Vendor
fduflyer
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Medium 6.8
DroneAware's Improper Account Activation in Registration and SSO Flows Leads to Account Takeover
DroneAware is a drone detection platform. The centralized DroneAware server backing droneaware.io was vulnerable to an account pre-hijacking attack in which an attacker could register an account using a victim's email address with an attacker-controlled passw…