Lucene search
+L

5 matches found

Kitploit
Kitploit
โ€ขadded 2026/09/05 10:09 a.m.โ€ข2 views

Carpunk

carpunk CAN Injection | ์ž๋™์ฐจ ํ•ดํ‚น ํˆดํ‚ท ๐Ÿš€ ์ƒˆ๋กœ์šด ๊ธฐ๋Šฅ Carpunk๋Š” ์›๋ž˜์˜ CANghost์—์„œ ์ง„ํ™”ํ•œ ๊ณ ๊ธ‰ CAN Injection ํˆดํ‚ท์ž…๋‹ˆ๋‹ค. ์ธํ„ฐํŽ˜์ด์Šค ์ œ์–ด, ๊ธฐ๋ณธ ์Šค๋‹ˆํ•‘ ๋ฐ CAN ์ธ์ ์…˜ ์ทจ์•ฝ์ ์„ ํฌํ•จํ•œ ์ƒˆ๋กœ์šด ๊ธฐ๋Šฅ์„ ๋„์ž…ํ•ฉ๋‹ˆ๋‹ค. โœ… ์‹œ๋ฎฌ๋ ˆ์ด์…˜ ๋ฐ ์‹ค์ œ ์ž๋™์ฐจ์™€ ํ˜ธํ™˜ ๊ฐ€๋Šฅ ๐Ÿ› ๏ธ ๋‘ ๊ฐ€์ง€ ์ƒˆ๋กœ์šด CAN ์ธ์ ์…˜ ๊ณต๊ฒฉ ์ถ”๊ฐ€ ๐Ÿงช Ubuntu ๋ฐ Parrot OS์—์„œ ํ…Œ์ŠคํŠธ ์™„๋ฃŒ โš ๏ธ Carpunk ์‹คํ–‰ ์ „ ์ค‘์š” ์ฐธ๊ณ  ์‚ฌํ•ญ CAN ๋“œ๋ผ์ด๋ฒ„ ๋กœ๋“œ : CAN ๋ฒ„์Šค ๋“œ๋ผ์ด๋ฒ„๊ฐ€ ์ˆ˜๋™์œผ๋กœ ๋กœ๋“œ๋˜์—ˆ๋Š”์ง€ ํ™•์ธํ•˜์‹ญ์‹œ์˜ค...

5.9AI score
SaveExploits0References6
Positive Technologies
Positive Technologies
โ€ขadded 2026/03/13 12:00 a.m.โ€ข22 views

PT-2026-25390

PX4 autopilot is a flight control solution for drones. Prior to 1.17.0-rc2, tattu can contains an unbounded memcpy in its multi-frame assembly loop, allowing stack memory overwrite when crafted CAN frames are processed. In deployments where tattu can is enabled and running, a CAN-injection-capabl...

6.1CVSS5.8AI score0.0027EPSS
SaveExploits2References7
HackRead
HackRead
โ€ขadded 2023/04/09 10:57 p.m.โ€ข20 views

Cybercriminals Exploit CAN Injection Hack to Steal Cars

By Waqas If it is connected, it is vulnerable; in this case, a Toyota RAV4 model was stolen within two minutes. This is a post from HackRead.com Read the original post: Cybercriminals Exploit CAN Injection Hack to Steal Cars...

7.1AI score
SaveExploits0
Cvelist
Cvelist
โ€ขadded 2023/04/05 12:00 a.m.โ€ข49 views

CVE-2023-29389

Toyota RAV4 2021 vehicles automatically trust messages from other ECUs on a CAN bus, which allows physically proximate attackers to drive a vehicle by accessing the control CAN bus after pulling the bumper away and reaching the headlight connector, and then sending forged "Key is validated"...

6.8AI score0.0066EPSS
SaveExploits1References2
OSV
OSV
โ€ขadded 2018/03/02 1:29 a.m.โ€ข8 views

CVE-2018-1170

This vulnerability allows adjacent attackers to inject arbitrary Controller Area Network messages on vulnerable installations of Volkswagen Customer-Link App 1.30 and HTC Customer-Link Bridge. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

8.8CVSS5.9AI score0.00782EPSS
SaveExploits0References1
Rows per page
Query Builder