11768 matches found
canTot
canTot canTot is a python-based cli framework based on sploitkit and is easy to use because it is similar to working with Metasploit. This similar to an exploit framework but focused on known CAN Bus vulnerabilities or fun CAN Bus hacks. It can also be used as a guide for pentesting vehicles and...
4CAN
what is this thing? The 4CAN is a Raspberry Pi HAT which provides 4 CAN interfaces. The 4CAN is 100% compattible with socketcan and can-utils, and is very easy to get up and running. A microUSB-UART serial adaptor is included to make troubleshooting the pi easier, and there are 4 LEDs on board, 2...
CBM
Car Backdoor Maker The Car Backdoor Maker is a software for making attack templates and load them into The Bicho. Before starting, please read how to Get The Bicho hardware. Screnshot Install and Usage This project has its wiki where you will find the following useful documentation: Installation...
CANToolz
CANToolz a.k.a. YACHT Yet Another Car Hacking Tool CANToolz is a framework for analysing CAN networks and devices. It provides multiple modules that can be chained using CANToolz's pipe system and used by security researchers, automotive/OEM security testers in black-box analysis. CANToolz can be...
awesome-canbus
Awesome CAN Bus 🚜 Awesome Tools, Hardware And Resources For CAN Bus This curated list helps a reverse engineering CAN bus devices with lightly specializing in automotive embedded controller software and communication understanding. Note Items marked as "🔝" are highly recommended. Permanent URL to...
doggie
Doggie and evilDoggie Project Overview Doggie is an open-source, modular project designed to build a DIY CAN Bus to serial adapter USB, BLE, UART. It connects your computer to a CAN Bus network using the slcan protocol CAN over Serial for compatibility with tools like SocketCAN and Python-can. Th...
CANToolz
H1 PROJECT IS MOVED HERE: https://github.com/CANToolz/CANToolz More details: https://asintsov.blogspot.de/2017/08/next-page-in-cantoolz-life.html...
CANalyzat0r
This software project is a result of a Bachelor's thesis created atSCHUTZWERK in collaboration with Aalen University by Philipp Schmied @CaptnBanana. Please refer to the correspondingblog post for more information. Why another CAN tool? Built from scratch with new ideas for analysis mechanisms...
HydraLINCAN
HydraLINCAN shield for HydraBus CAN and LIN Bus shield for Hydrabus http://hydrabus.com/ Refer to Hydrabus Wiki for more information on usage. https://github.com/hydrabus/hydrafw/wiki/HydraFW-CAN-guide I sell on Tindie New version with cleaner and easier to read silkscreen. Here is the wiring...
Carpunk
carpunk CAN Injection | Car Hacking Toolkit 🚀 What's New Carpunk is an advanced CAN Injection Toolkit, evolving from the original CANghost. It introduces new functionalities, including interface control, basic sniffing, and CAN Injection vulnerabilities. ✅ Compatible with both Simulation & Real...
CVE-2026-92196
Quest Foglight for Databases renderTemplateString Server-Side Template Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentication is required to exploit this...
CVE-2026-85035 Use-after-free via dynamically allocated message queue retained by the CAN RX filter
The canaddrxfiltermsgq system call installs a CAN RX filter whose callback canmsgqput in drivers/can/cancommon.c is handed the caller's struct kmsgq as userdata. The controller driver stores that raw pointer in its filter table and dereferences it from the RX path every time a matching frame...
CVE-2026-85035 Use-after-free via dynamically allocated message queue retained by the CAN RX filter
The canaddrxfiltermsgq system call installs a CAN RX filter whose callback canmsgqput in drivers/can/cancommon.c is handed the caller's struct kmsgq as userdata. The controller driver stores that raw pointer in its filter table and dereferences it from the RX path every time a matching frame...
CVE-2026-85035
The Zephyr RTOS contains a Use-after-free vulnerability in the can_add_rx_filter_msgq() system call. When CONFIG_USERSPACE=y and CONFIG_DYNAMIC_OBJECTS=y are enabled, an unprivileged user-mode thread with CAN device access can register a dynamically allocated message queue. Because the system cal...
CVE-2026-104647 weMail <= 2.1.6 - Editor+ Incorrect Authorization via User::can()
The weMail WordPress plugin through 2.1.6 does not correctly verify user capabilities in its REST API permission checks, treating any user whose role is in the weMail WordPress plugin through 2.1.6's allowed-roles list Editor and above by default as authorised for every action, which allows such...
CVE-2026-104647
The weMail WordPress plugin (versions through 2.1.6 ) contains an incorrect authorization vulnerability in its REST API permission checks. The plugin fails to properly verify user capabilities, instead granting full authorization to any user whose role is included in the plugin's allowed-roles li...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: can: bcm: validate frame length in bcmrxsetup for RTR replies bcmtxsetup validates cf-len against the CAN/CAN FD DLC limits before installing frames for TXSETUP, but bcmrxsetup never did the same for the RTR-reply frame configure...
CVE-2026-80889
A flaw was found in the Controller Area Network CAN ISO-TP ISO 15765-2 Transport Protocol module of the Linux kernel. This vulnerability arises from improper handling of timer operations, state transitions, and generation tracking within the module. A local attacker could potentially exploit thes...
CVE-2022-26269
CVE-2022-26269 Suzuki connect app is used to get the car information like Fuel, Ignition status, Current location, Seat buckle status etc. In Ignis, Zeta variant car if the Fuel CAN messages and Seat buckle status is spoofed via OBD 2 port with the crafted value e.g. zero percent fuel and Car sea...