CVE-2025-27013

CVE-2025-27013 affects MediCenter - Health Medical Clinic WordPress Theme (MediCenter). Described as a Missing Authorization vulnerability, with CVSS v3.1 base score 5.3 (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N). Wordfence documentation confirms the affected software and labels the issue as Missing A...

CVE-2025-24836

CVE-2025-24836 affects Qardio Heart Health iOS/Android apps and QardioARM A100 hardware. A specially crafted Python script can send continuous startMeasurement commands over an unencrypted Bluetooth connection, preventing the device from linking with a clinician’s app and flooding it with request...

CVE-2025-24836 Qardio Heart Health IOS and Android Application and QardioARM A100 Uncaught Exception

With a specially crafted Python script, an attacker could send continuous startMeasurement commands over an unencrypted Bluetooth connection to the affected device. This would prevent the device from connecting to a clinician's app to take patient readings and ostensibly flood it with requests,...

CVE-2025-24836 Qardio Heart Health IOS and Android Application and QardioARM A100 Uncaught Exception

With a specially crafted Python script, an attacker could send continuous startMeasurement commands over an unencrypted Bluetooth connection to the affected device. This would prevent the device from connecting to a clinician's app to take patient readings and ostensibly flood it with requests,...

CVE-2025-20615

CVE-2025-20615 affects the Qardio Arm iOS app. The vulnerability arises from exposing usernames and passwords in a plist file, enabling an attacker to log in to production-level development accounts and trigger an engineering backdoor that accepts hex-based commands over a UI-based terminal. Impa...

CISA Releases Twenty Industrial Control Systems Advisories

CISA released twenty Industrial Control Systems ICS advisories on February 13, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-044-01 Siemens SIMATIC S7-1200 CPU Family ICSA-25-044-02 Siemens SIMATIC...

Qardio Heart Health 安全漏洞

Qardio Heart Health is a heart monitoring management software from Qardio, Inc. in the United States. A security vulnerability exists in Qardio Heart Health that stems from the use of a specially crafted Python script that sends successive startMeasurement commands to an affected device over an...

Qardio Heart Health和ARM A100 安全漏洞

Qardio Heart Health and Qardio ARM A100 are both products of Qardio Corporation, U.S.A. Qardio Heart Health is a heart monitoring management software.Qardio ARM A100 is an automatic blood pressure monitor. A security vulnerability exists in Qardio Heart Health and ARM A100. An attacker exploiting...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Always drain health during the shutdown callback. There is no point in performing recovery operations during device shutdown. If health-related tasks are initiated, one must wait until they are completed to avoid race...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Always stop the health timer during driver removal Currently, if teardownhca fails to execute during driver removal, mlx5 does not stop the health timer. As a result, mlx5 continues with the driver teardown. This may le...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: netdevsim: prevented bad user input in nsimdevhealthbreakwrite. If a zero count or a large number is provided, the kernel may crash...

A suicide reveals the lonely side of AI chatbots, with Courtney Brown (Lock and Code S06E03)

Today on the Lock and Code podcast … In February 2024, a 14-year-old boy from Orlando, Florida, committed suicide after confessing his love to the one figure who absorbed nearly all of his time—an AI chatbot. For months, Sewell Seltzer III had grown attached to an AI chatbot modeled after the...

CVE-2025-0626

The "monitor" binary in the firmware of the affected product attempts to mount to a hard-coded, routable IP address, bypassing existing device network settings to do so. The function also enables the network interface of the device if it is disabled. The function is triggered by attempting to...

CVE-2019-17390

An issue was discovered in the Outlook add-in in Pronestor Planner before 8.1.77. There is local privilege escalation in the Health Monitor service because PronestorHealthMonitor.exe access control is mishandled, aka PNB-2359...

CVE-2024-12248

Contec Health CMS8000 Patient Monitor is vulnerable to an out-of-bounds write, which could allow an attacker to send specially formatted UDP requests in order to write arbitrary data. This could result in remote code execution...

CVE-2024-5862

Improper Restriction of Excessive Authentication Attempts vulnerability in Mia Technology Inc. Mia-Med Health Aplication allows Interface Manipulation. This issue affects Mia-Med Health Aplication: before 1.0.14...

CVE-2024-10967

A vulnerability was found in code-projects E-Health Care System 1.0. It has been classified as critical. Affected is an unknown function of the file /Doctor/deleteuserappointmentrequest.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely...

CVE-2024-10741

A vulnerability has been found in code-projects E-Health Care System 1.0 and classified as critical. This vulnerability affects unknown code of the file /Users/registration.php. The manipulation of the argument fname leads to sql injection. The attack can be initiated remotely. The exploit has be...

CVE-2024-10476

Default credentials are used in the above listed BD Diagnostic Solutions products. If exploited, threat actors may be able to access, modify or delete data, including sensitive information such as protected health information PHI and personally identifiable information PII. Exploitation of this...

CVE-2024-10988

A vulnerability was found in code-projects E-Health Care System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Doctor/doctorlogin.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The...