Xiang Dong ("Mike") Yu (Ford Motor)

Yu was a Product Engineer and ten-year veteran of U.S. automaker Ford Motor Company who admitted to copying around 4,000 confidential Ford documents to an external hard drive and passing them to Beijing Automotive Company with whom he hadtaken a job. The design documents have been valued at aroun...

Chinese National Stole Ford Secrets Worth More Than $50 Million

A ten year veteran of the U.S. automaker Ford Motor Company pleaded guilty in federal court on November 17 to charges that he stole company secrets, including design documents, worth more than $50 million and sharing them with his new employer: the Chinese division of a U.S. rival of Ford’s. Xian...

Suzuki SQL Injection

Title : Suzuki SQL Injection Vulnerability Author : Net.Edit0r Data : 2010-06-21 Location : Iran Dork : "© Suzuki GB & Suzuki Motor Corporation 2010." Category : webapps Version : 1.1 Platform : linux/php InformatioN Title : Suzuki SQL Injection Vulnerability Author : Net.Edit0r Email :...

X-Motor Racing 1.26 - Remote Buffer Overflow / Multiple Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/40008/info X-Motor Racing is prone to a buffer-overflow vulnerability and a multiple denial-of-service vulnerabilities. Successfully exploiting these issues allows remote attackers to execute arbitrary code or crash the affected application, denying servi...

Why Bob Maley's Firing is Bad for All of Us

The news that Pennsylvania CISO Bob Maley lost his job for publicly discussing a security incident at last week’s RSA Conference really shouldn’t come as a surprise, but it does. Even for a government agency, this kind of lack of understanding of what actually matters is appalling and it is a...

Ex Ford Engineer Arrested for Alleged Theft of Trade Secrets

A former Ford Motor Company engineer has been indicted on charges of theft of trade secrets, attempted theft of trade secrets and unauthorized access to protected computers. Xiang Dong Yu, also known as Mike Yu, was arrested last week as he entered the country at Chicago O’Hare International...

CVE-2009-3123

Directory traversal vulnerability in gallery/gallery.php in Wap-Motor before 18.1 allows remote attackers to read arbitrary files via a .. dot dot in the image parameter...

CVE-2009-3123

CVE-2009-3123 is a directory traversal vulnerability in Wap-Motor (before version 18.1) affecting the file gallery/gallery.php . The issue occurs when an attacker supplies a malicious value for the image parameter containing “..”, enabling an attacker to read arbitrary files and potentially discl...

CVE-2009-3123

Directory traversal vulnerability in gallery/gallery.php in Wap-Motor before 18.1 allows remote attackers to read arbitrary files via a .. dot dot in the image parameter...

Wap-motor - image Directory Traversal

Wap-motor - image Directory Traversal source: https://www.securityfocus.com/bid/44223/info Wap-motor is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to obtain sensitive information that coul...

Wap-motor - 'image' Directory Traversal

source: https://www.securityfocus.com/bid/44223/info Wap-motor is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to obtain sensitive information that could aid in further attacks. Versions pri...

WAP-Motor 18.0 File Inclusion

=============================================================== Wap-motor Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 0 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-1 + Discovered By : Inj3ct0r + Site : Inj3ct0r.com + support e-mail :...

Gentoo Security Advisory GLSA 200608-27 (motor)

The remote host is missing updates announced in advisory GLSA 200608-27. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200608-27 (motor)

The remote host is missing updates announced in advisory GLSA 200608-27. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Unfixed XSS vulnerability at www.yamaha-motor-europe.com

Security researcher cueballr, has submitted on 05/09/2008 a cross-site-scripting XSS vulnerability affecting www.yamaha-motor-europe.com, which at the time of submission ranked 72237 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/09/2008. I...

Debian: Security Advisory (DSA-1083-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1083-1 : motor - buffer overflow

Mehdi Oudad and Kevin Fernandez discovered a buffer overflow in the ktools library which is used in motor, an integrated development environment for C, C++ and Java, which may lead local attackers to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

GLSA-200608-27 : Motor: Execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200608-27 Motor: Execution of arbitrary code In November 2005, Zone-H Research reported a boundary error in the ktools library in the VGETSTRING macro of kkstrtext.h, which may cause a buffer overflow via an overly long input...

Motor: Execution of arbitrary code

Background Motor is a text mode based programming environment for Linux, with a syntax highlighting feature, project manager, makefile generator, gcc and gdb front-end, and CVS integration. Description In November 2005, Zone-H Research reported a boundary error in the ktools library in the...

[SECURITY] [DSA 1083-1] New motor packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1083-1 [email protected] http://www.debian.org/security/ Martin Schulze May 31st, 2006 http://www.debian.org/security/faq -...