bmw-forum.de Improper Access Control vulnerability OBB-3766034

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

bmw-motorradersatzteile.de Cross Site Scripting vulnerability OBB-3575519

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Phishers Targeting Diplomats in Kyiv with Fake 2011 BMW Flyers

By Deeba Ahmed The fake flyer was emailed on 4 May 2023 to multiple diplomatic missions in Kyiv. This is a post from HackRead.com Read the original post: Phishers Targeting Diplomats in Kyiv with Fake 2011 BMW Flyers...

bmw-club.cz Cross Site Scripting vulnerability OBB-3218382

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

bmw-autofokusz.hu Cross Site Scripting vulnerability OBB-3207164

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

bmw-syndikat.de Cross Site Scripting vulnerability OBB-3206027

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

bmw-syndikat.de Cross Site Scripting vulnerability OBB-3193835

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Automotive Industry Exposed to Have Major API Vulnerabilities

By Habiba Rashid The impacted automotive giants include BMW, Toyota, Ford, Honda, Mercedes-Benz and many more. This is a post from HackRead.com Read the original post: Automotive Industry Exposed to Have Major API Vulnerabilities...

bmw-carparts.co.uk Cross Site Scripting vulnerability OBB-3056310

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

bmw-reduktor.com Cross Site Scripting vulnerability OBB-2948774

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

proauto-bmw-service.de Cross Site Scripting vulnerability OBB-2858365

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

proauto-bmw-service.de Cross Site Scripting vulnerability OBB-2826567

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious code in @bmw-chris/signalr-default-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55f1ea95b0dd1fab3c5fd07a895d013eadc38233dd31acbf4d5640965da83210 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-135 Malicious code in @bmw-chris/vehiclesession-default-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d82e8ce8a020c264630fe52e7be768d7f6ed82d9303e7365f8f0b5852f8c9edf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-129 Malicious code in @bmw-chris/ecufunction-default-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a47870f755a8d87be1f159dfa2fec23c5c8fa0285c556d88248c664d190b2be0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-136 Malicious code in @bmw-ispi-workplace/dms-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8225121478916753a7c4168f947d3bfcf9e5be59125debea55a95c13a362c5eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @bmw-ispi-workplace/dms-impl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6898e8320468b4c586b03d0d2846a7e478816d08de35b21e51f3c6bc1d3a1324 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @bmw-ispi-workplace/dms-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8225121478916753a7c4168f947d3bfcf9e5be59125debea55a95c13a362c5eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @bmw-ispi-workplace/dms-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59ec35dcfc0b2d32da685f5d8303bb67b2568f0756ee74af7241c1a2a1d917fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-137 Malicious code in @bmw-ispi-workplace/dms-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59ec35dcfc0b2d32da685f5d8303bb67b2568f0756ee74af7241c1a2a1d917fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...