458 matches found
Smart car chargers. Plug-n-play for hackers?
Over the last 18 months, we’ve been investigating the security of smart electric vehicle chargers. These allow the owner to remotely monitor and manage the charge state, speed and timing of their car charger, among many functions. We bought 6 different brands of chargers and also reviewed securit...
Denial of Service in Leaf EV (car) version 2018 SV
In Nissan Leaf EV car version 2018 SV a Denial of Service exists in the Head Unit Display that can be attacked via Local Access resulting in Denial of Service HUD being disabled...
GSD-2021-1000008 Denial of Service in Leaf EV (car) version 2018 SV
In Nissan Leaf EV car version 2018 SV a Denial of Service exists in the Head Unit Display that can be attacked via Local Access resulting in Denial of Service HUD being disabled...
EV Live Assistant suffers from dll hijacking vulnerability
Ev Live Streaming Assistant is an unmanned live streaming software. EV Live Assistant suffers from a dll hijacking vulnerability. An attacker can exploit this vulnerability to load a fake malicious dll file and gain control of the server...
EV Recording Win suffers from dll hijacking vulnerability
EV Recording is a computer screen recording software. EV Record Screen Win suffers from a dll hijacking vulnerability. An attacker can exploit the vulnerability to load a malicious dll and execute malicious code...
EV Screen Sharing Win suffers from dll hijacking vulnerability
EV Screen Sharing is a screen sharing program. EV Screen Sharing Win suffers from a dll hijacking vulnerability. An attacker can exploit the vulnerability to load a malicious dll and execute malicious code...
ev-d.de Cross Site Scripting vulnerability OBB-1354188
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
lemonaid-charitea-ev.org Cross Site Scripting vulnerability OBB-1193776
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-1623
A local, authenticated user with shell can view sensitive configuration information via the ev.ops configuration file. This issue affects all versions of Junos OS Evolved prior to 19.2R1...
ev-installs.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1106956 Security Researcher metamorfosec Helped patch 1963 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting ev-installs.com websi...
SQL injection vulnerability in Zoneminder ev***.php file
Zoneminder is an open source video surveillance system. A SQL injection vulnerability exists in the Zoneminder ev.php file. An attacker can exploit the vulnerability to obtain sensitive database information...
Remotely controlled EV home chargers – the threats and vulnerabilities
We are now seeing signs of a possible shift in the field of personal transport. Recent events such as the 'dieselgate' scandal undermine customer and government confidence in combustion engines and their environmental safety. At the same time there has been a big step forward in the development o...
Clooud 1.4.0 Shell Upload
======================================================================================================= | Title : Clooud v1.4.0 - Premium Media Sharing Script unrestricted file upload Vulnerability | | Author : indoushka | | email : [email protected] | | Tested on : windows 10 FranASSais...
Swamp 0.0.2 Remote File Inclusion
======================================================================== | Title : Swamp v0.0.2 File inclusion vulnerability | Author : indoushka | email : [email protected] | Tested on : windows 10 FranASSais V.Pro | Version : v0.0.2 | Vendor : https://github.com/wcchandler/swamp | Dork :...
Multiple PHP Webservers Ransomware Upload
A file upload vulnerability exists in various PHP webservers. Successful exploitation of this vulnerability could allow a remote attacker to execute PHP Ransomware code on the compromised server. This method is often used by ransomware such as EV, Lalabitch, JapanLocker, CTB-Locker and others...
Cuvva: Subdomain take over oh-no.cuvva.co and ohno.cuvva.co
Cuvva has an old EV certificate which lists a very large number of subject alternative names SANs, as listed below. These were included because we anticipated potentially wanting to use these hostnames in the future and it was free to add them. Very few of the hostnames actually exist, and those...
Eview EV-07S GPS Tracker Security Bypass Vulnerability
The Eview EV-07S GPS Tracker is a GPS tracking device for personal safety and personal protection. A security vulnerability exists in the phone number of the Eview EV-07S GPS Tracker, which originates from a lack of authentication in the program. The vulnerability can be exploited to restore the...
Eview EV-07S GPS Tracker Information Disclosure Vulnerability
The Eview EV-07S GPS Tracker is a GPS tracking device for personal safety and personal protection. A security vulnerability exists in the Eview EV-07S GPS Tracker. The vulnerability can be exploited by an attacker to obtain sensitive information GPS data, etc...
Eview EV-07S GPS Buffer Overflow Vulnerability
The Eview EV-07S GPS Tracker is a GPS tracking device for personal safety and personal protection. A buffer overflow vulnerability exists in the Eview EV-07S GPS Tracker, which arises from the program failing to perform sufficient boundary checks. An attacker can exploit the vulnerability by...
CVE-2017-5237
Due to a lack of authentication, an unauthenticated user who knows the Eview EV-07S GPS Tracker's phone number can revert the device to a factory default configuration with an SMS command, "RESET!"...