392 matches found
drone-school.us Cross Site Scripting vulnerability OBB-3042557
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Ukraine Enters a Dark New Era of Drone Warfare
A series of deadly attacks using Iranian “suicide drones” shows Russia is shifting gears in the conflict...
The Queen’s Funeral Sets Off the Biggest UK Police Operation Ever
Snipers on buildings. Drone no-fly zones. Temporary CCTV. The security plan is even more complex than it was for the London 2012 Olympics...
Drone Deliveries into Prisons
Seems its now common to sneak contraband into prisons with a drone...
Hack Allows Drone Takeover Via ‘ExpressLRS’ Protocol
The popular protocol for radio controlled RC aircraft called ExpressLRS can be hacked in only a few steps, according to a bulletin published last week. ExpressLRS is an open-source long range radio link for RC applications, such as first-person view FPV drones. “Designed to be the best FPV Racing...
RedTeam-Physical-Tools - Red Team Toolkit - A Curated List Of Tools That Are Commonly Used In The Field For Physical Security, Red Teaming, And Tactical Covert Entry
Commonly used tools for Red Teaming Engagements, Physical Security Assessments, and Tactical Covert Entry. In this list I decided to share most of the tools I utilize in authorized engagements, along with my personal ranking of their value based on their usage and for you to consider if they shou...
CVE-2022-29945
DJI drone devices sold in 2017 through 2022 broadcast unencrypted information about the drone operator's physical location via the AeroScope protocol...
CVE-2022-29945
DJI drone devices sold in 2017 through 2022 broadcast unencrypted information about the drone operator's physical location via the AeroScope protocol...
CVE-2022-29945
CVE-2022-29945 concerns DJI drone devices (2017–2022) broadcasting unencrypted operator location information via the AeroScope protocol. Affected component: AeroScope data broadcast implementation; root cause: unencrypted location data exposure in AeroScope. Impact stated across sources as privac...
CVE-2022-29945
DJI drone devices sold in 2017 through 2022 broadcast unencrypted information about the drone operator's physical location via the AeroScope protocol...
CVE-2022-29945: Cleartext Transmission of Sensitive Information
DJI drone devices sold in 2017 through 2022 broadcast unencrypted information about the drone operator's physical location via the AeroScope protocol...
DJI drone 安全漏洞
DJI drone is a unmanned aircraft system. A security vulnerability exists in all versions of the DJI drone between 2017 and 2022 that stems from the disclosure of unencrypted information about the physical location of the drone operator via the AeroScope protocol...
PT-2022-19927 · Dji · Dji Drone Devices
Name of the Vulnerable Software and Affected Versions: DJI drone devices sold in 2017 through 2022 Description: The issue concerns DJI drone devices broadcasting unencrypted information about the drone operator's physical location via the AeroScope protocol. Recommendations: For DJI drone devices...
PT-2022-6500 · Dji · Dji Spark
Name of the Vulnerable Software and Affected Versions: DJI Spark version 01.00.0900 Description: The issue is related to a flaw in the implementation of the Dynamic Host Configuration Protocol DHCP in the DJI Spark drone's firmware, which can lead to the exhaustion of the IP address pool due to a...
drone-city.net Cross Site Scripting vulnerability OBB-2325354
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
A Drone Tried to Disrupt the Power Grid. It Won't Be the Last
An attack attempt in 2020 proves the UAS threat is real—and not enough is being done to stop it...
Tesla Remotely Hacked from a Drone
This is an impressive hack: Security researchers Ralf-Philipp Weinmann of Kunnamon, Inc. and Benedikt Schmotzle of Comsecuris GmbH have found remote zero-click security vulnerabilities in an open-source software component ConnMan used in Tesla automobiles that allowed them to compromise parked ca...
Micro Air Vehicle Link Path Traversal Vulnerability
Micro Air Vehicle Link MAVLink is a lightweight messaging protocol from the Dronecode project that is primarily used for communication between ground control terminals ground stations and UAVs as well as between airborne UAV components. A security vulnerability exists in the Micro Air Vehicle Lin...
drone-city.net Cross Site Scripting vulnerability OBB-1253169
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
DJI Drone App Riddled With Privacy Issues, Researchers Allege
Leading commercial drone maker DJI is hitting back against researcher allegations that its Android mobile application is riddled with privacy holes. One includes that the app continues to run in the background even after it’s been closed and collects sensitive data from users without consent. The...