General Motors: Content Spoof in webcaps.ecomm.gm.com

Potential content spoofing existed on webcaps.ecomm.gm.com. The vulnerable input parameter has been identified and remediated...

General Motors: Reflected Cross Site Script in www.gmcar.gm.com

GM community action resource website contained a parameter that allowed XSS injection. The vulnerable input parameter has been identified and remediated...

General Motors: XSS on gmchat.gm.com

A specific page on gmchat.gm.comincluded a parameter that allowed XSS injection. The vulnerable input parameter has been identified and remediated...

General Motors: refelected Xss on https://gmid.gm.com/gmid/jsp/GMIDInitialLogin.jsp

Reflected Cross Site Scripting existed on a page of gmid.gm.com. The vulnerability has been remediated...

General Motors: gmmovinparts.com SQLi via forgot_password.jsp

The site gmmovingparts.com did not validate all user supplied input potentially allowing SQL Injection. The vulnerability has been remediated This was one of multiple SQLi on the site. A more complete PoC was done for the initial SQLi that allowed me to access the administrator portal of the site...

General Motors: XSS in GM

The site GM.com included a parameter that allowed XSS injection. The vulnerable input parameter has been identified and remediated...

mitsubishi.simonkavanaghmotors.ie XSS vulnerability

Vulnerable URL: http://mitsubishi.simonkavanaghmotors.ie/usedcars/index.cfm?fuseaction=search=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 09:40 GMT Vulnerability type:| XSS Vulnerability status:...

citroen.mallowroadmotors.com XSS vulnerability

Vulnerable URL: http://citroen.mallowroadmotors.com/usedcars/index.cfm?fuseaction=search=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 09:40 GMT Vulnerability type:| XSS Vulnerability status:|...

lynnmotors.ie XSS vulnerability

Vulnerable URL: http://www.lynnmotors.ie/usedcars/index.cfm?fuseaction=search=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 09:40 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

Tesla Motors Starts Bug Bounty--But Not For Its Cars

Tesla Motors has started a bug bounty program that will pay researchers up to $1,000 for disclosing vulnerabilities. However, the rewards don’t apply to bugs found in the company’s vehicles. The program’s scope is quite narrow, with only the main teslamotors.com domain and other domains owned by...

Higher Turnover Web Design SQL injection Vulnerability

Exploit for php platform in category web applications ---- /\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\- -/ --------------------------------|-----------------------------------------------------------| -/ + Exploit Title : Higher Turnover Web...