om-research

Investigación OM Este repositorio explora el protocolo Bluetooth Low Energy BLE utilizado por la serie Osmo Mobile de estabilizadores. Las aplicaciones móviles oficiales están desactualizadas y requieren permisos amplios del sistema. Sin embargo, los estabilizadores se comunican mediante un...

MeshTNC

MeshTNC MeshTNC es una herramienta para canalizar datos LoRa hacia y desde radios de grado de consumo. Código - github.com/datapartyjs/MeshTNC Lanzamientos - github.com/datapartyjs/MeshTNC/releases Soporte - ko-fi/dataparty Características CLI serie simple integrada en el firmware Transmitir byte...

btlejack

BtleJack: una navaja suiza de Bluetooth Low Energy Btlejack proporciona todo lo que necesitas para esnifar, interferir y secuestrar dispositivos Bluetooth Low Energy. Se basa en uno o más dispositivos BBC Micro:Bit que ejecutan un firmware dedicado. También es posible que quieras usar un sniffer...

CVE-2026-77812 Cleartext Exposure of DJI Drone Wi-Fi Credentials via BLE

DJI drones transmit DUML DJI Universal Markup Language protocol messages over BLE Bluetooth Low Energy without encryption. When a client attempts to connect to the drone over Wi-Fi, or when the drone is switched to QuickTransfer mode, the DJI Fly application exchanges DUML messages with the drone...

CVE-2026-77812

CVE-2026-77812 is a critical (CVSS 4.0: 9.4) vulnerability in DJI drones where DUML protocol messages transmitted over BLE are unencrypted . During a normal DJI Fly Wi-Fi connection or QuickTransfer mode, the drone's Wi-Fi PSK, SSID, and trusted session UUID are exposed in cleartext. A passive at...

PT-2026-79388

Name of the Vulnerable Software and Affected Versions DJI Neo versions prior to 01.00.0400 DJI Neo 2 versions prior to 01.00.0500 DJI Flip versions prior to 01.00.1200 DJI Air 3 versions prior to 01.00.1600 DJI Air 3S versions prior to 01.00.1400 DJI Avata 2 versions prior to 01.00.0400 DJI Avata...

CVE-2019-17627

Summary: CVE-2019-17627 affects the Yale Bluetooth Key mobile app and Yale ZEN-R lock family. The issue lets an attacker sniff BLE traffic during an authorized unlock and then compute the authentication key from the hex digits of a valid authentication request, enabling unauthorized unlock action...