Sante PACS Server HTTP Content-Length Header Handling NULL Pointer Dereference Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Sante PACS Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HTTP Content-Length header. The issue results from the...

EUVD-2025-28539

Malicious code in bioql PyPI...

CVE-2025-54759

CVE-2025-54759 affects Santesoft Sante PACS Server. The vulnerability is a stored cross-site scripting (XSS) in the Sante PACS Server Web Portal, allowing remote attackers to inject malicious HTML that can redirect victims to malicious pages and steal cookies. Connected sources corroborate the is...

CVE-2025-54862

The CVE-2025-54862 entries describe a stored cross-site scripting vulnerability in Sante PACS Server Web Portal. Affected component: Santesoft Sante PACS Server Web Portal; underlying issue is a stored XSS flaw that could inject malicious HTML to redirect users to a malicious page and steal cooki...

CVE-2025-54156 Santesoft Sante PACS Server Cleartext Transmission of Sensitive Information

The Sante PACS Server Web Portal sends credential information without encryption...

PT-2025-33701 · Unknown · Sante Pacs Server Web Portal Dcm

Name of the Vulnerable Software and Affected Versions: Sante PACS Server Web Portal affected versions not specified Description: The Sante PACS Server Web Portal transmits credential information without encryption. Recommendations: At the moment, there is no information about a newer version that...

PT-2025-33702 · Unknown · Sante Pacs Server

Name of the Vulnerable Software and Affected Versions: Sante PACS Server affected versions not specified Description: Sante PACS Server is susceptible to stored cross-site scripting. An attacker can inject malicious HTML code, potentially redirecting a user to a malicious webpage and stealing the...

Santesoft Sante PACS Server 缓冲区错误漏洞

Santesoft Sante PACS Server is a DICOM 3.0 compliant PACS server, Modality Worklist server, HTTP Web server for DICOM files, and CD/DVD burning and printing server from Santesoft Cyprus. Used to store, archive, manage, view and burn medical images. A buffer error vulnerability exists in Santesoft...