143 matches found
MAL-2022-1633 Malicious code in bmw-angular-framework (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19187c7234d1b977a45a06fe7aba190ebe4b728a13f7cefa9b8b6fbf644bc99a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in bmw-angular-framework (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19187c7234d1b977a45a06fe7aba190ebe4b728a13f7cefa9b8b6fbf644bc99a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
bmw-motorrad-events.de Cross Site Scripting vulnerability OBB-2653470
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
proauto-bmw-service.de Cross Site Scripting vulnerability OBB-2627857
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
bmw-forum.de Improper Access Control vulnerability OBB-2409504
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
BMW Online Cross Site Scripting
Document Title: =============== BMW Online Mail - Persistent Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2262 Vulnerability Magazine:...
BMW Online (Mail) - Persistent Web Vulnerability
Document Title: =============== BMW Online Mail - Persistent Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2262 Vulnerability Magazine:...
bmw-i-pure-impulse.com Cross Site Scripting vulnerability OBB-1378292
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
uw-bmw-occasions.nl Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1022365 Security Researcher Hchabik Helped patch 2470 vulnerabilities Received 5 Coordinated Disclosure badges Received 2 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting uw-bmw-occasions.nl website...
remont-bmw-spb.ru Cross Site Scripting vulnerability
Security Researcher geeknik Helped patch 8594 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting remont-bmw-spb.ru website and its users. Following...
bmw.co.uk XSS vulnerability
Open Bug Bounty ID: OBB-685267 Description| Value ---|--- Affected Website:| bmw.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...
BMW ConnectedDrive - (Update) VIN Session Vulnerability
Document Title: =============== BMW ConnectedDrive - Update VIN Session Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1913 Video: https://www.youtube.com/watch?v=udJoa3JEGM Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1736 Vulnerability...
BMW ConnectedDrive - (Update) VIN Session Vulnerability
Document Title: =============== BMW ConnectedDrive - Update VIN Session Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1913 Video: https://www.youtube.com/watch?v=udJoa3JEGM Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1736 Vulnerability...
BMW - (Token) Cross Site Scripting Web Vulnerability
Document Title: =============== BMW - Token Cross Site Scripting Web Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1914 Video: https://www.youtube.com/watch?v=txjW7fpMJ-Q Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1737 Vulnerability...
BMW - (Token) Cross Site Scripting Web Vulnerability
Document Title: =============== BMW - Token Cross Site Scripting Web Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1914 Video: https://www.youtube.com/watch?v=txjW7fpMJ-Q Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1737 Vulnerability...
bmw-syndikat.de XSS vulnerability
Open Bug Bounty ID: OBB-635692 Description| Value ---|--- Affected Website:| bmw-syndikat.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Multiple BMW Vehicle Head Unit HU_NBT Component Design Vulnerabilities (CNVD-2018-11270)
BMW i Series, etc. are different series of automobile products of BMW Bayerische Motoren Werke AG, Germany.Head Unit HUNBT Infotainment component is a set of infotainment system of the system. A security vulnerability exists in the Head Unit HUNBT component on several BMW vehicles vehicles...
Multiple BMW Head Unit HU_NBT Component Design Vulnerabilities
BMW i Series, etc. are different series of automobile products of BMW Bayerische Motoren Werke AG, Germany.Head Unit HUNBT Infotainment component is a set of infotainment system of the system. A security vulnerability exists in the Head Unit HUNBT component on several BMW vehicles vehicles...
Design/Logic Flaw
The Head Unit HUNBT aka Infotainment component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through 2018 allows an attack by an attacker who has direct physical access...