2897 matches found
Building a Car Hacking Development Workbench: Part 1
Introduction There is a vast body of knowledge hiding inside your car. Whether you are an auto enthusiast, developer, hobbyist, security researcher, or just curious about vehicles, building a development bench can be an exciting project to facilitate understanding and experimentation without...
mycar.pk XSS vulnerability
Vulnerable URL: http://mycar.pk//car-search-detail.php?RefID=%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%2FXSSPOSED%2F%3E=Search Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 09:23 GMT Vulnerability type:| XSS Vulnerability status:| Public...
lasr.net XSS vulnerability
Vulnerable URL: http://www.lasr.net/travel/state.php?South+Dakota+Car+Shows=1/-///'/"//--...
Honda Shut Down Plant Impacted by WannaCry
Honda, one of the largest automobile manufacturers in the world, announced Wednesday that it was forced to shut down production at one of its Japanese plants after it was hit by the WannaCry ransomware. The manufacturer said it powered down a plant on Monday in Sayama, a city in the Saitama...
Subaru car software vulnerability analysis—never a failure of token-vulnerability warning-the black bar safety net
Not long ago, one from California car, information security researcher Aaron Guzman, in Australia, held a computer security conference to introduce a black into the Subaru car of the method. In his own 2017 Subaru WRX STI was found in a surprising number of software vulnerabilities, through these...
mpi.mb.ca XSS vulnerability
Vulnerable URL: https://www.mpi.mb.ca/en/Reg-and-Ins/Insurance/Trip/Rental/Pages/rentalcarinsurance.aspx?FollowSite=0=%27-confirm/OPENBUGBOUNTY/-%27 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 07.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...
mylifemymoney.co.za XSS vulnerability
Vulnerable URL: https://www.mylifemymoney.co.za/Wealth/Pages/Car.aspx?FollowSite=0=%27-confirm/OPENBUGBOUNTY/-%27 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3840308 VIP website status:| No Check...
Vik Rent Car 1.10 and previous
Vik Rent Car 1.10 and previous, SQL injection Resolution: update to 1.11 Update notice: https://extensionsforjoomla.com/blog/12-updates/46-security-notices-sql-injection-reports...
dubai.com XSS vulnerability
Vulnerable URL: http://www.dubai.com/car-rental/?=undefined=26=AE=USD=10=4512=2013=2012=0=2=11=AE=dubai+-+airport%22%27%2D%2D%21 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3040...
PT-2017-15230
Name of the Vulnerable Software and Affected Versions Captcha versions prior to 4.3.0 Car Rental versions prior to 1.0.5 Contact Form Multi versions prior to 1.2.1 Contact Form versions prior to 4.0.6 Contact Form to DB versions prior to 1.5.7 Custom Admin Page versions prior to 0.1.2 Custom Fiel...
daciacarinsurance.co.uk XSS vulnerability
Vulnerable URL: https://www.daciacarinsurance.co.uk/Verex/html/help.html%3C!%27/%22/%27/%22/--%3E%3C/Script%3E%3CImage%20Srcset=K%20/;%20Onerror=confirm%60OPENBUGBOUNTY%60%20//%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 04.08.2017 Vulnerability type:| XSS...
CVE-2017-8852
SAP SAPCAR 721.510 has a Heap Based Buffer Overflow Vulnerability. It could be exploited with a crafted CAR archive file received from an untrusted remote source. The problem is that the length of data written is an arbitrary number found within the file. The vendor response is SAP Security Note...
CVE-2017-8852
SAP SAPCAR 721.510 has a Heap Based Buffer Overflow Vulnerability. It could be exploited with a crafted CAR archive file received from an untrusted remote source. The problem is that the length of data written is an arbitrary number found within the file. The vendor response is SAP Security Note...
PT-2017-18582
Name of the Vulnerable Software and Affected Versions SAP SAPCAR version 721.510 Description The issue is a Heap Based Buffer Overflow that can be exploited with a crafted CAR archive file from an untrusted remote source. The problem arises because the length of data written is determined by an...
CVE-2017-8852: Improper Restriction of Operations within the Bounds of a Memory Buffer
SAP SAPCAR 721.510 has a Heap Based Buffer Overflow Vulnerability. It could be exploited with a crafted CAR archive file received from an untrusted remote source. The problem is that the length of data written is an arbitrary number found within the file. The vendor response is SAP Security Note...
A $22 Radio device to crack car’s security system
By Jahanzaib Hassan Cracking the wireless security systems of cars has been done in the past several times, but now researchers of Qihoo 360 showed that it’s a piece of cake if you have the right device. For better or worse, researchers of a Beijing-based security firm- Qihoo 360 built a gadget...
Gett - Car Service & Rideshare - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities
HackApp vulnerability scanner discovered that application Gett - Car Service & Rideshare published at the 'play' market has multiple vulnerabilities...
Auto Lender Exposes Loan Data For Up To 1 Million Applicants
A California auto loan company left the names, addresses, credit scores and partial Social Security numbers of up to 1 million people exposed on an insecure online database. The company behind the database is Alliance Direct Lending Corporation, according to Kromtech Security Research Center, whi...
WordPress Car Rental System 2.5 SQL Injection
Exploit Title: Car Rental System v2.5 Date: 28/03/2017 Exploit Author: TAD GROUP Vendor Homepage: https://www.bestsoftinc.com/ Software Link: https://www.bestsoftinc.com/car-rental-system.html Version: 2.5 Contact: [email protected] Website: https://tad.bg Category: Web Application Exploits 1...