PT-2025-18322 · Tesla · Tesla Model S

Name of the Vulnerable Software and Affected Versions: Tesla Model S versions affected versions not specified Description: This issue allows local attackers to escape the sandbox on affected Tesla Model S vehicles. To exploit this, an attacker must first obtain the ability to execute low-privileg...

Tesla Model S 安全漏洞

Tesla Model S is an automobile from the American company Tesla Tesla. A security vulnerability exists in Tesla Model S. The vulnerability stems from a process allowing modification of the interface, which could lead to a network sandbox bypass...

MAL-2025-3419 Malicious code in tesla-design-system (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in tesla-design-system (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-3377 Malicious code in angular2-tesla-common-1 (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in angular2-tesla-common-1 (npm)

--- -= Per source details. Do not edit below this line.=-...

Multi-Stage Malware Attack Uses .JSE and PowerShell to Deploy Agent Tesla and XLoader

A new multi-stage attack has been observed delivering malware families like Agent Tesla variants, Remcos RAT, and XLoader. "Attackers increasingly rely on such complex delivery mechanisms to evade detection, bypass traditional sandboxes, and ensure successful payload delivery and execution," Palo...

Malicious code in angular2-tesla-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7134a794a37bf8aae8607bb577adf8e9b11e74f9d080a48a1a4f935fb06a8b7b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3138 Malicious code in angular2-tesla-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7134a794a37bf8aae8607bb577adf8e9b11e74f9d080a48a1a4f935fb06a8b7b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

tesla.info Cross Site Scripting vulnerability OBB-4040997

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-3093

This vulnerability allows physical attackers to execute arbitrary code on affected Tesla vehicles. Authentication is not required to exploit this vulnerability. The specific flaw exists within the iceupdater update mechanism. The issue results from the lack of proper validation of user-supplied...

CVE-2022-27948

Certain Tesla vehicles through 2022-03-26 allow attackers to open the charging port via a 315 MHz RF signal containing a fixed sequence of approximately one hundred symbols. NOTE: the vendor's perspective is that the behavior is as intended...

CVE-2022-42430

This vulnerability allows local attackers to escalate privileges on affected Tesla vehicles. An attacker must first obtain the ability to execute privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of the wowlanconfig data...

CVE-2022-42431

This vulnerability allows local attackers to escalate privileges on affected Tesla vehicles. An attacker must first obtain the ability to execute privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the bcmdhd driver. The issue results from...

CVE-2020-9306

Tesla SolarCity Solar Monitoring Gateway through 5.46.43 has a "Use of Hard-coded Credentials" issue because Digi ConnectPort X2e uses a .pyc file to store the cleartext password for the python user account...

New TorNet Backdoor Exploits TOR Network in Advanced Phishing Attack

Advanced phishing campaign targets Poland and Germany, delivering Agent Tesla, Snake Keylogger and newly identified TorNet backdoor via…...

PureCrypter Deploys Agent Tesla and New TorNet Backdoor in Ongoing Cyberattacks

A financially motivated threat actor has been linked to an ongoing phishing email campaign that has been ongoing since at least July 2024 specifically targeting users in Poland and Germany. The attacks have led to the deployment of various payloads, such as Agent Tesla, Snake Keylogger, and a...

PT-2025-43417

Name of the Vulnerable Software and Affected Versions NVIDIA Display Driver for Linux nvidia-graphics-drivers nvidia-graphics-drivers-legacy-390xx nvidia-graphics-drivers-tesla-418 nvidia-graphics-drivers-tesla-470 nvidia-graphics-drivers-tesla-535 nvidia-open-gpu-kernel-modules Description The...

Tesla’s Cybertruck Goes, Inevitably, to War

A handful of Tesla’s electric pickup trucks are armed and ready for battle in the hands of Chechen forces fighting in Ukraine as part of Russia’s ongoing invasion. Can the EV take the heat?...

Cybercriminals Target Polish Businesses with Agent Tesla and Formbook Malware

Cybersecurity researchers have detailed widespread phishing campaigns targeting small and medium-sized businesses SMBs in Poland during May 2024 that led to the deployment of several malware families like Agent Tesla, Formbook, and Remcos RAT. Some of the other regions targeted by the campaigns...