48 matches found
CANToolz
CANToolz a.k.a. YACHT Yet Another Car Hacking Tool CANToolz is a framework for analysing CAN networks and devices. It provides multiple modules that can be chained using CANToolz's pipe system and used by security researchers, automotive/OEM security testers in black-box analysis. CANToolz can be...
doggie_workshop
EvilDoggie Workshop Car Simulator Project Presentation Welcome to the EvilDoggie Workshop Car Simulator repository! This tool replicates the car CAN Bus environment used in the Black Hat Arsenal 2025 session. Developed by Faraday Security, the simulator emulates multiple Electronic Control Units...
doggie
Descripción general del proyecto Doggie y evilDoggie Doggie es un proyecto modular de código abierto diseñado para construir un adaptador CAN Bus a serial USB, BLE, UART casero. Conecta tu computadora a una red CAN Bus mediante el protocolo slcan CAN sobre Serial para compatibilidad con...
IoT-Pentest-devices-and-purpose
IoT Pentest Devices and Their Purpose - 2025 Edition This document outlines the latest tools and hardware for IoT security testing in 2025, covering different protocols and technologies. It includes cutting-edge attacks, newly discovered vulnerabilities, and updated hardware and software tools wi...
Zero-Trust Federated Learning for Connected Aftermarket Devices
Connected aftermarket devices extend vehicle diagnostics, repair workflows, and over-the-air software maintenance beyond original equipment manufacturer boundaries, yet their heterogeneous ownership and long service life complicate conventional perimeter security. This paper develops Zero Trust...
CVE-2026-24083 Untrusted Pointer Dereference in Automotive Security
Memory Corruption while processing IOCTL device driver requests with invalid arguments...
CVE-2026-24083
CVE-2026-24083 describes a Memory Corruption in handling IOCTL device driver requests when arguments are invalid. The CVE is associated with Qualcomm devices and shows a Local, Low-Complexity exploit with Privileges Required: Low, and no user interaction, leading to High impact across Confidentia...
Millions of cars could be tracked and unlocked by a hidden security flaw
A car alarm vendor's coding mistake has left millions of vehicles vulnerable to theft and location tracking. Thanks to the way dealers sell car alarms, many affected drivers don't even know they have one installed. The device is the KARR Security System, a Bluetooth-enabled aftermarket alarm buil...
vehicle-subsystem-security-assessment
🚗 End-to-end security assessment of vehicle subsystems ! Me...
CVE-2025-32063
There is a misconfiguration vulnerability inside the Infotainment ECU manufactured by BOSCH. The vulnerability happens during the startup phase of a specific systemd service, and as a result, the following developer features will be activated: the disabled firewall and the launched SSH server...
CVE-2022-33216
Transient Denial-of-service in Automotive due to improper input validation while parsing ELF file...
CVE-2022-33307
Memory Corruption due to double free in automotive when a bad HLOS address for one of the lists to be mapped is passed...
Android Automotive OS Update Bulletin—January 2026Stay organized with collectionsSave and categorize content based on your preferences.
The Android Automotive OS AAOS Update Bulletin contains details of security vulnerabilities affecting the Android Automotive OS platform. The full AAOS update comprises the security patch level of 2026-01-05 or later from the January 2026 Android Security Bulletin in addition to all issues in thi...
EUVD-2017-9453
Malware in sbrugna...
EUVD-2017-17238
Malware in sbrugna...
EUVD-2018-17644
Malware in sbrugna...
Enhancing Automotive Security with a Hybrid Approach Towards Universal Intrusion Detection System
Security measures are essential in the automotive industry to detect intrusions in-vehicle networks. However, developing a one-size-fits-all Intrusion Detection System IDS is challenging because each vehicle has unique data profiles. This is due to the complex and dynamic nature of the data...
EUVD-2022-36259
Malicious code in bioql PyPI...