Improper access control

The Skoda Automotive cloud contains a Broken Access Control vulnerability, allowing remote attackers to obtain recent trip data, vehicle mileage, fuel consumption, average and maximum speed, and other information of Skoda Connect service users by specifying an arbitrary vehicle VIN number...

Improper access control

The Skoda Automotive cloud contains a Broken Access Control vulnerability, allowing to obtain nicknames and other user identifiers of Skoda Connect service users by specifying an arbitrary vehicle VIN number...

CVE-2023-28901 Trip Data Disclosure from Backend

The Skoda Automotive cloud contains a Broken Access Control vulnerability, allowing remote attackers to obtain recent trip data, vehicle mileage, fuel consumption, average and maximum speed, and other information of Skoda Connect service users by specifying an arbitrary vehicle VIN number...

CVE-2023-28900 Nickname Disclosure on the Backend Automotive Server

The Skoda Automotive cloud contains a Broken Access Control vulnerability, allowing to obtain nicknames and other user identifiers of Skoda Connect service users by specifying an arbitrary vehicle VIN number...

CVE-2023-28900 Nickname Disclosure on the Backend Automotive Server

The Skoda Automotive cloud contains a Broken Access Control vulnerability, allowing to obtain nicknames and other user identifiers of Skoda Connect service users by specifying an arbitrary vehicle VIN number...

CVE-2023-28901: Exposure of Sensitive Information to an Unauthorized Actor

The Skoda Automotive cloud contains a Broken Access Control vulnerability, allowing remote attackers to obtain recent trip data, vehicle mileage, fuel consumption, average and maximum speed, and other information of Skoda Connect service users by specifying an arbitrary vehicle VIN number...

CVE-2023-28900: Exposure of Sensitive Information to an Unauthorized Actor

The Skoda Automotive cloud contains a Broken Access Control vulnerability, allowing to obtain nicknames and other user identifiers of Skoda Connect service users by specifying an arbitrary vehicle VIN number...

Security vulnerabilities in major car brands revealed

Your car potentially hasnt "just" been a car for a long time. With multiple digital systems, vehicles are increasingly plugged into web applications and digital processes. These systems tie into everything from passwords and web chat systems for car company employees, to file repositories and oth...

Vehicle Identification Numbers reveal driver data via telematics

There are many ways that data collection, and data availability, make less sense as the years pass by. This is frequently accompanied by a resistance to change, to improve these processes, because "thats how weve always done it". Sadly this is often the case even when those data collectors have...

App Flaw Allowed Honda and Nissan Cars Hack by Knowing VIN number

By Habiba Rashid According to white hat hacker Sam Curry, once exploited, attackers could use the flaw to unlock the door, honk the horn, flash the lights, or even start the vehicle. This is a post from HackRead.com Read the original post: App Flaw Allowed Honda and Nissan Cars Hack by Knowing VI...

CVE-2020-29439

Tesla Model X vehicles before 2020-11-23 have key fobs that rely on five VIN digits for the authentication needed for a body control module BCM to initiate a Bluetooth wake-up action. The full VIN is visible from outside the vehicle...

Input validation

Tesla Model X vehicles before 2020-11-23 have key fobs that rely on five VIN digits for the authentication needed for a body control module BCM to initiate a Bluetooth wake-up action. The full VIN is visible from outside the vehicle...

CVE-2020-29439

The CVE-2020-29439 entry concerns Tesla Model X vehicles manufactured before 2020-11-23, where key fobs use only the first five VIN digits for the authentication needed by a body control module (BCM) to initiate a Bluetooth wake-up action. The full VIN is visible from outside the vehicle, which i...

CVE-2020-29439: Undefined Security Weakness

Tesla Model X vehicles before 2020-11-23 have key fobs that rely on five VIN digits for the authentication needed for a body control module BCM to initiate a Bluetooth wake-up action. The full VIN is visible from outside the vehicle...

vin-lock.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1153318 Security Researcher metamorfosec Helped patch 1963 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting vin-lock.com website...

Malicious Package

Overview nhtsa-vin is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using nhtsa-vin...

Malicious Package

Overview edmunds-vin is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using edmunds-vin...

searchquarry.com XSS vulnerability

Open Bug Bounty ID: OBB-674340 Description| Value ---|--- Affected Website:| searchquarry.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

BMW ConnectedDrive - (Update) VIN Session Vulnerability

Document Title: =============== BMW ConnectedDrive - Update VIN Session Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1913 Video: https://www.youtube.com/watch?v=udJoa3JEGM Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1736 Vulnerability...

BMW ConnectedDrive - (Update) VIN Session Vulnerability

Document Title: =============== BMW ConnectedDrive - Update VIN Session Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1913 Video: https://www.youtube.com/watch?v=udJoa3JEGM Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1736 Vulnerability...