609 matches found
Agent-Tesla-APC-Injection-Token-Manipulation-Registry-Persistence-Analysis
1. Native API & APC Injection The x64dbg memory dump reveals that Agent Tesla uses Native API NT API calls for low-level operations, including APC Asynchronous Procedure Call injection. Key Functions Observed: NtQueueApcThread – Injects code into a target thread via APC. NtReadVirtualMemory –...
cve-2025-2082-POV
CVE-2025-2082 – Sobrescritura de Puntero de Función PoV estilo VCSEC Este repositorio demuestra una Prueba de Vulnerabilidad PoV que simula una falla crítica de corrupción de memoria inspirada en CVE-2025-2082, descubierta en el componente VCSEC Seguridad del Controlador del Vehículo de Tesla. La...
colabcat
Colabcat Run Hashcat on Google Colab with session restore capabilities with Google Drive. Usage Go to the link below to open a copy of the colabcat.ipynb file in Google Colab: https://colab.research.google.com/github/someshkar/colabcat/blob/master/colabcat.ipynb Click on Runtime, Change runtime...
agent_tesla_panel_rce
agentteslapanelrce This module exploit the command injection vulnerability in control center of the agent Tesla. Setup Resources for testing are available here: https://github.com/mekhalleh/agentteslapanelrce/tree/master/resources Windows For WebPanel1.7z unauthenticated RCE, I used WAMP server...
tesla-security-research
Investigación de Seguridad en Tesla Investigación de vulnerabilidades en el sistema de infoentretenimiento del Tesla Model 3/Y Intel Atom MCU, Linux 4.14.235, divulgadas de manera responsable a Tesla a través de Bugcrowd. Se obtuvo acceso root persistente en un Tesla Model 3 de producción mediant...
CVE-2020-10558
CVE-2020-10558: Tesla Model S/3/X Denial of Service DoS Security Researcher: Jacob Archuleta @nullze 📝 Vulnerability Overview A critical Denial of Service DoS vulnerability was discovered in the Tesla Model 3, Model S, and Model X all versions prior to 2020.4.10. This vulnerability allowed a remo...
google_gax
googlegax parcheado Fork parcheado de googlegax v0.4.1 para compatibilidad con Tesla = 1.18.3. Por qué existe este fork Tesla 1.18.3 2 de junio de 2026 introdujo una validación estricta de nombres de campos multipart a través de assertquotedstringsafe!/2 como parte de las correcciones de segurida...
Tesla-CVE-2020-10558
Vulnerabilidad del Tesla Model 3 | CVE-2020-10558...
cve-2025-2082
¿Cómo hackear Tesla? — Aplicación de escenario interactivo Este proyecto es un escenario interactivo de ciberseguridad basado en una vulnerabilidad real descubierta por la empresa de seguridad Synacktiv cadena TPMS → VCSEC → CAN Bus. El escenario tiene como objetivo enseñar, dramatizando, cómo se...
GHSA-28JH-G32X-V9V4 Tesla vulnerable to multipart part smuggling via unescaped `content-disposition` values
Summary Tesla.Multipart.partheadersfordisposition/1 interpolates Content-Disposition parameter values field name, filename, and other opts verbatim into the part header line without encoding or escaping any special characters. An attacker who controls a filename, field name, or other disposition...
EUVD-2026-34012
Tesla vulnerable to multipart part smuggling via unescaped content-disposition values...
Tesla vulnerable to multipart part smuggling via unescaped `content-disposition` values
Summary Tesla.Multipart.partheadersfordisposition/1 interpolates Content-Disposition parameter values field name, filename, and other opts verbatim into the part header line without encoding or escaping any special characters. An attacker who controls a filename, field name, or other disposition...
EUVD-2026-34013
Tesla vulnerable to atom exhaustion via untrusted URL scheme...
Tesla vulnerable to atom exhaustion via untrusted URL scheme
Summary In the Mint adapter for the Tesla HTTP client library, Tesla.Adapter.Mint.openconn/2 passes the URL scheme of every outgoing request through String.toatom/1 with no allow-list validation. Because BEAM atoms are permanent never garbage-collected and the atom table is bounded at roughly...
GHSA-H74C-Q9J7-MPCM Tesla vulnerable to atom exhaustion via untrusted URL scheme
Summary In the Mint adapter for the Tesla HTTP client library, Tesla.Adapter.Mint.openconn/2 passes the URL scheme of every outgoing request through String.toatom/1 with no allow-list validation. Because BEAM atoms are permanent never garbage-collected and the atom table is bounded at roughly...
Tesla: Authorization header leaks on cross-origin redirect via case-sensitive filtering
Summary Tesla.Middleware.FollowRedirects is meant to strip the Authorization header when following a cross-origin redirect, but performs the check with a case-sensitive comparison against the lowercase string "authorization". Because Tesla preserves header keys exactly as supplied by the caller,...
EUVD-2026-34014
Tesla: Authorization header leaks on cross-origin redirect via case-sensitive filtering...
GHSA-9M9W-GXF7-RH8M Tesla: Authorization header leaks on cross-origin redirect via case-sensitive filtering
Summary Tesla.Middleware.FollowRedirects is meant to strip the Authorization header when following a cross-origin redirect, but performs the check with a case-sensitive comparison against the lowercase string "authorization". Because Tesla preserves header keys exactly as supplied by the caller,...
GHSA-MC85-72GR-VM9F Tesla has decompression bomb on response body
Summary Any Tesla client pipeline that includes Tesla.Middleware.DecompressResponse or Tesla.Middleware.Compression eagerly decompresses HTTP response bodies with no size limit. A server under attacker control or reached via a redirect can return a tiny gzip-encoded payload that expands into...