2522 matches found
Information disclosure
The DEKRA Used Car Report aka com.dekra.maengelreport application 3.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5996
The DEKRA Used Car Report aka com.dekra.maengelreport application 3.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5996
CVE-2014-5996 affects the Android app “DEKRA Used Car Report” (com.dekra.maengelreport) version 3.0.0, where X.509 certificate validation is not performed for SSL connections. This allows MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. The vulnerability...
Information Sharing on Threats Seen as a Key for Auto Makers
A small segment of the security research community has been spending a lot of time tearing apart the innards of various vehicles and looking at ways that the computers and local networks that reside in modern cars can be hacked. There has been some remarkable success on this front, and while auto...
Embedded Device Security, BadUSB, Car Hacking at Black Hat
LAS VEGAS — At the risk of diving headfirst into the Internet of Things fray, embedded device security emerged as a shiny new penny during last week’s Black Hat and DEF CON festivities. Firmware is the new hacker black, and everything from USB sticks, to home routers, to automobiles is in play fo...
Car Demon 1.0.1 - /wp-admin/post.php Multiple Parameter XSS
The Car Demon WordPress plugin was affected by a /wp-admin/post.php Multiple Parameter XSS security vulnerability...
Car Demon 1.0.1 - /wp-admin/edit.php Multiple Parameter XSS
The Car Demon WordPress plugin was affected by a /wp-admin/edit.php Multiple Parameter XSS security vulnerability...
Auto Database System 1.0 Infusion Addon SQL injection Vulnerability
No description provided by source. Exploit Title: PHP-Fusion Auto Database System 1.0 Infusion SQL injection Date: 8-2-2011 Author: Saif El-Sherei Software Link: http://www.php-fusion.co.uk/infusions/addondb/view.php?addonid=146 Version: Auto Database System 1.0 Infusion, PHP-fusion 7.01..03 Test...
Car Site Manager csm/asp/detail.asp p Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/21066/info Car Site Manager is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to stea...
Car Portal 2.0 - BLIND SQL Injection Vulnerability
No description provided by source. +Title Car Portal v2.0 BLIND SQL Injection Vulnerability +Author RoAdKiLlEr +Contact RoAdKiLlEratKhg-CrewdotWs +Tested on Win Xp Sp 2/3 --------------------------------------------------------------------------- Founded by RoAdKiLlEr Team: Albanian Hacking Crew...
CEScripts Multiple Scripts Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/18402/info CEScripts scripts are prone to multiple cross-site scripting vulnerabilities because they fail to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execu...
PHPJabbers Car Rental Script - Multiple Vulnerabilities
No description provided by source. Car Rental Script - Multiple Vulnerabilities ==================================================================== .:. Author : HackXBack .:. Contact : [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script : http://www.phpjabbers.com/car-rental/ ===...
Joomla Component My Car Multiple Vulnerabilities
No description provided by source. Exploit Title: Joomla Component My Car Multiple Vulnerabilities Date: 28th May 2010 Author: Valentin Category: webapps/0day Version: 1.0 Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information...
PHP Car Rental Complete System 1.2 - SQL Injection Vulnerability
No description provided by source...
Car Portal CMS 3.0 - Multiple Vulnerabilities
No description provided by source...
Bs Auto_Classifieds Script - (articlesdetails.php) SQL Injection Vulnerability
No description provided by source. 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Bs AutoClassifieds Scriptarticlesdetails.php Sqli Vulnerability Date : july 5,2010 Critical Level : HIGH vendor URL...
PHP Car Rental-Script (Auth Bypass) SQL Injection
No description provided by source. / Name : PHP Car Rental-Script Auth Bypass SQL Injection WebSite : http://www.carrentalphpscript.com/ Author : Hamza 'MizoZ' N. Email : [email protected] Greetz : Zuka , Achille Dark3r , int0x80 , geeksec.comhttp://geeksec.com ... / - Log-On page :...
Joomla Component Car Manager <= 1.1 - Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Script Name: Joomla Component Car Manager = 1.1 Blind SQL Injection Exploit Coded by : ajann Author : ajann Dork : index.php?option=comresman Contact : : S.Page : http://www.webformatique.net $$ : .39.99 .. : ajann,Turkey use IO::Socket; if@ARGV 1...
MS-DOS: Permanent Denial of Service
Steps to Reproduce: 1. Install MS DOS 2.0 on a computer 2. Start your car and run it over that computer. 3. Now MS DOS would not start. Possible Fix: MSDOS owners shouldn't own a car for sake of proper functioning of the operating system I've attached proof of concept...
Tesla Cars Can Be Hacked to Locate and Unlock Remotely
Smart Phones, Smart TVs, Smart Refrigerators, even Smart Cars! When it comes to Smart devices, we simply provide them the master control of various tasks to make our life easy and more comfortable, unaware about its worst impact. At the starting of last month we reported that by using a $20 toolk...