569 matches found
Agent-Tesla-APC-Injection-Token-Manipulation-Registry-Persistence-Analysis
1. API nativa e inyección APC El volcado de memoria de x64dbg revela que Agent Tesla usa llamadas a la API nativa NT API para operaciones de bajo nivel, incluida la inyección APC llamada a procedimiento asíncrono. Funciones clave observadas: NtQueueApcThread – Inyecta código en un hilo de destino...
cve-2025-2082-POV
CVE-2025-2082 – Sobrescritura de Puntero de Función PoV estilo VCSEC Este repositorio demuestra una Prueba de Vulnerabilidad PoV que simula una falla crítica de corrupción de memoria inspirada en CVE-2025-2082, descubierta en el componente VCSEC Seguridad del Controlador del Vehículo de Tesla. La...
colabcat
Colabcat Run Hashcat on Google Colab with session restore capabilities with Google Drive. Usage Go to the link below to open a copy of the colabcat.ipynb file in Google Colab: https://colab.research.google.com/github/someshkar/colabcat/blob/master/colabcat.ipynb Click on Runtime, Change runtime...
agent_tesla_panel_rce
agentteslapanelrce Este módulo explota la vulnerabilidad de inyección de comandos en el centro de control de Agent Tesla. Configuración Los recursos para realizar pruebas están disponibles aquí: https://github.com/mekhalleh/agentteslapanelrce/tree/master/resources Windows Para WebPanel1.7z RCE no...
cve-2025-2082
特斯拉如何被黑？ — 交互式场景应用 该项目基于 Synacktiv 安全公司发现的一个真实漏洞（TPMS → VCSEC → CAN Bus 链），是一个交互式网络安全场景。 该场景旨在通过戏剧化的方式，教导人们如何利用特斯拉 Model 3 在2024年存在的一个易受攻击的协议来入侵车辆。 通过时间和情节线进行叙述。 根据用户的选择推进。 旨在提高对信息物理系统安全的认识。 目标 通过此场景，以下概念将以游戏化的形式教授： TPMS（轮胎压力监测系统）协议 整数溢出漏洞 CAN 总线架构 VCSEC（车辆安全模块） 警告 此应用程序仅用于教育目的。...
Tesla-CVE-2020-10558
特斯拉 MODEL 3 漏洞 | CVE-2020-10558...
tesla-security-research
特斯拉安全研究 对特斯拉 Model 3/Y 信息娱乐系统（Intel Atom MCU，Linux 4.14.235）的漏洞研究，已通过 Bugcrowd 向特斯拉负责任的披露。 通过特斯拉 ODIN 诊断接口的命令注入漏洞 CVE-2022-42008，在一台量产特斯拉 Model 3 上获得了持久的 root 访问权限。由此，又发现了五个额外漏洞——包括一种能够抵御固件更新的持久化方法（CVE-2022-42005，CVE-2022-42006）以及一种伪造 Safety Score 保险遥测数据的方法，该方法直接将月保费从 130 美元降至 83 美元。 ODIN、hermes ...
CVE-2020-10558
CVE-2020-10558: Denegación de Servicio DoS en Tesla Model S/3/X Investigador de seguridad: Jacob Archuleta @nullze 📝 Resumen de la vulnerabilidad Se descubrió una vulnerabilidad crítica de Denegación de Servicio DoS en los Tesla Model 3, Model S y Model X todas las versiones anteriores a 2020.4.1...
google_gax
googlegax parcheado Fork parcheado de googlegax v0.4.1 para compatibilidad con Tesla = 1.18.3. Por qué existe este fork Tesla 1.18.3 2 de junio de 2026 introdujo una validación estricta de nombres de campos multipart a través de assertquotedstringsafe!/2 como parte de las correcciones de segurida...
EUVD-2026-34012
Tesla vulnerable to multipart part smuggling via unescaped content-disposition values...
Tesla vulnerable to multipart part smuggling via unescaped `content-disposition` values
Summary Tesla.Multipart.partheadersfordisposition/1 interpolates Content-Disposition parameter values field name, filename, and other opts verbatim into the part header line without encoding or escaping any special characters. An attacker who controls a filename, field name, or other disposition...
EUVD-2026-34013
Tesla vulnerable to atom exhaustion via untrusted URL scheme...
Tesla vulnerable to atom exhaustion via untrusted URL scheme
Summary In the Mint adapter for the Tesla HTTP client library, Tesla.Adapter.Mint.openconn/2 passes the URL scheme of every outgoing request through String.toatom/1 with no allow-list validation. Because BEAM atoms are permanent never garbage-collected and the atom table is bounded at roughly...
EUVD-2026-34014
Tesla: Authorization header leaks on cross-origin redirect via case-sensitive filtering...
Tesla: Authorization header leaks on cross-origin redirect via case-sensitive filtering
Summary Tesla.Middleware.FollowRedirects is meant to strip the Authorization header when following a cross-origin redirect, but performs the check with a case-sensitive comparison against the lowercase string "authorization". Because Tesla preserves header keys exactly as supplied by the caller,...
EUVD-2026-34015
Tesla has decompression bomb on response body...
Tesla has CRLF injection in request `Content-Type` header via `add_content_type_param`
Summary Tesla.Multipart.addcontenttypeparam/2 appends caller-supplied strings to the multipart Content-Type header with no validation. A param value containing \r\n splits the header line, allowing an attacker who controls any content-type parameter charset, boundary parameter, etc. to inject...
EUVD-2026-34016
Tesla has CRLF injection in request Content-Type header via addcontenttypeparam...
GO-2026-5553 Tesla Fleet Telemetry allows spoofing telemetry for arbitrary vehicles via compromised vehicle credentials in github.com/teslamotors/fleet-telemetry
Tesla Fleet Telemetry allows spoofing telemetry for arbitrary vehicles via compromised vehicle credentials in github.com/teslamotors/fleet-telemetry...
