341 matches found
DJI drone 安全漏洞
DJI drone is a unmanned aircraft system. A security vulnerability exists in all versions of the DJI drone between 2017 and 2022 that stems from the disclosure of unencrypted information about the physical location of the drone operator via the AeroScope protocol...
PT-2022-19927 · Dji · Dji Drone Devices
Name of the Vulnerable Software and Affected Versions: DJI drone devices sold in 2017 through 2022 Description: The issue concerns DJI drone devices broadcasting unencrypted information about the drone operator's physical location via the AeroScope protocol. Recommendations: For DJI drone devices...
PT-2022-6500 · Dji · Dji Spark
Name of the Vulnerable Software and Affected Versions: DJI Spark version 01.00.0900 Description: The issue is related to a flaw in the implementation of the Dynamic Host Configuration Protocol DHCP in the DJI Spark drone's firmware, which can lead to the exhaustion of the IP address pool due to a...
drone-city.net Cross Site Scripting vulnerability OBB-2325354
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
A Drone Tried to Disrupt the Power Grid. It Won't Be the Last
An attack attempt in 2020 proves the UAS threat is real—and not enough is being done to stop it...
Tesla Remotely Hacked from a Drone
This is an impressive hack: Security researchers Ralf-Philipp Weinmann of Kunnamon, Inc. and Benedikt Schmotzle of Comsecuris GmbH have found remote zero-click security vulnerabilities in an open-source software component ConnMan used in Tesla automobiles that allowed them to compromise parked ca...
Micro Air Vehicle Link Path Traversal Vulnerability
Micro Air Vehicle Link MAVLink is a lightweight messaging protocol from the Dronecode project that is primarily used for communication between ground control terminals ground stations and UAVs as well as between airborne UAV components. A security vulnerability exists in the Micro Air Vehicle Lin...
drone-city.net Cross Site Scripting vulnerability OBB-1253169
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
DJI Drone App Riddled With Privacy Issues, Researchers Allege
Leading commercial drone maker DJI is hitting back against researcher allegations that its Android mobile application is riddled with privacy holes. One includes that the app continues to run in the background even after it’s been closed and collects sensitive data from users without consent. The...
Researchers Reveal New Security Flaw Affecting China's DJI Drones
Cybersecurity researchers on Thursday revealed security issues in the Android app developed by Chinese drone-maker Da Jiang Innovations DJI that comes with an auto-update mechanism that bypasses Google Play Store and could be used to install malicious applications and transmit sensitive personal...
DroneSploit - Drone Pentesting Framework Console
This CLI framework is based on sploitkit and is an attempt to gather hacking techniques and exploits especially focused on drone hacking. For the ease of use, the interface has a layout that looks like Metasploit. Black Hat Europe Arsenal 2019 presentation Also see articles: Black Hat Europe: New...
Locating malicious drone operators through deep neural networks
By Zara Khan Researchers at Ben Gurion University have developed a technique... This is a post from HackRead.com Read the original post: Locating malicious drone operators through deep neural networks...
Micro Air Vehicle Link Access Control Error Vulnerability
Micro Air Vehicle Link MAVLink is a lightweight messaging protocol from the Dronecode project that is primarily used for communication between ground control terminals ground stations and UAVs as well as between airborne UAV components. An access control error vulnerability exists in MAVLink, whi...
Parrot ANAFI has an unspecified vulnerability
The Parrot ANAFI is a drone device. A security vulnerability exists in the Parrot ANAFI using firmware versions prior to 1.5.0, which can be exploited by an attacker with the help of the 'garsdkcmddescCommonCommonCurrentDateTime' command with a long date length to cause a web server crash...
Unspecified vulnerability in Parrot ANAFI (CNVD-2021-27990)
The Parrot ANAFI is a drone device. A security vulnerability exists in the Parrot ANAFI that can be exploited by a remote attacker to disconnect the drone from its controller during flight...
U.S. Department of Interior Grounding All Drones
The Department of Interior is grounding all non-emergency drones due to security concerns: The order comes amid a spate of warnings and bans at multiple government agencies, including the Department of Defense, about possible vulnerabilities in Chinese-made drone systems that could be allowing...
Friday Squid Blogging: Streamlined Quick Unfolding Investigation Drone
Yet another squid acronym. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...
Friday Squid Blogging: Squid-Like Underwater Drone
The Sea Hunting Autonomous Reconnaissance Drone SHARD swims like a squid and can explode on command. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...
Sparrow-Wifi - Next-Gen GUI-based WiFi And Bluetooth Analyzer For Linux
Sparrow-wifi has been built from the ground up to be the next generation 2.4 GHz and 5 GHz Wifi spectral awareness tool. At its most basic it provides a more comprehensive GUI-based replacement for tools like inSSIDer and linssid that runs specifically on linux. In its most comprehensive use case...
A week in security (September 9 – 15)
Last week on the Labs blog, we looked at free VPN offerings, how malware can hinder vital emergency services, and explored how the Heartbleed vulnerability is still causing problems. We also talked about a large FTC settlement involving Google, and how to keep an eye out for leaky AWS buckets...