE-2025-47853

creationtimestamp| type| source ---|---|--- 2025-05-20 17:42:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17020...

CVE-2024-10076

creationtimestamp| type| source ---|---|--- 2025-05-20 16:41:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17014...

CVE-2025-37936

creationtimestamp| type| source ---|---|--- 2025-05-20 15:40:37+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16997...

GHSA-3HW7-QJ9H-R835

creationtimestamp| type| source ---|---|--- 2025-05-20 13:40:27+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16973...

CVE-2023-5964

creationtimestamp| type| source ---|---|--- 2023-11-06 16:25:51+00:00| seen| https://t.me/cibsecurity/73616 2025-05-20 08:40:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16961...

CVE-2023-45159

creationtimestamp| type| source ---|---|--- 2023-10-05 14:12:35+00:00| seen| https://t.me/cibsecurity/71659 2025-05-20 08:39:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16957...

CVE-2022-41385

creationtimestamp| type| source ---|---|--- 2022-10-12 02:26:12+00:00| seen| https://t.me/cibsecurity/51224 2025-05-20 14:40:36+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16978...

CVE-2022-41975

creationtimestamp| type| source ---|---|--- 2022-09-30 22:36:25+00:00| seen| https://t.me/cibsecurity/50796 2025-05-20 16:41:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17016...