Android based Cars may pose various Security and Privacy Issues

After being an owner of Smartphones, now it’s your turn to own a Smart Car. Wouldn’t it sound great if you could use your favorite mobile apps on Car's dashboard display? Yes! You heard right.. Google has tied-up with several Auto manufacturers with the goal to bring Android to Cars with built-in...

Hackers Demonstrate Car Hacking using a laptop

Computer geeks already knew it was possible to hack into a car's computerized systems and finally, two U.S. hackers - Charlie Miller and Chris Valasek, sponsored by the Pentagon's research facility DARPA recently demonstrated just how easy it is for malicious hackers to physically hijack a modern...

Hackers Demonstrate Car Hacking using a laptop

Computer geeks already knew it was possible to hack into a car's computerized systems and finally, two U.S. hackers - Charlie Miller and Chris Valasek, sponsored by the Pentagon's research facility DARPA recently demonstrated just how easy it is for malicious hackers to physically hijack a modern...

Jack Daniel on Beginning His Security Career

Dennis Fisher talks with Jack Daniel of Tenable about his early days as a car guy, his accidental introduction into security and his second life as an amateur blacksmith. Download: 06jackdaniel.mp3 Image via AJolly‘s Flickr photostream, Creative Commons...

Samsung's new OS Tizen 2.0 source code released

The Tizen 2.0 source code and SDK has officially been released. Tizen is a Linux-based open-source software platform backed by Intel and Samsung Electronics, that is designed for smartphones, tablets, smart TVs and in-car systems and it's designed to run apps written using web technologies...

Samsung's new OS Tizen 2.0 source code released

The Tizen 2.0 source code and SDK has officially been released. Tizen is a Linux-based open-source software platform backed by Intel and Samsung Electronics, that is designed for smartphones, tablets, smart TVs and in-car systems and it’s designed to run apps written using web technologies...

CVE-2012-6510

Multiple cross-site scripting XSS vulnerabilities in NetArt Media Car Portal 3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 PWRS or 2 Description field when posting a new vehicle; 3 news title when creating news; 4 Name when creating a sub user; 5 group name when...

CVE-2012-6508

Multiple cross-site request forgery CSRF vulnerabilities in NetArt Media Car Portal 3.0 allow remote attackers to hijack the authentication of administrators for requests that 1 change arbitrary user passwords via a nouveau action in the security module to cars/ADMIN/index.php; 2 create a user or...

CVE-2012-6509

Unrestricted file upload vulnerability in NetArt Media Car Portal 3.0 allows remote attackers to execute arbitrary PHP code by uploading a file a double extension, as demonstrated by .php%00.jpg...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in NetArt Media Car Portal 3.0 allow remote attackers to hijack the authentication of administrators for requests that 1 change arbitrary user passwords via a nouveau action in the security module to cars/ADMIN/index.php; 2 create a user or...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in NetArt Media Car Portal 3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 PWRS or 2 Description field when posting a new vehicle; 3 news title when creating news; 4 Name when creating a sub user; 5 group name when...

Unrestricted file upload

Unrestricted file upload vulnerability in NetArt Media Car Portal 3.0 allows remote attackers to execute arbitrary PHP code by uploading a file a double extension, as demonstrated by .php%00.jpg...

CVE-2012-6510

CVE-2012-6510 affects NetArt Media Car Portal 3.0. The issue is multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via various input fields (PWRS/Description when posting a vehicle; news title; sub user name; group name; dealer n...

CVE-2012-6508

CVE-2012-6508 affects NetArt Media Car Portal 3.0 with multiple CSRF vulnerabilities that allow an attacker to hijack administrator sessions and perform admin-level actions such as changing user passwords, creating new users or sub-users, and editing profile data via specific actions in the secur...

CVE-2012-6509

Unrestricted file upload vulnerability in NetArt Media Car Portal 3.0 allows remote attackers to execute arbitrary PHP code by uploading a file a double extension, as demonstrated by .php%00.jpg...

CVE-2012-6509

CVE-2012-6509 affects NetArt Media Car Portal 3.0. The vulnerability is an unrestricted file upload that allows remote code execution by uploading a file with a double extension (e.g., .php%00.jpg). The available documents describe the impact as remote PHP code execution and do not provide remedi...

PT-2013-1974

Name of the Vulnerable Software and Affected Versions NetArt Media Car Portal version 3.0 Description The issue allows remote attackers to inject arbitrary web script or HTML via several fields, including the PWRS field, Description field when posting a new vehicle, news title when creating news,...

PT-2013-1972

Name of the Vulnerable Software and Affected Versions NetArt Media Car Portal version 3.0 Description The issue allows remote attackers to hijack the authentication of administrators for various requests. This can be achieved through multiple cross-site request forgery CSRF vulnerabilities...

CVE-2012-6508: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in NetArt Media Car Portal 3.0 allow remote attackers to hijack the authentication of administrators for requests that 1 change arbitrary user passwords via a nouveau action in the security module to cars/ADMIN/index.php; 2 create a user or...

PT-2013-1973

Name of the Vulnerable Software and Affected Versions NetArt Media Car Portal version 3.0 Description The issue allows remote attackers to execute arbitrary PHP code by uploading a file with a double extension. This can be achieved by uploading a file such as .php%00.jpg. Recommendations For NetA...