Garfield's Pet Hospital - Certificates or keys found, Dynamic Code Loading, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Garfield's Pet Hospital published at the 'play' market has multiple vulnerabilities...

Surge in Spam Campaign Delivering Locky Ransomware Downloaders

FireEye Labs is detecting a significant spike in Locky ransomware downloaders due to a pair of concurrent email spam campaigns impacting users in over 50 countries. Some of the top affected countries are depicted in Figure 1. Figure 1. Affected countries As seen in Figure 2, the steep spike start...

Surge in Spam Campaign Delivering Locky Ransomware Downloaders

FireEye Labs is detecting a significant spike in Locky ransomware downloaders due to a pair of concurrent email spam campaigns impacting users in over 50 countries. Some of the top affected countries are depicted in Figure 1. Figure 1. Affected countries As seen in Figure 2, the steep spike start...

Locky Ransomware Causes 'Internal State of Emergency' at Kentucky Hospital

For a strain of ransomware that’s only been in the wild for a little more than a month, Locky has sure been able to make a name for itself. The malware gained notoriety last month when it confounded administrators at the Hollywood Presbyterian Medical Center in Los Angeles and apparently took...

Hospital Security Fail: Report Outlines Dangerous Shortcomings

Hospitals are risking patient lives by failing to protect critical computer systems that can be manipulated by attackers. In a scathing report that looks at the current state of hospital security, researchers say everything from bedside patient monitoring systems, automated drug dispensing machin...

Hollywood Hospital Pays $17K Ransom to Decrypt Files

After being knocked offline for nearly two weeks, officials at a California hospital that was hit with ransomware elected on Wednesday to pay attackers. The Hollywood Presbyterian Medical Center HPMC shut down computers on its network on Feb. 5, after attackers allegedly asked for 9,000 Bitcoin, ...

Sergey Lozhkin on How He Hacked His Hospital

Threatpost editor Mike Mimoso talks with Sergey Lozhkin, senior researcher at Kaspersky Lab’s Global Research and Analysis Team about medical device security and how he was able to access some devices at his local hospital via WiFi...

Hollywood Hospital Pays $17,000 Ransom to Hacker for Unlocking Medical Records

Ransomware has seriously turned on to a noxious game of Hackers to get paid effortlessly. Once again the heat was felt by the Los Angeles-based Presbyterian Medical Center when a group of hackers had sealed all its sensitive files and demanded $17,000 USD to regain the access to those compromised...

Recapping SAS 2016: IoT Hacks, Metel, Poseidon, and More

Mike Mimoso and Chris Brook recap last week’s Security Analyst Summit — including lots of IoT and critical infrastructure talk, how a researcher hacked his hospital, news on APTs like Metel and Poseidon, and more. Download: ReflectingonSAS2016.mp3 Music by Chris Gonsalves...

Medical Device, Health Care Security Continues to Ail

TENERFIE, Spain – Sergey Lozhkin knows malware. Medical devices? Admittedly, not so much. That, however, was not an impediment to the Kaspersky Lab researcher in cracking the digital walls of a Moscow hospital and finding a shocking array of open doors on the network and weaknesses in medical...

Vulnerability-Riddled Drug Pumps Open to Takeover

One medical device company’s line of drug pumps is so fraught with vulnerabilities that the researcher that discovered the flaws claims the pump is the least secure IP-enabled device he’s ever come across. Certain versions of Hospira’s Lifecare PCA3 Drug Infusion pumps are susceptible to multiple...

华天动力储存XSS（11处打包，非self-xss）

简要描述： 缺个移动硬盘存片子 详细说明： 上次提交说是self-xss，为了证明不是self-xss，这次打一下管理cookie吧 demo演示，涉及大量政府，医院，房产，电视台等网站：http://www.oa8000.com/solution.htm 首先还是来到官网，看到demo演示地址：http://demo.oa8000.com 然后先用官方提供的普通用户登录 存在XSS的地方在：客户管理--我的客户--新建...

某OA办公系统储存型XSS第二发(demo演示)

简要描述： 涉及大量政府，医院，房产，电视台等网站 详细说明： 这个和 WooYun: 华天动力oa系统多处xss漏洞打包--专业盲打管理员2 这个洞很相似，但是绝对不一样哈，只是相似。。 问题属于过滤不严格，还是在在文档中心，随便点个进去，新建文件夹，名字插入xss代码，构造之前Mosuan大牛插入的代码试试先：alert/3/,保存后发现是没有弹窗的 应该是被过滤了，不怕，然后我们继续构造"/alert/3/再保存看看 可以看到成功弹窗 但是这个时候我们登陆的是普通用户，然后登陆管理员账号看看吧，成功弹窗 img...

CVE-2013-3061

The CVE-2013-3061 vulnerability affects SAP’s Healthcare Industry Solution: IS-H Hospital ISHMED-PATRED_TRANSACT_RFCCALL in both the IS-H component and the SAP ERP central component (ECC 6). The issue is a privilege escalation that lets remote authenticated users bypass transaction restrictions v...

PT-2013-4131 · Sap · Sap Healthcare Industry Solution +1

Name of the Vulnerable Software and Affected Versions: SAP Healthcare Industry Solution affected versions not specified SAP ERP central component aka ECC 6 affected versions not specified Description: The issue allows remote authenticated users to bypass intended transaction restrictions via...

The hospital was built Station system arbitrary file upload vulnerability-vulnerability warning-the black bar safety net

| Vulnerability file: upfile. aspx I first posted 9 8 line to 1 3 0 lines of code out ,look a bit funny! Google for: inurl:cms/Column. aspx? that inurl:cms/Column. aspx? LMID= too much,your own to find more keywords! | 0 1 | ---|--- 0 2 | function chkform ---|--- 0 3 | ---|--- 0 4 | ---|--- 0 5 |...

Stanford Hospital Suffers Second Data Breach in a Year

Less than a year after its last data breach, Stanford University’s Hospital and Clinics and the School of Medicine has begun to notify approximately 2,500 patients of a second breach after the theft of a laptop from a physician’s locked office. According to reports late last week, the computer wa...

Software Update Site For Hospital Respirators Found Riddled With Malware

UPDATE: A Web site used to distribute software updates for a wide range medical equipment, including ventilators has been blocked by Google after it was found to be riddled with malware and serving up attacks. The U.S. Department of Homeland Security is looking into the compromise, Threatpost has...

Facebook Game - Wooga Happy Hospital Detected (deprecated)

Binary data 6378.prm...

20000 patient records Breach at Stanford Hospital

20000 patient records Breach at Stanford Hospital Last month Stanford University's hospital discovered a massive privacy breach when 20,000 emergency room records appeared online. The records included names, diagnosis codes, account numbers, dates of admission and discharge, and billing charges...