PT-2025-37174

Name of the Vulnerable Software and Affected Versions: DJI Mavic Spark version 01.00.0500 DJI Mavic Air version 01.00.0500 DJI Mavic Mini version 01.00.0500 Description: A weakness exists in the Telemetry Channel component due to the use of a hard-coded cryptographic key. An attacker present on t...

WordPress Drone Media Theme <= 2.2.0 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Bonds in WordPress Theme Drone Media versions = 2.2.0...

WordPress Drone Media Theme <= 2.2.0 is vulnerable to Local File Inclusion

Software Drone Media Type Theme Vulnerable versions = 2.2.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID eedad8a1091f Credits Bonds Required privilege Unauthenticated...

Effect of Phase Shift Errors on the Security of UAV-Assisted STAR-RIS IoT Networks

Unmanned aerial vehicles UAV-mounted simultaneous transmitting and reflecting reconfigurable intelligent surface STAR-RIS systems can provide full-dimensional coverage and flexible deployment opportunities in future 6G-enabled IoT networks. However, practical imperfections such as jittering and...

Defending a City from Multi-Drone Attacks: a Sequential Stackelberg Security Games Approach

To counter an imminent multi-drone attack on a city, defenders have deployed drones across the city. These drones must intercept/eliminate the threat, thus reducing potential damage from the attack. We model this as a Sequential Stackelberg Security Game, where the defender first commits to a mix...

PX4 Drone Autopilot 资源管理错误漏洞

PX4 Drone Autopilot is a PX4 drone autopilot open source by PX4 Autopilot. A resource management error vulnerability exists in PX4 Drone Autopilot version 1.15.4 and earlier, which stems from the MavlinkReceiver::handlemessageserialcontrol function mishandling the parameter mavlinkshell, which...

Malicious code in drone-airplane-v0r7 (npm)

The package drone-airplane-v0r7 was found to contain malicious code...

Malicious code in drone-mountain-dvij (npm)

The package drone-mountain-dvij was found to contain malicious code...

Malicious code in drone-rainbow-u5y0 (npm)

The package drone-rainbow-u5y0 was found to contain malicious code...

Malicious code in drone-quebec-zzli (npm)

The package drone-quebec-zzli was found to contain malicious code...

Malicious code in drone-lima-ghpf (npm)

The package drone-lima-ghpf was found to contain malicious code...

Malicious code in ziggurat-drone-stuh (npm)

The package ziggurat-drone-stuh was found to contain malicious code...

Malicious code in walnut-drone-endr (npm)

The package walnut-drone-endr was found to contain malicious code...

Malicious code in drone-kapok-5x63 (npm)

The package drone-kapok-5x63 was found to contain malicious code...

Malicious code in zamia-drone-ccj7 (npm)

The package zamia-drone-ccj7 was found to contain malicious code...

Malicious code in umbrella-drone-ie7e (npm)

The package umbrella-drone-ie7e was found to contain malicious code...

Malicious code in drone-yambean-ag2y (npm)

The package drone-yambean-ag2y was found to contain malicious code...

Malicious code in gazebo-drone-eajr (npm)

The package gazebo-drone-eajr was found to contain malicious code...

Malicious code in test-mlw2-croft-drone-inapt-herby (npm)

The package test-mlw2-croft-drone-inapt-herby was found to contain malicious code...

Malicious code in drone-shack-171j (npm)

The package drone-shack-171j was found to contain malicious code...