1041 matches found
Android Security Bulletin—January 2021Stay organized with collectionsSave and categorize content based on your preferences.
The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2021-01-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...
Denial of Service Vulnerability in the Car Book App
The Car Book app is an automotive information app. Automobile Daquan app has a denial of service vulnerability that can be exploited by attackers to cause a denial of service...
Buffer Error Vulnerability in Multiple Qualcomm Products
A Qualcomm chip is a chip from Qualcomm Incorporated USA. It is a way of miniaturizing circuitry mainly semiconductor devices, but also passive components, etc. and is often fabricated on the surface of semiconductor wafers. A buffer error vulnerability exists in several Qualcomm products, which...
CVE-2020-8539
CVE-2020-8539 affects Kia Motors head units (SOP.003.30.18.0703, SOP.005.7.181019, SOP.007.1.191209). The vulnerability arises from an arbitrary command execution via the micomd daemon, enabling an attacker with local access to inject commands and generate CAN frames on the M-CAN multimedia bus. ...
Cybercriminals Batter Automakers With Ransomware, IP Theft Cyberattacks
Cybercriminals are recognizing that the data that automotive companies have to offer – from customer and employee personal identifiable information PII to financial data – is invaluable. Recently, one attacker installed a keystroke logger on the workstation of a car dealership’s finance specialis...
atlasautomotive.ca Cross Site Scripting vulnerability OBB-1494847
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
gregoryautomotivegroup.com Cross Site Scripting vulnerability OBB-1488573
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
automotive.site123.me Cross Site Scripting vulnerability OBB-1478068
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
kernel: information leak bug caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_core.c driver
An information-leak flaw was found in the Linux kernel's pcan USB driver. When a device using this driver connects to the system, the stack information is leaked to the CAN bus, a controller area network for automobiles. The highest threat with this vulnerability is breach of data confidentiality...
automotiveengine.co.uk Cross Site Scripting vulnerability OBB-1367926
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
gem-automotive-repair-shop-software.com Cross Site Scripting vulnerability OBB-1319010
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
ISO/SAE 21434: It’s time to put the brakes on connected car cyber-threats
Connected cars are on the move. Globally their number is set to grow 270% between 2018 and 2022 to reach an estimated 125 million in a couple of years. Increasingly, these vehicles are more akin to high-performance mobile computers with wheels than traditional cars, with features including intern...
Connected Car Standards – Thank Goodness!
Intelligent transportation systems ITS require harmonization among manufacturers to have any chance of succeeding in the real world. No large-scale car manufacturer, multimodal shipper, or MaaS Mobility as a Service provider will risk investing in a single-vendor solution. Successful ITS require...
Stored Cross-site Scripting Vulnerability in Auto Portal System of Dongguan Dingdot Network Technology Co.
Dongguan Dingdot Network Technology Co., Ltd. is a content management and e-commerce management system developer. A stored cross-site scripting vulnerability exists in the automotive portal system of Dongguan Dingdot Network Technology Co. An attacker can exploit the vulnerability to obtain...
allianceautomotivegroup.eu Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1135292 Security Researcher g0bl1nsec Helped patch 3754 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting allianceautomotivegroup.e...
Zero Day Initiative Bug Hunters Rake in $1.5M in 2019
Zero Day Initiative ZDI awarded more than $1.5 million in cash and prizes to bug-hunters throughout 2019, it said, resulting in 1,035 security vulnerability advisories for the year. Most of those advisories 88 percent were published in conjunction with a patch from the vendor, Zero Day Initiative...
CVE-2019-13582
CVE-2019-13582 affects Marvell 88W8688 Wi‑Fi firmware (pre‑p52) used in Tesla Model S/X, via the Parrot Faurecia FC6050W module. The issue is a stack overflow in the Wi‑Fi firmware that can lead to denial of service or arbitrary code execution. Connected documents confirm the affected component a...
CVE-2019-13581
An issue was discovered in Marvell 88W8688 Wi-Fi firmware before version p52, as used on Tesla Model S/X vehicles manufactured before March 2018, via the Parrot Faurecia Automotive FC6050W module. A heap-based buffer overflow allows remote attackers to cause a denial of service or execute arbitra...
Apple iTunes and iCloud for Windows 0-Day Exploited in Ransomware Attacks
Watch out Windows users! The cybercriminal group behind BitPaymer and iEncrypt ransomware attacks has been found exploiting a zero-day vulnerability affecting a little-known component that comes bundled with Apple's iTunes and iCloud software for Windows to evade antivirus detection. The vulnerab...
Mazda 2 Instrument Cluster Accelorometer Mover
This module moves the needle of the accelorometer and speedometer of the Mazda 2 instrument cluster This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Mazda 2 Instrument Cluster Accelorometer...