The vulnerability of the Core component of the Oracle Health Sciences InForm software for clinical testing allows a malicious individual to gain unauthorized access to the device or cause a partial service failure.

The vulnerability of the Core component of the Oracle Health Sciences InForm software for clinical testing exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to the device remotely, or cause a partial service...

The vulnerability of the Core component of the Oracle Health Sciences InForm software for clinical testing allows a malicious individual to cause service interruptions.

The vulnerability of the Core component of the Oracle Health Sciences InForm software for clinical testing is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause service interruptions...

The vulnerability of the Core component of the Oracle Health Sciences InForm software for clinical testing allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Core component of the Oracle Health Sciences InForm software for clinical testing is related to insufficient validation of input data. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected information...

The vulnerability of the Core component of the Oracle Health Sciences InForm software for clinical testing allows a malicious individual to cause service failures or gain access to read, modify, add, or delete data.

The vulnerability of the Core component of the Oracle Health Sciences InForm software for clinical testing is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause service failures or gain access to read, modify, add, or delete data...

New phishing-as-a-service tool “Greatness” already seen in the wild

A previously unreported phishing-as-a-service PaaS offering named "Greatness" has been used in several phishing campaigns since at least mid-2022. Greatness incorporates features seen in some of the most advanced PaaS offerings, such as multi-factor authentication MFA bypass, IP filtering and...

MAL-2023-512 Malicious code in ic_27_health_insurance_pdf_h2g28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2cb2bdd6c456d0912ef78783cffe44a295776db00cc6fad2885922da5ab5be27 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

DHIS 2 代码问题漏洞

DHIS 2 is a software application. A flexible information system for data capture, management, validation, analysis and visualization. A code issue vulnerability exists in DHIS 2 versions prior to 2.37.9.1, prior to 2.38.3.1, and prior to 2.39.1.2, which stems from a Personal Access Token PAT...

Brightline breach hits at least 964,000 people, US records show

A pediatric behavioral health startup called Brightline informed its customers that their protected health data may have been stolen as part of a separate ransomware attack on a Brightline third-party service provider. "Based on the investigation, we identified a limited amount of protected healt...

madisoncountyhealthdept.org Cross Site Scripting vulnerability OBB-3309456

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

sebastopolwomenshealth.com Cross Site Scripting vulnerability OBB-3285712

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

dukesgmhealth.org Cross Site Scripting vulnerability OBB-3283453

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Illumina Universal Copy Service

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low attack complexity Vendor: Illumina Equipment: Universal Copy Service UCS Vulnerabilities: Binding to an Unrestricted IP Address, Execution with Unnecessary Privileges 2. RISK EVALUATION Successful exploitation of these...

Quarterly Report: Incident Response Trends in Q1 2023

Web shell usage spikes in Q1 compared to previous quarters, correlating with higher instances of exploitation of public-facing applications. In a novel increase compared to previous quarters, Cisco Talos Incident Response Talos IR reports that web shells were the most-observed threat in the first...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Removing the human: When should AI be used in emotional crisis? Lock and Code S03E09

In January, a mental health nonprofit admitted that it had used Artificial Intelligence to help talk to people in distress. Prompted first by a user's longing for personal improvement--and the difficulties involved in that journey--the AI tool generated a reply, which, with human intervention,...

CVE-2023-1767

The Snyk Advisor website https://snyk.io/advisor/ was vulnerable to a stored XSS prior to 28th March 2023. A feature of Snyk Advisor is to display the contents of a scanned package's Readme on its package health page. An attacker could create a package in NPM with an associated markdown README fi...

Design/Logic Flaw

The Snyk Advisor website https://snyk.io/advisor/ was vulnerable to a stored XSS prior to 28th March 2023. A feature of Snyk Advisor is to display the contents of a scanned package's Readme on its package health page. An attacker could create a package in NPM with an associated markdown README fi...

CVE-2023-1767

CVE-2023-1767 concerns a stored XSS in the Snyk Advisor web app. The component that displays a scanned package’s README on the package health page could execute HTML/JS when end users view the package, allowing an attacker to craft a package with an XSS-enabled README. Root cause: insufficient sa...

PT-2023-17227 · Snyk · Snyk Advisor

Name of the Vulnerable Software and Affected Versions: Snyk Advisor versions prior to 28th March 2023 Description: The issue concerns a stored XSS vulnerability. A feature of Snyk Advisor is to display the contents of a scanned package's Readme on its package health page. An attacker could create...

CVE-2023-1767: Improper Neutralization of Input During Web Page Generation

The Snyk Advisor website https://snyk.io/advisor/ was vulnerable to a stored XSS prior to 28th March 2023. A feature of Snyk Advisor is to display the contents of a scanned package's Readme on its package health page. An attacker could create a package in NPM with an associated markdown README fi...