75559 matches found
CVE-2025-71409 No Authentication for Very High Frequency Data Link messages used in CPDLC
Lack of authentication for Very High Frequency Data Link messages allows rogue ground stations to inject CPDLC messages leading to unexpected or misleading clearances and potential pilot confusion. This type of attack can be carried out remotely over radio frequency...
CVE-2025-71410
The CVE-2025-71410 issue affects systems handling Aviation Very High Frequency Link Control (VHF L-C) and Unnumbered Disconnect (U DISC) frames used by CPDLC. Described vulnerability can terminate sessions and cause loss of CPDLC functions, forcing a reversion to voice comms and increasing contro...
CVE-2025-71410
Unnumbered Disconnect U DISC and malformed Aviation Very High Frequency Link Control frames can terminate sessions and lead to a loss of CPDLC functions requiring a reversion to voice communication and increased controller workload. This type of attack can be carried out remotely over radio...
CVE-2025-71410 Malicious Link Control Frames Can Cause Loss of CPDLC Functions
Unnumbered Disconnect U DISC and malformed Aviation Very High Frequency Link Control frames can terminate sessions and lead to a loss of CPDLC functions requiring a reversion to voice communication and increased controller workload. This type of attack can be carried out remotely over radio...
EUVD-2025-210653
Unnumbered Disconnect U DISC and malformed Aviation Very High Frequency Link Control frames can terminate sessions and lead to a loss of CPDLC functions requiring a reversion to voice communication and increased controller workload. This type of attack can be carried out remotely over radio...
CVE-2025-71410 Malicious Link Control Frames Can Cause Loss of CPDLC Functions
Unnumbered Disconnect U DISC and malformed Aviation Very High Frequency Link Control frames can terminate sessions and lead to a loss of CPDLC functions requiring a reversion to voice communication and increased controller workload. This type of attack can be carried out remotely over radio...
CVE-2025-71411
The CVE-2025-71411 entry describes a CPDLC-related issue where broadcast control frames can remotely disconnect multiple aircraft, causing delayed clearances and ATC overload. Affected component is broadcast/control frames in CPDLC; root cause and vendor/version details are not specified in the p...
CVE-2025-71411 In CPDLC, Broadcast Control Frames Can Disconnect Multiple Aircraft Simultaneously
Broadcast control frames can disconnect multiple aircraft simultaneously leading to delayed clearances and air traffic controller overload. This type of attack can be carried out remotely over radio frequency...
CVE-2025-71412
Injection of false emergency or status messages over CPDLC may lead to misallocation of resources, operational confusion, and improper response actions by flight crews, traffic controllers, and ground operations. This type of attack can be carried out remotely over radio frequency...
EUVD-2025-210651
Injection of false emergency or status messages over CPDLC may lead to misallocation of resources, operational confusion, and improper response actions by flight crews, traffic controllers, and ground operations. This type of attack can be carried out remotely over radio frequency...
CVE-2025-71412
Technical details about CVE-2025-71412 are not publicly provided in the connected documents. The sources describe false CPDLC message injection and impact but do not specify affected products, versions, root cause, or remediation.
CVE-2025-71413 In CPDLC, Malformed or Out of Sequence Frames Can Cause Resets
Malformed or out-of-sequence frames at the Aviation Very High Frequency Link Control X.25 layers cause repeated resets which may result in increased workload and reduced situational awareness. This type of attack can be carried out remotely over radio frequency...
CVE-2025-71413
The CVE-2025-71413 issue involves malformed or out-of-sequence frames at the Aviation Very High Frequency Link Control X.25 layers, leading to repeated resets. Reported impact is increased workload and reduced situational awareness, with the attack described as remotely carryable over radio frequ...
GHSA-MMJ4-63M4-R6H5
creationtimestamp| type| source ---|---|--- 2026-08-07 18:58:46+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3msjag2qwrq25...
CVE-2026-47361
creationtimestamp| type| source ---|---|--- 2026-08-07 18:30:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/6ljmigjkgmyjs...
CVE-2026-20339
creationtimestamp| type| source ---|---|--- 2026-08-07 17:50:55+00:00| seen| https://infosec.exchange/users/AAKL/statuses/117055491493877536 2026-08-08 11:02:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mskw66h3xi2h 2026-08-08 18:09:47+00:00| seen|...
Malicious Package
Overview streak-map-cache is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
CVE-2026-66711
creationtimestamp| type| source ---|---|--- 2026-08-07 17:15:10+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msj2mshy3p2w...
CVE-2026-71556
go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, worktree operations including checkout, status, and add resolve symbolic links inside the working tree without confining resolution to the worktree boundary, so a maliciously crafted reposito...