Skip to content
Llorenç Romà

Type to search…

↑↓to navigate
Esc

CVEs

  • CVE-2026-114356 — DJI CrystalSky ZS600C: DJIUpdateService Binder exposes privileged operations without authorization

    Advisory

  • CVE-2026-114357 — DJI CrystalSky ZS600C: Default-enabled unauthenticated ADB over USB

    Advisory

  • CVE-2026-114355 — DJI CrystalSky ZS600C: Command injection in logcat processing

    Advisory

  • CVE-2026-114354 — DJI CrystalSky ZS600C: Binder transaction allows root command execution

    Advisory

  • CVE-2026-114353 — DJI CrystalSky ZS600C: “assistant” daemon hard-coded USB backdoor

    Advisory

  • CVE-2026-14850 — MobiAPParc: Arbitrary password reset

    Advisory Read the write-up

  • CVE-2026-77812 — DJI QuickTransfer protocol: Cleartext transmission of Wi-Fi credentials over Bluetooth

    CVE record

  • CVE-2026-48117 — DroneAware Node: Account takeover via pre-registration

    Advisory Read the write-up