494 matches found
CVE-2016-9337
Affected product/component: Tesla Motors Model S Gateway ECU (firmware prior to 7.1 (2.36.31) with web browser enabled). Vulnerability type/root cause: Command Injection in the Gateway ECU allowing an attacker to install malicious software and send messages to the vehicle CAN bus via a compromise...
PT-2017-10068
Name of the Vulnerable Software and Affected Versions Tesla Motors Model S automobile versions prior to 7.1 2.36.31 Description An issue was discovered in the vehicle's Gateway ECU, which is susceptible to commands that may allow an attacker to install malicious software. This could enable the...
CVE-2016-9337: Improper Neutralization of Special Elements used in a Command
An issue was discovered in Tesla Motors Model S automobile, all firmware versions before version 7.1 2.36.31 with web browser functionality enabled. The vehicle's Gateway ECU is susceptible to commands that may allow an attacker to install malicious software allowing the attacker to send messages...
Court Documents Reveal How Feds Spied On Connected Cars For 15 Years
It's not always necessary to break into your computer or smartphone to spy on you. Today all are day-to-day devices are becoming more connected to networks than ever to add convenience and ease to daily activities. But here's what we forget: These connected devices can be turned against us becaus...
carltonmotors-wednesbury.co.uk XSS vulnerability
Vulnerable URL: http://www.carltonmotors-wednesbury.co.uk/email.php?subject=%22%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 13:52 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...
jdtmotors.co.uk XSS vulnerability
Vulnerable URL: http://www.jdtmotors.co.uk/email.php?subject=%22%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 13:51 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1307256...
Tesla Motors (Beta) - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Tesla Motors Beta published at the 'play' market has multiple vulnerabilities...
General Motors: Flash XSS on Buick_RotatingMasthead_JellyBeanSlider.swf
buick.com website contained a parameter that allowed XSS injection. The vulnerable input parameter has been identified and remediated...
General Motors: Flash XSS on homepage fliptilescroller
The website contained a parameter that allowed XSS injection. The vulnerable input parameter has been identified and remediated...
General Motors: Flash XSS on global nav
The website contained a parameter that allowed XSS injection. The vulnerable input parameter has been identified and remediated...
mail.trishulmotors.com XSS vulnerability
Vulnerable URL: http://mail.trishulmotors.com/?user=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 10:18 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...
revival-motors.com XSS vulnerability
Vulnerable URL: http://revival-motors.com/single-view.php?pid=%22%3E%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 12379410...
reutov-motors.ru XSS vulnerability
Vulnerable URL: http://reutov-motors.ru/bh.php?dm=homero.com.mx";;alert'OPENBUGBOUNTY';function zif0// Details: Description| Value ---|--- Patched:| Yes, at 08.08.2016 Latest check for patch:| 08.08.2016 09:26 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...
General Motors: IE search XSS
Gm.com website's search function contained a parameter that allowed XSS injection. The vulnerable input parameter has been identified and remediated. Search DOM XSS reproduced in IE due to non-encoded GET params in this browser. The tag with an extra parameter and without the end tag used to bypa...
General Motors: Reflected XSS and something more Store XSS too
GM Careers website contained a parameter that allowed XSS injection. The vulnerable input parameter has been identified and remediated...
ferrarinewmotors.it Open Redirect vulnerability
Vulnerable URL: http://www.ferrarinewmotors.it/Site/SetCulture.aspx?culture=sv-SE=https://www.openbugbounty.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...
desimone-motors.be Open Redirect vulnerability
Vulnerable URL: http://www.desimone-motors.be/Site/SetCulture.aspx?culture=en-GB=https://www.openbugbounty.org/ Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 08:26 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclos...
General Motors: Angular Expression Injection in the my.gmc.com Search Page
My GMC website contained a parameter that allowed XSS injection. The vulnerable input parameter has been identified and remediated...