PT-2025-18324 · Tesla · Tesla Model S

Name of the Vulnerable Software and Affected Versions: Tesla Model S affected versions not specified Description: This issue allows local attackers to escape the sandbox on affected Tesla Model S vehicles. To exploit this, an attacker must first obtain the ability to execute code within the sandb...

(Pwn2Own) Tesla Model S Iris Modem Race Condition Firewall Bypass Vulnerability

This vulnerability allows network-adjacent attackers to bypass the firewall on the Iris modem in affected Tesla Model S vehicles. Authentication is not required to exploit this vulnerability. The specific flaw exists within the firewall service. The issue results from a failure to obtain the...

Tesla Model S 安全漏洞

Tesla Model S is an automobile from the American company Tesla. A security vulnerability exists in Tesla Model S. The vulnerability stems from the firewall service not properly acquiring the xtables lock, which could lead to a firewall rule bypass...

(Pwn2Own) Tesla Model S oFono AT Command Heap-based Buffer Overflow Code Execution Vulnerability

This vulnerability allows local attackers to execute arbitrary code on affected Tesla Model S vehicles. An attacker must first obtain the ability to execute code on the target modem in order to exploit this vulnerability. The specific flaw exists within the parsing of responses from AT commands...

PT-2025-18325 · Tesla · Tesla Model S

Name of the Vulnerable Software and Affected Versions: Tesla Model S versions affected versions not specified Description: This issue allows local attackers to execute arbitrary code on affected Tesla Model S vehicles. The flaw exists within the parsing of responses from AT commands, resulting fr...

PT-2025-18323 · Tesla · Tesla Model S

Name of the Vulnerable Software and Affected Versions: Tesla Model S affected versions not specified Description: This issue allows network-adjacent attackers to bypass the firewall on the Iris modem in affected Tesla Model S vehicles. The flaw exists within the firewall service due to a failure ...

Tesla Model S 操作系统命令注入漏洞

The Tesla Model S is an automobile from the American company Tesla Tesla. The Tesla Model S suffers from an operating system command injection vulnerability that stems from the qlatfwd process failing to validate user input, which could lead to command injection...

PT-2025-18326 · Tesla · Tesla Model S Iris Modem

Name of the Vulnerable Software and Affected Versions: Tesla Model S Iris Modem affected versions not specified Description: This issue allows local attackers to execute arbitrary code on affected Tesla Model S vehicles. The flaw exists within the ql atfwd process due to the lack of proper...

(Pwn2Own) Tesla Model S oFono Unnecessary Privileges Sandbox Escape Vulnerability

This vulnerability allows local attackers to escape the sandbox on affected Tesla Model S vehicles. An attacker must first obtain the ability to execute code within the sandbox on the target system in order to exploit this vulnerability. The specific flaw exists within the oFono process. The...

Tesla Model S 安全漏洞

Tesla Model S is an automobile from the American company Tesla Tesla. A security vulnerability exists in Tesla Model S. The vulnerability stems from a process allowing modification of the interface, which could lead to a network sandbox bypass...

Tesla Model S 输入验证错误漏洞

The Tesla Model S is an automobile from the American company Tesla, Inc. An input validation error vulnerability exists in Tesla Model S. The vulnerability stems from improper input validation and could cause a local user to escape the sandbox...

CVE-2024-10635

Enterprise Protection contains an improper input validation vulnerability in attachment defense that allows an unauthenticated remote attacker to bypass attachment scanning security policy by sending a malicious S/MIME attachment with an opaque signature. When opened by a recipient in a downstrea...

CVE-2024-10635

Enterprise Protection contains an improper input validation vulnerability in attachment defense that allows an unauthenticated remote attacker to bypass attachment scanning security policy by sending a malicious S/MIME attachment with an opaque signature. When opened by a recipient in a downstrea...

CVE-2024-10635 Enterprise Protection S/MIME Opaque Signature Attachment Scanning Bypass

Enterprise Protection contains an improper input validation vulnerability in attachment defense that allows an unauthenticated remote attacker to bypass attachment scanning security policy by sending a malicious S/MIME attachment with an opaque signature. When opened by a recipient in a downstrea...

CVE-2024-10635 Enterprise Protection S/MIME Opaque Signature Attachment Scanning Bypass

Enterprise Protection contains an improper input validation vulnerability in attachment defense that allows an unauthenticated remote attacker to bypass attachment scanning security policy by sending a malicious S/MIME attachment with an opaque signature. When opened by a recipient in a downstrea...

CVE-2024-10635

Proofpoint Enterprise Protection’s Attachment Defense has an improper input validation vulnerability in S/MIME attachment handling that allows an unauthenticated remote attacker to bypass attachment scanning by sending a malicious S/MIME attachment with an opaque signature. When opened by a recip...

M&S Cyberattack Disrupts Contactless Payments and Click & Collect Services

Marks & Spencer M&S cyberattack disrupts contactless payments and Click & Collect; investigation launched as retailer apologises and…...

CVE-2025-31328 Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4 HANA (Learning Solution)

SAP Learning Solution is vulnerable to Cross-Site Request Forgery CSRF, allowing an attacker to trick authenticated user into sending unintended requests to the server. GET-based OData function is named in a way that it violates the expected behaviour. This issue could impact both the...

CVE-2025-31328

CVE-2025-31328 – SAP Learning Solution (CSRF) : The SAP Learning Solution is vulnerable to Cross-Site Request Forgery, allowing authenticated users to be tricked into unintended requests. A GET-based OData function is noted to violate expected behavior, with impact described as affecting confiden...

SourceCodester Phone Management System 安全漏洞

SourceCodester Phone Management System is an open source phone management system from SourceCodester. A security vulnerability exists in SourceCodester Phone Management System version 1.0, which is caused by a buffer overflow in the Password Handler component's main function due to mishandling of...