1433 matches found
CVE-2023-31191
CVE-2023-31191 concerns the DroneScout ds230 Remote ID receiver from BlueMark Innovations. Ingress traffic injection allows an attacker to send high-power spoofed Open Drone ID (ODID) messages on selected channels, causing the receiver to drop real Remote ID (RID) data and instead emit JSON-encod...
CVE-2023-31190 Missing TLS (HTTPS) certificate validation during firmware update in DroneScout ds230 Remote ID receiver from BlueMark Innovations
DroneScout ds230 Remote ID receiver from BlueMark Innovations is affected by an Improper Authentication vulnerability during the firmware update procedure. Specifically, the firmware update procedure ignores and does not check the validity of the TLS certificate of the HTTPS endpoint from which t...
CVE-2023-31190 Missing TLS (HTTPS) certificate validation during firmware update in DroneScout ds230 Remote ID receiver from BlueMark Innovations
DroneScout ds230 Remote ID receiver from BlueMark Innovations is affected by an Improper Authentication vulnerability during the firmware update procedure. Specifically, the firmware update procedure ignores and does not check the validity of the TLS certificate of the HTTPS endpoint from which t...
CVE-2023-31190
DroneScout ds230 firmware update vulnerability (CVE-2023-31190) is caused by the update procedure not validating the HTTPS TLS certificate, enabling MITM to deliver crafted firmware and gain root on vulnerable firmware versions. Affected firmwares: 20211210-1627 through 20230329-1042. Documented ...
CVE-2023-29156
CVE-2023-29156 affects DroneScout ds230 Remote ID receiver by an information-loss vulnerability caused by traffic injection. In firmware 20211210-1627 through 20230329-1042, an attacker can spoof Open Drone ID (ODID) messages to force the receiver to drop legitimate Remote ID (RID) data and inste...
CVE-2023-29156 Denial of Service due to loss of information in DroneScout ds230 Remote ID receiver from BlueMark Innovations
DroneScout ds230 Remote ID receiver from BlueMark Innovations is affected by an information loss vulnerability through traffic injection. An attacker can exploit this vulnerability by injecting, at the right times, spoofed Open Drone ID ODID messages which force the DroneScout ds230 Remote ID...
CVE-2023-29156 Denial of Service due to loss of information in DroneScout ds230 Remote ID receiver from BlueMark Innovations
DroneScout ds230 Remote ID receiver from BlueMark Innovations is affected by an information loss vulnerability through traffic injection. An attacker can exploit this vulnerability by injecting, at the right times, spoofed Open Drone ID ODID messages which force the DroneScout ds230 Remote ID...
PT-2023-23217 · Bluemark Innovations · Dronescout Ds230 Remote Id Receiver
Name of the Vulnerable Software and Affected Versions: DroneScout ds230 Remote ID receiver from BlueMark Innovations versions 20211210-1627 through 20230329-1042 Description: The issue is related to an information loss vulnerability through traffic injection. An attacker can exploit this by...
BlueMark Innovations DroneScout ds230 授权问题漏洞
The BlueMark Innovations DroneScout ds230 is a Remote ID receiver from BlueMark Innovations that supports a variety of protocols and frequency bands. A security vulnerability exists in the BlueMark Innovations DroneScout ds230 Remote ID receiver, which stems from being affected by an incorrect...
BlueMark Innovations DroneScout ds230 安全漏洞
BlueMark Innovations DroneScout ds230 is a Remote ID receiver from BlueMark Innovations that supports various protocols and bands. A security vulnerability exists in the BlueMark Innovations DroneScout ds230 Remote ID receiver that stems from being affected by a loss of information vulnerability...
An attacker can burn shares of other users by calling executeFlashloan()
Lines of code Vulnerability details The executeFlashloan in PeUSDMainnetStableVision.sol allows users to execute flash loans but the problem is that the receiver doesnt have to be the msg.sender so an attacker can do 2 things: 1. Execute other users flash loans 2. If a user is a smart contract th...
Support for ICA files in XenApp/XenDesktop Environment
When users are connecting to XenApp or XenDesktop with an ICA file, there could occur a wide range of issues related to connection, load balancing, performance,cosmetic issues with an application and so on. For users connecting with Citrix Receiver or Citrix Receiver in conjunction with StoreFron...
Slackware Linux 14.0 / 14.1 / 14.2 / 15.0 / current ntp Multiple Vulnerabilities (SSA:2023-153-02)
The version of ntp installed on the remote host is prior to 4.2.8p16. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2023-153-02 advisory. - mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write in the cpcpdec while loop. An adversary may be able ...
USN-6133-1: Linux kernel (Intel IoTG) vulnerabilities
It was discovered that the Traffic-Control Index TCINDEX implementation in the Linux kernel did not properly perform filter deactivation in some situations. A local attacker could possibly use this to gain elevated privileges. Please note that with the fix for this CVE, kernel support for the...
CVE-2022-35749
Windows Digital Media Receiver Elevation of Privilege Vulnerability...
CVE-2022-35746
Windows Digital Media Receiver Elevation of Privilege Vulnerability...
CVE-2022-35749
Windows Digital Media Receiver Elevation of Privilege Vulnerability...
CVE-2022-35746
Windows Digital Media Receiver Elevation of Privilege Vulnerability...
