God Mode On: how we attacked a vehicle’s head unit modem

Introduction Imagine you're cruising down the highway in your brand-new electric car. All of a sudden, the massive multimedia display fills with Doom, the iconic 3D shooter game. It completely replaces the navigation map or the controls menu, and you realize someone is playing it remotely right...

Exploit for CVE-2025-63895

JXLInfotainment-CVE-2025-63895 CVE-2025-63896 Attack...

EUVD-2021-10830

Malware in sbrugna...

EUVD-2020-21054

Malware in sbrugna...

EUVD-2021-10831

Malware in sbrugna...

EUVD-2021-10833

Malware in sbrugna...

EUVD-2018-20916

Malware in sbrugna...

EUVD-2021-10829

Malware in sbrugna...

EUVD-2023-30069

Malicious code in bioql PyPI...

EUVD-2023-42822

Malicious code in bioql PyPI...

EUVD-2023-32505

Malicious code in bioql PyPI...

EUVD-2023-42823

Malicious code in bioql PyPI...

EUVD-2023-38775

Malicious code in bioql PyPI...

EUVD-2023-30071

Malicious code in bioql PyPI...

EUVD-2023-30068

Malicious code in bioql PyPI...

Kenwood DMX958XR Command Injection Vulnerability (CNVD-2025-20290)

The Kenwood DMX958XR is an in-car infotainment system from Kenwood. The Kenwood DMX958XR suffers from a command injection vulnerability that can be exploited by an attacker to execute code in a root context...

Kenwood DMX958XR Command Injection Vulnerability (CNVD-2025-20302)

The Kenwood DMX958XR is an in-car infotainment system from Kenwood. The Kenwood DMX958XR suffers from a command injection vulnerability that can be exploited by an attacker to execute code in a root context...

Kenwood DMX958XR Command Injection Vulnerability (CNVD-2025-20420)

The Kenwood DMX958XR is an in-car infotainment system from Kenwood. The Kenwood DMX958XR suffers from a command injection vulnerability that can be exploited by an attacker to execute code in a root context...

Kenwood DMX958XR Command Injection Vulnerability (CNVD-2025-20421)

The Kenwood DMX958XR is an in-car infotainment system from Kenwood. The Kenwood DMX958XR suffers from a command injection vulnerability that can be exploited by an attacker to execute code in a root context...

Kenwood DMX958XR Command Injection Vulnerability (CNVD-2025-20427)

The Kenwood DMX958XR is an in-car infotainment system from Kenwood. The Kenwood DMX958XR suffers from a command injection vulnerability that can be exploited by an attacker to execute code in a root context...