MAL-2025-34246 Malicious code in sutter-health-widgets (npm)

The package sutter-health-widgets was found to contain malicious code...

MAL-2025-34243 Malicious code in sutter-health-data-services (npm)

The package sutter-health-data-services was found to contain malicious code...

MAL-2025-34242 Malicious code in sutter-health-analytics (npm)

The package sutter-health-analytics was found to contain malicious code...

OPPO HEALTH APP 安全漏洞

OPPO HEALTH APP is a health mobile app from China's OPPO. A security vulnerability exists in OPPO HEALTH APP, which originates from the introduction of malicious JS code via loading an arbitrary external URL via the WebView component, which may steal user tokens...

CVE-2025-50594

An issue was discovered in /Code/Websites/DanpheEMR/Controllers/Settings/SecuritySettingsController.cs in Danphe Health Hospital Management System EMR 3.2 allowing attackers to reset any account password...

CVE-2025-50594

An issue was discovered in /Code/Websites/DanpheEMR/Controllers/Settings/SecuritySettingsController.cs in Danphe Health Hospital Management System EMR 3.2 allowing attackers to reset any account password...

PT-2025-33030 · Unknown · Danphe Health Hospital Management System Emr

Name of the Vulnerable Software and Affected Versions: Danphe Health Hospital Management System EMR version 3.2 Description: An issue exists in /Code/Websites/DanpheEMR/Controllers/Settings/SecuritySettingsController.cs that allows attackers to reset any account password. Recommendations: At the...

CVE-2025-50594

The Danphe Health Hospital Management System EMR version 3.2 is vulnerable to an issue in the /Code/Websites/DanpheEMR/Controllers/Settings/SecuritySettingsController.cs component. This vulnerability stems from a weak password recovery mechanism where the system fails to properly verify permissio...

CVE-2025-50594

An issue was discovered in /Code/Websites/DanpheEMR/Controllers/Settings/SecuritySettingsController.cs in Danphe Health Hospital Management System EMR 3.2 allowing attackers to reset any account password...

Danphe Health Hospital Management System EMR 安全漏洞

Danphe Health Hospital Management System EMR is a hospital management system from Danphe Health, Nepal. A security vulnerability exists in Danphe Health Hospital Management System EMR version 3.2, which stems from /Settings/SecuritySettingsController.cs not properly verifying permissions, which...

CVE-2025-50594: Weak Password Recovery Mechanism for Forgotten Password

An issue was discovered in /Code/Websites/DanpheEMR/Controllers/Settings/SecuritySettingsController.cs in Danphe Health Hospital Management System EMR 3.2 allowing attackers to reset any account password...

Microsoft Releases Guidance on High-Severity Vulnerability (CVE-2025-53786) in Hybrid Exchange Deployments

Update 08/12/2025: CISA has updated this alert to provide clarification on identifying Exchange Servers on an organization’s networks and provided further guidance on running the Microsoft Exchange Health Checker. Update 08/07/2025: CISA issued Emergency Directive ED 25-02: Mitigate Microsoft...

Description of the security update for Microsoft Exchange Server Subscription Edition RTM: August 12, 2025 (KB5063224)

None None...

Description of the security update for Microsoft Exchange Server 2019: August 12, 2025 (KB5063221)

None None...

Description of the security update for Microsoft Exchange Server 2016: August 12, 2025 (KB5063223)

None None...

Description of the security update for Microsoft Exchange Server 2019: August 12, 2025 (KB5063222)

None None...

Linux Distros Unpatched Vulnerability : CVE-2024-21212

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Health Monitor. Supported versions that are affected are 8.0.39 and prior and 8.4.0...

The vulnerability of the application software of the Central Medical Information System of the State Health Information System (GIS SZ), related to the unencrypted storage of critical information, allows a perpetrator to disclose identification data.

The vulnerability of the application software of the Central Medical Information System of the State Health Information System GIS SZ is related to the unencrypted storage of critical information. Exploiting this vulnerability could allow a malicious actor to disclose identification data...

Linux Distros Unpatched Vulnerability : CVE-2022-49031

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iio: health: afe4403: Fix oob read in afe4403readraw KASAN report out-of-bounds read as...

CVE-2025-21019

Improper authorization in Samsung Health prior to version 6.30.1.003 allows local attackers to access data in Samsung Health. User interaction is required for triggering this vulnerability...