Eaton Works

Tapping into a telecommunications company’s office cameras

API flaw enabled livestreaming of a telecommunications company’s office cameras.

Eaton Nov 14, 2023
Compromising Honda’s power equipment / marine / lawn & garden dealer eCommerce platform through a vulnerable password reset API

A vulnerable password reset API made it possible to take over any account and gain admin-level access to the platform. In addition, broken/missing access controls made it possible to access all data on the platform.

Eaton Jun 6, 2023
Insecure Toyota CRM exposed Mexican customer information

Breaking into a Toyota CRM and exploiting it to view customer information.

Eaton Mar 6, 2023
Hacking into Toyota’s global supplier management network

Inside an exploit that allowed logging in to Toyota’s GSPIMS application as any user, including system admins.

Eaton Feb 6, 2023
Syndication feed now available

An Atom feed is now available for the site.

Eaton Jan 28, 2023