optima-tour.ru Improper Access Control vulnerability OBB-2266957

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

optima-conseils.eu XSS vulnerability

Vulnerable URL: http://www.optima-conseils.eu/recherche/search.phtml?SearchInput=%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E=Search Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 18:18 GMT Vulnerability type:| XSS Vulnerability...

GE Healthcare Optima MR360 Built-in Account Vulnerability

The GE Healthcare Optima MR360 is a magnetic resonance imaging MRI system for the healthcare industry. The GE Healthcare Optima MR360 fails to properly verify login authentication, allowing remote attackers to exploit the vulnerability by submitting a special request to gain access...

GE Healthcare Optima MR360 HIPAA Configuration Interface Built-in Account Vulnerability

GE Healthcare CADStream Server is a suite of applications used in the healthcare industry and provides automated analysis and reporting for magnetic resonance imaging. Built-in accounts exist for the GE Healthcare Optima MR360 HIPAA configuration interface, with the root account using the...

GE Healthcare Optima Built-in Account Vulnerability

The GE Healthcare Optima CT680, CT540, CT640, and CT520 are General Electric Company's computed tomography products used in the medical industry. The GE Healthcare Optima CT680, CT540, CT640, and CT520 use a root account with the password 'bigguy', allowing remote attackers to take control of the...

optima-packaging-group.de XSS vulnerability

Vulnerable URL: http://optima-packaging-group.de/opg/pharma/de/misc/search.php5?searchvalue=asd%22%3E%3Csvg%20onload%3Dalert%28%2fXSSPOSED%2f%29%3E Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 21:56 GMT Vulnerability type:| XSS Vulnerability...

CVE-2010-5308

GE Healthcare Optima MR360 does not require authentication for the HIPAA emergency login procedure, which allows physically proximate users to gain access via an arbitrary username in the Emergency Login screen. NOTE: this might not qualify for inclusion in CVE if unauthenticated emergency access...

CVE-2010-5307

The HIPAA configuration interface in GE Healthcare Optima MR360 has a password of 1 operator for the root account, 2 adw2.0 for the admin account, and 3 adw2.0 for the sdc account, which has unspecified impact and attack vectors. NOTE: it is not clear whether these passwords are default, hardcode...

Hardcoded credentials

The HIPAA configuration interface in GE Healthcare Optima MR360 has a password of 1 operator for the root account, 2 adw2.0 for the admin account, and 3 adw2.0 for the sdc account, which has unspecified impact and attack vectors. NOTE: it is not clear whether these passwords are default, hardcode...

CVE-2010-5307

GE Healthcare Optima MR360 HIPAA configuration interface is affected by CVE-2010-5307, tied to built-in/default credentials (root: operator, admin: adw2.0, sdc: adw2.0). Public documentation confirms remote authentication bypass risk via these credentials and notes uncertainty on whether password...

CVE-2010-5308

GE Healthcare Optima MR360 does not require authentication for the HIPAA emergency login procedure, which allows physically proximate users to gain access via an arbitrary username in the Emergency Login screen. NOTE: this might not qualify for inclusion in CVE if unauthenticated emergency access...

CVE-2010-5307

The HIPAA configuration interface in GE Healthcare Optima MR360 has a password of 1 operator for the root account, 2 adw2.0 for the admin account, and 3 adw2.0 for the sdc account, which has unspecified impact and attack vectors. NOTE: it is not clear whether these passwords are default, hardcode...

optima apiftp server <= 1.5.2.13 - Multiple Vulnerabilities

No description provided by source. Luigi Auriemma Application: Optima APIFTP Server http://www.optimalog.com/home.html Versions: = 1.5.2.13 Platforms: Windows Bugs: A NULL pointer B endless loop Exploitation: remote Date: 13 Nov 2011 Author: Luigi Auriemma e-mail: [email protected] web:...

GTX CMS 2013 Optima - SQL Injection

GTX CMS 2013 Optima - SQL Injection Document Title: =============== GTX CMS 2013 Optima - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1124 Release Date: ============= 2013-10-29 Vulnerability Laboratory ID VL-ID:...

Optima PLC APIFTP Server Denial of Service Vulnerabilities

Optima PLC APIFTP Server is prone to multiple denial of service vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-5048

APIFTP Server in Optimalog Optima PLC 1.5.2 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted packet...

CVE-2012-5049

APIFTP Server in Optimalog Optima PLC 1.5.2 and earlier allows remote attackers to cause a denial of service infinite loop via a malformed packet...

Null pointer dereference

APIFTP Server in Optimalog Optima PLC 1.5.2 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted packet...

CVE-2012-5049

CVE-2012-5049 concerns the Optima PLC APIFTP Server. Public docs describe a denial-of-service vulnerability: a malformed packet can trigger a loop that consumes CPU, potentially crashing the server. The issue is tied to the APIFTP component in Optimalog Optima PLC 1.5.2 and earlier. Related OpenV...

CVE-2012-5048

CVE-2012-5048 affects Optima PLC APIFTP Server in Optima PLC 1.5.2 and earlier, enabling remote denial of service via a crafted packet that triggers a NULL pointer dereference and daemon crash. The OpenVAS entry and ICS-CERT advisory corroborate a DoS impact, with CVSS v2 base score 7.8. Mitigati...