american-hospital.org XSS vulnerability

Vulnerable URL: https://www.american-hospital.org/fr/nos-medecins-professionnels-de-sante/trouver-un-medecin-ou-un-professionnel-de-sante.html Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

Medical Devices Should Withstand Rigor, Expert Says

CAMBRIDGE, Ma.—When it comes to managing medical device security risk, hospital administrators should focus on weathering the storm and not necessarily prevention, Dr. Kevin Fu, a noted medical device security expert, encouraged this week. “How do you fail gracefully when things go wrong? Will yo...

companionanimalhospitalnh.vetstreet.com XSS vulnerability

Vulnerable URL: http://companionanimalhospitalnh.vetstreet.com/careguide.html?filter=xss%3Cimg%20src=x%20onerror=confirm%22OPENBUGBOUNTY%22%3E=xss%3Cimg%20src=x%20onerror=confirm%22OPENBUGBOUNTY%22%3E& Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017...

brakebillvethospital.vetstreet.com XSS vulnerability

Vulnerable URL: http://brakebillvethospital.vetstreet.com/careguide.html?submit=xss%3Cimg%20src=x%20onerror=confirm%22OPENBUGBOUNTY%22%3E=xss%3Cimg%20src=x%20onerror=confirm%22OPENBUGBOUNTY%22%3E& Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability...

washingtoncrossingah.vetstreet.com XSS vulnerability

Open Bug Bounty ID: OBB-180048 Description| Value ---|--- Affected Website:| washingtoncrossingah.vetstreet.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS...

IoT Medical Devices: A Prescription for Disaster

If you’re sick and sitting in a drab hospital room hooked-up to a dialysis pump, the last thing you want to worry about is hackers. But according to IT healthcare security experts, there is a chance that life-saving dialysis machine is infected with malware, could even be processing fraudulent...

Mass General Hospital Confirms Third-Party Breach

A breach at Massachusetts General Hospital has potentially compromised the information of roughly 4,300 dental patients, the hospital warned Wednesday. MGH was quick to point out that the data leaked wasn’t stored or maintained on its systems but those of a third-party vendor that assists the...

Conficker Used in New Wave of Hospital IoT Device Attacks

Internet-connected medical devices such as MRI machines, CT scanners and dialysis pumps are increasingly being targeted by hackers seeking to steal patient medical records from hospitals. Attackers consider the devices soft digital targets, seldom guarded with same security as client PCs and...

Medical Study Blasts Hospitals' Security Practices

A scathing rebuke of medical professionals’ attitudes toward information security reveals nurses and doctors fumble over protocols often putting patients at risk. The revealing study, “Workarounds to Computer Access in Healthcare Organizations PDF,” offers a fascinating look behind the privacy...

careers.mountsinai.org XSS vulnerability

Vulnerable URL: http://careers.mountsinai.org/find-your-place/?loc=coords=="-alert'XSSPOSED'-"=true Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 09:45 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown...

SQL Injection Vulnerability in Submission System of Nanjing Jenohan Software Technology Co.

Nanjing Jenohan Software Technology Co., Ltd. is for the development of hospital full cost accounting decision support software system, hospital performance management information system and hospital customer management information system. A SQL injection vulnerability exists in the contribution...

Ransomware attacks on Hospitals put Patients at Risk

Just last week, the Federal Bureau of Investigation FBI issued an urgent "Flash" message to the businesses and organisations about the threat of Samsam Ransomware, but the ransomware has already wreaked havoc on some critical infrastructure. MedStar, a non-profit group that runs 10 hospitals in t...

PetWorld: Animal Hospital - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application PetWorld: Animal Hospital published at the 'play' market has multiple vulnerabilities...

Sweet Baby Girl - Hospital - Customized SSL, Dangerous filesystem permissions, Hardcoded secrets vulnerabilities

HackApp vulnerability scanner discovered that application Sweet Baby Girl - Hospital published at the 'play' market has multiple vulnerabilities...

My Hospital - Doctor Panda - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application My Hospital - Doctor Panda published at the 'play' market has multiple vulnerabilities...

Ear Doctor - Libii Hospital - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Ear Doctor - Libii Hospital published at the 'play' market has multiple vulnerabilities...

PLAYMOBIL Children's Hospital - Base64 encoded String, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application PLAYMOBIL Children's Hospital published at the 'play' market has multiple vulnerabilities...

Candy's Hospital - Corrupted files, Dynamic Code Loading, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Candy's Hospital published at the 'play' market has multiple vulnerabilities...

Pet Vet Doctor Animal Hospital - Dangerous filesystem permissions, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Pet Vet Doctor Animal Hospital published at the 'play' market has multiple vulnerabilities...

Horror Hospital 3D - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Horror Hospital 3D published at the 'play' market has multiple vulnerabilities...