Parrot ANAFI has an unspecified vulnerability

The Parrot ANAFI is a drone device. A security vulnerability exists in the Parrot ANAFI using firmware versions prior to 1.5.0, which can be exploited by an attacker with the help of the 'garsdkcmddescCommonCommonCurrentDateTime' command with a long date length to cause a web server crash...

CVE-2019-3945

Web server running on Parrot ANAFI can be crashed due to the SDK command "CommonCurrentDateTime" being sent to control service with larger than expected date length...

CVE-2019-3945

Web server running on Parrot ANAFI can be crashed due to the SDK command "CommonCurrentDateTime" being sent to control service with larger than expected date length...

CVE-2019-3944

Parrot ANAFI is vulnerable to Wi-Fi deauthentication attack, allowing remote and unauthenticated attackers to disconnect drone from controller during mid-flight...

CVE-2019-3944

Parrot ANAFI is vulnerable to Wi-Fi deauthentication attack, allowing remote and unauthenticated attackers to disconnect drone from controller during mid-flight...

Deserialization of untrusted data

Parrot ANAFI is vulnerable to Wi-Fi deauthentication attack, allowing remote and unauthenticated attackers to disconnect drone from controller during mid-flight...

Command injection

Web server running on Parrot ANAFI can be crashed due to the SDK command "CommonCurrentDateTime" being sent to control service with larger than expected date length...

CVE-2019-3944

Parrot ANAFI is affected by CVE-2019-3944, involving a Wi‑Fi deauthentication attack that can disconnect the drone from its controller during flight. The vulnerability affects Parrot ANAFI’s wireless control/link (no specifics on affected firmware versions are provided here). Impact stated in sou...

CVE-2019-3944

Parrot ANAFI is vulnerable to Wi-Fi deauthentication attack, allowing remote and unauthenticated attackers to disconnect drone from controller during mid-flight...

CVE-2019-3945

Web server running on Parrot ANAFI can be crashed due to the SDK command "CommonCurrentDateTime" being sent to control service with larger than expected date length...

CVE-2019-3945

CVE-2019-3945 affects Parrot ANAFI. Multiple connected sources describe a vulnerability in the drone’s web server where sending the SDK command Common_CurrentDateTime with a date longer than expected crashes the control service. The issue is documented across CVE entries and supplier references, ...

PT-2020-10923 · Parrot · Parrot Anafi

Name of the Vulnerable Software and Affected Versions: Parrot ANAFI affected versions not specified Description: The issue allows remote and unauthenticated attackers to perform a Wi-Fi deauthentication attack, which can disconnect the drone from its controller during mid-flight. Recommendations:...

PT-2020-10924 · Parrot · Parrot Anafi

Name of the Vulnerable Software and Affected Versions: Parrot ANAFI affected versions not specified Description: The web server running on Parrot ANAFI can be crashed due to the SDK command Common CurrentDateTime being sent to the control service with a larger than expected date length...

ReconCobra - Complete Automated Pentest Framework For Information Gathering

ReconCobra Reconcobra is Foot printing software for Ultimate Information Gathering Kali, Parrot OS, Black Arch, Termux, Android Led TV Interface Software have 82 Options with full automation with powerful information gathering capability In-Action !https://blogger.googleuser...

Seeker v1.2.1 - Accurately Locate Smartphones Using Social Engineering

Concept behind Seeker is simple, just like we host phishing pages to get credentials why not host a fake page that requests your location like many popular location based websites. Read more on thewhiteh4t's Blog .Seeker Hosts a fake website on In Built PHP Server and uses Serveo to generate a li...

Seeker v1.1.9 - Accurately Locate Smartphones Using Social Engineering

Concept behind Seeker is simple, just like we host phishing pages to get credentials why not host a fake page that requests your location like many popular location based websites. Seeker Hosts a fake website on In Built PHP Server and uses Serveo to generate a link which we will forward to the...

CVE-2019-13582

An issue was discovered in Marvell 88W8688 Wi-Fi firmware before version p52, as used on Tesla Model S/X vehicles manufactured before March 2018, via the Parrot Faurecia Automotive FC6050W module. A stack overflow could lead to denial of service or arbitrary code execution...

CVE-2019-13581

An issue was discovered in Marvell 88W8688 Wi-Fi firmware before version p52, as used on Tesla Model S/X vehicles manufactured before March 2018, via the Parrot Faurecia Automotive FC6050W module. A heap-based buffer overflow allows remote attackers to cause a denial of service or execute arbitra...

Heap overflow

An issue was discovered in Marvell 88W8688 Wi-Fi firmware before version p52, as used on Tesla Model S/X vehicles manufactured before March 2018, via the Parrot Faurecia Automotive FC6050W module. A heap-based buffer overflow allows remote attackers to cause a denial of service or execute arbitra...

Stack overflow

An issue was discovered in Marvell 88W8688 Wi-Fi firmware before version p52, as used on Tesla Model S/X vehicles manufactured before March 2018, via the Parrot Faurecia Automotive FC6050W module. A stack overflow could lead to denial of service or arbitrary code execution...