3089 matches found
SQL Injection Vulnerability in Health Collection Reporting System (CNVD-2020-30198)
The health collection and reporting system is developed by PHP+mysql and the code is completely open source for secondary development. Health collection and reporting system has a SQL injection vulnerability, attackers can exploit the vulnerability to obtain sensitive database information...
Leaked NHS Docs Reveal Roadmap, Concerns Around Contact-Tracing App
A COVID-19 contact-tracing app to be rolled out by the UK’s National Health Service NHS has been thrust into the spotlight thanks to sensitive documents being leaked via a public Google Drive link. Contact tracing has emerged as a top idea for dealing with the coronavirus pandemic and is consider...
health-essence.com.au Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1160109 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
SQL Injection Vulnerability in the Health Collection and Reporting System of Shanxi Xianqi Technology Co. Ltd (CNVD-2020-30209)
Ltd. is a high-tech enterprise specializing in the research, development and sales of wireless smart home system. Shanxi Xianqi Technology Co., Ltd. health collection reporting system SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information database...
SQL Injection Vulnerability in Health Collection and Reporting System of Shanxi Xianqi Technology Co.
Ltd. is a high-tech enterprise specializing in the research, development and sales of wireless smart home system. Shanxi Xianqi Technology Co., Ltd. health collection reporting system SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information database...
SQL Injection Vulnerability in the Health Collection and Reporting System of Shanxi Xianqi Technology Co. Ltd (CNVD-2020-30210)
Ltd. is a high-tech enterprise specializing in the research, development and sales of wireless smart home system. Shanxi Xianqi Technology Co., Ltd. health collection reporting system SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information database...
File Upload Vulnerability in Health Collection Reporting System
Health Collection and Reporting System is a general-purpose website system designed in PHP+MySQL architecture. A command execution vulnerability exists in the Health Collection and Reporting System. An attacker can exploit the vulnerability to gain control of the server...
Black Hat USA, DEF CON 28 Go Virtual
Cybersecurity conferences Black Hat USA and DEF CON 28 will not be held in person this year due to the coronavirus pandemic. The conferences will both instead be transformed into completely virtualized events. Both back-to-back annual conferences were set to take place in Las Vegas this year; Bla...
pdtableau.cardinalhealth.net Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1149582 Security Researcher OakdaleHutch Helped patch 26 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting pdtableau.cardinalhealth.net website and its users...
A Dozen Nation-Backed APTs Tap COVID-19 to Cover Spy Attacks
Cybercriminals have seized on the novel coronavirus as a theme in their attacks, and it turns out that the most sophisticated players on that scene are no exception. According to Google’s Threat Analysis Group TAG, more than a dozen nation-state-backed APTs are using the COVID-19 pandemic as a...
Staying Healthy, Focused, and Above All Grateful During the COVID-19 Crisis
By now, we are all subject in one way or another to the far-reaching impact of COVID-19. As we see on the news each day, the numbers of those infected by this deadly coronavirus continue to grow in terrifying increments. And even for those of us without family members or friends directly impacted...
Important: Red Hat Security Advisory: ipmitool security update
An update for ipmitool is now available for Red Hat Enterprise Linux 7.5 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...
Mass surveillance alone will not save us from coronavirus
As the pattern-shattering truth of our new lives drains heavy—as coronavirus rends routines, raids our wellbeing, and whiplashes us between anxiety and fear—we should not look to mass digital surveillance to bring us back to normal. Already, governments have cast vast digital nets. South Koreans...
Amid COVID-19, Global Orgs See a 148% Spike in Ransomware Attacks; Finance Industry Heavily Targeted
Cyber criminals often exploit fear and uncertainty during major world events by launching cyberattacks. These attacks are often performed with social engineering campaigns leveraging malicious emails that lure victims to install malware that steals financial data and other valuable personal...
emg-health.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1143513 Security Researcher geeknik Helped patch 8696 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting emg-health.com website and...
Hackers Targeting Critical Healthcare Facilities With Ransomware During Coronavirus Pandemic
As hospitals around the world are struggling to respond to the coronavirus crisis, cybercriminals—with no conscience and empathy—are continuously targeting healthcare organizations, research facilities, and other governmental organizations with ransomware and malicious information stealers. The n...
April 14, 2020—KB4549949 (OS Build 17763.1158)
None None...
Contact Tracing COVID-19 Infections via Smartphone Apps
Google and Apple have announced a joint project to create a privacy-preserving COVID-19 contact tracing app. Details, such as we have them, are here. It's similar to the app being developed at MIT, and similar to others being described and developed elsewhere. It's nice seeing the privacy...
Apple, Google Team on Coronavirus Tracking – Sparking Privacy Fears
Apple and Google are teaming up to launch technology that traces the spread of the coronavirus, via apps for iOS and Android users. Despite the companies’ insistence that privacy will be “of utmost importance,” some in the security space remain wary of data privacy concerns around the newly...
Description of Update Rollup 4 for System Center 2012 Operations Manager Service Pack 1
Description of Update Rollup 4 for System Center 2012 Operations Manager Service Pack 1 Symptoms Issues that Update Rollup 4 fixes are as follows. Operations Manager KB2880799 Issue 1 Windows PowerShell scripts or modules cannot be executed in an AllSigned environment. Symptom You receive the...