CVE-2022-29539

RESI Gemini-Net 4.2 is affected by an OS command injection in the resi-calltrace component caused by insufficient input validation. An unauthenticated attacker can bypass the software’s input parsing and inject arbitrary system commands with the privileges of the application user, by manipulating...

EUVD-2022-33875

resi-calltrace in RESI Gemini-Net 4.2 is affected by OS Command Injection. It does not properly check the parameters sent as input before they are processed on the server. Due to the lack of validation of user input, an unauthenticated attacker can bypass the syntax intended by the software e.g.,...

PT-2022-19689 · Unknown · Resi Gemini-Net

Name of the Vulnerable Software and Affected Versions: RESI Gemini-Net version 4.2 Description: The issue is related to OS Command Injection, where the software does not properly check the parameters sent as input before they are processed on the server. Due to the lack of validation of user inpu...

PT-2022-19688 · Resi · Resi Gemini-Net Web

Name of the Vulnerable Software and Affected Versions: RESI Gemini-Net Web version 4.2 Description: The issue is related to Improper Access Control in authorization logic, allowing an unauthenticated user to access some critical resources. Recommendations: For RESI Gemini-Net Web version 4.2,...

RESI Gemini-Net 操作系统命令注入漏洞

RESI Gemini-Net is a technology from RESI Italy for active and passive monitoring of communication networks and services. An operating system command injection vulnerability exists in RESI Gemini-Net version 4.2 that stems from a lack of validation of user input. An attacker could exploit the...

RESI Gemini-Net 安全漏洞

RESI Gemini-Net is a technology from RESI Italy for active and passive monitoring of communication networks and services. A security vulnerability exists in RESI Gemini-Net Web version 4.2 that originates from improper access control in the authorization logic. An attacker could exploit the...

control.gemini.hosting Cross Site Scripting vulnerability OBB-2444844

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2021-27456

Philips Gemini PET/CT family software stores sensitive information in a removable media device that does not have built-in access control...

Improper access control

Philips Gemini PET/CT family software stores sensitive information in a removable media device that does not have built-in access control...

CVE-2021-27456 Philips Gemini PET/CT Storage of Sensitive Data in a Mechanism Without Access Control

Philips Gemini PET/CT family software stores sensitive information in a removable media device that does not have built-in access control...

CVE-2021-27456 Philips Gemini PET/CT Storage of Sensitive Data in a Mechanism Without Access Control

Philips Gemini PET/CT family software stores sensitive information in a removable media device that does not have built-in access control...

CVE-2021-27456

CVE-2021-27456 affects Philips Gemini PET/CT Family software. The vulnerability involves storage of sensitive data on a removable media device that lacks built-in access control, enabling potential exposure of patient information if media is accessed by unauthorized parties. Reported CVSS v3 base...

gemini-ltd.com Cross Site Scripting vulnerability OBB-2370025

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2022-15164 · Intel +1 · Intel Processors +1

Name of the Vulnerable Software and Affected Versions: Intel processors based on Sunny Cove microarchitecture, including Ice Lake Xeon-SP, Ice Lake D, Gemini Lake, Ice Lake U, Y, and Rocket Lake Description: An elevation-of-privilege issue allows attackers to affect the system. The problem, known...

FIN7 Lures Unwitting Security Pros to Carry Out Ransomware Attacks

The financially motivated cybercrime gang behind the Carbanak backdoor malware, FIN7, has hit upon a genius idea for maximizing profit from ransomware: Hire real pen-testers to do some of their dirty work instead of striking partnerships with other criminals. According to a report from Gemini...

Philips Gemini PET/CT Family 访问控制错误漏洞

The Philips Philips Gemini PET/CT Family is a medical device from the Dutch company Philips. It is used to achieve more effective treatment processes, greater workflow efficiency and higher return on investment. The Philips Gemini PET/CT Family suffers from an Access Control Error vulnerability...

Philips Gemini PET/CT Family

1. EXECUTIVE SUMMARY CVSS v3 2.4 ATTENTION: Low skill level to exploit Vendor: Philips Equipment: Gemini PET/CT Family Vulnerability: Storage of Sensitive Data in a Mechanism Without Access Control 2. RISK EVALUATION Successful exploitation of this vulnerability involving removable media could...

Two Russians Charged in $17M Cryptocurrency Phishing Spree

U.S. authorities today announced criminal charges and financial sanctions against two Russian men accused of stealing nearly $17 million worth of virtual currencies in a series of phishing attacks throughout 2017 and 2018 that spoofed websites for some of the most popular cryptocurrency exchanges...

Wawa Breach: Hackers Put 30 Million Stolen Payment Card Details for Sale

Remember the recent payment card breach at Wawa convenience stores? If you're among those millions of customers who shopped at any of 850 Wawa stores last year but haven't yet hotlisted your cards, it's high time to take immediate action. That's because hackers have finally put up payment card...

Wawa Breach May Have Affected More Than 30 Million Customers

A recent dump of payment card information being sold on a popular online fraud marketplace suggests that more than 30 million payment cards may have been affected by a malware attack and data breach at Wawa convenience stores and gas stations that was first revealed in December. The Joker’s Stash...