CryptoUNets: Applying Convolutional Networks to Encrypted Data for Biomedical Image Segmentation

In this manuscript, we demonstrate the feasibility of a privacy-preserving U-Net deep learning inference framework, namely, homomorphic encryption-based U-Net inference. That is, U-Net inference can be performed solely using homomorphic encryption techniques. To our knowledge, this is the first...

CVE-2025-27581

NIH BRICS aka Biomedical Research Informatics Computing System through 14.0.0-67 allows users who lack the InET role to access the InET module via direct requests to known endpoints...

NIH BRICS 安全漏洞

NIH BRICS is a biomedical research informatics computing system at NIH centers. A security vulnerability exists in NIH BRICS version 14.0.0-67 and prior versions that originates from direct access to a known endpoint and could lead to unauthorized module access...

NIH BRICS 安全漏洞

NIH BRICS is a biomedical research informatics computing system at NIH centers. A security vulnerability exists in NIH BRICS version 14.0.0-67 and prior versions, which stems from the generation of predictable tokens that could lead to elevated privileges...

[SECURITY] Fedora 40 Update: biosig4c++-2.6.0-3.fc40

BioSig is a software library for processing of biomedical signals EEG, ECG, etc. with Matlab, Octave, C/C++ and Python. A standalone signal viewer supporting more than 30 different data formats is also provided...

Biosig Project libbiosig Security Vulnerabilities

BioSig Project Biosig Project libbiosig is an open source software library for biomedical signal processing from BioSig Project. It has features for biosignal analysis. A security vulnerability exists in Biosig Project libbiosig version 2.5.0 due to a heap-based buffer overflow vulnerability in t...

Biosig Project libbiosig Input Validation Error Vulnerability

BioSig Project Biosig Project libbiosig is an open source software library for biomedical signal processing from BioSig Project. It has features for biosignal analysis. An input validation error vulnerability exists in Biosig Project libbiosig version 2.5.0, which stems from an integer overflow...

Russian APT29 Hacked US Biomedical Giant in TeamCity-Linked Breach

By Waqas Polish authorities and FortiGuard Labs have issued a warning to customers about a new wave of cyberattacks associated with TeamCity. This is a post from HackRead.com Read the original post: Russian APT29 Hacked US Biomedical Giant in TeamCity-Linked Breach...

Researchers Uncover Grayling APT's Ongoing Attack Campaign Across Industries

A previously undocumented threat actor of unknown provenance has been linked to a number of attacks targeting organizations in the manufacturing, IT, and biomedical sectors in Taiwan. The Symantec Threat Hunter Team, part of Broadcom, attributed the attacks to an advanced persistent threat APT it...

CVE-2023-0888

An improper neutralization of directives in dynamically evaluated code vulnerability in the WiFi Battery embedded web server in versions L90/U70 and L92/U92 can be used to gain administrative access to the WiFi communication module. An authenticated user, having access to both the medical device...

CVE-2023-0888 Authenticated eval injection in B. Braun Space Battery pack SP with Wi-Fi

An improper neutralization of directives in dynamically evaluated code vulnerability in the WiFi Battery embedded web server in versions L90/U70 and L92/U92 can be used to gain administrative access to the WiFi communication module. An authenticated user, having access to both the medical device...

CVE-2022-39238 Improper Authentication in Arvados when using PAM as identity provider

Arvados is an open source platform for managing and analyzing biomedical big data. In versions prior to 2.4.3, when using Portable Authentication Modules PAM for user authentication, if a user presented valid credentials but the account is disabled or otherwise not allowed to access the host such...

CVE-2022-39238

CVE-2022-39238 affects Arvados versions prior to 2.4.3. When using PAM for authentication, a user with valid credentials could be granted access even if the account is disabled or not allowed to access the host (e.g., expired password). Other auth methods (LDAP, OpenID Connect) are not affected. ...

Cyberattacks Target COVID-19 Vaccine 'Cold-Chain' Orgs

A sophisticated, global phishing campaign has been targeting the credentials of organizations associated with the COVID-19 “cold-chain” – companies that ensure the safe preservation of vaccines by making sure they are stored and transported in temperature-controlled environments. The phishing...

biomedical.site123.me Cross Site Scripting vulnerability OBB-1477481

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2020-12039

Baxter Sigma Spectrum Infusion Pumps Sigma Spectrum Infusion System v's6.x model 35700BAX & Baxter Spectrum Infusion System v's8.x model 35700BAX2 contain hardcoded passwords when physically entered on the keypad provide access to biomedical menus including device settings, view calibration value...

CVE-2020-12035

Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The PrismaFlex device contains a hard-coded service password that provides access to biomedical information, device settings, calibration settings, and network configuration. This could allow an attacker to modify device settings...

Hardcoded credentials

Baxter Sigma Spectrum Infusion Pumps Sigma Spectrum Infusion System v's6.x model 35700BAX & Baxter Spectrum Infusion System v's8.x model 35700BAX2 contain hardcoded passwords when physically entered on the keypad provide access to biomedical menus including device settings, view calibration value...

Hardcoded credentials

Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The PrismaFlex device contains a hard-coded service password that provides access to biomedical information, device settings, calibration settings, and network configuration. This could allow an attacker to modify device settings...

CVE-2020-12035

CVE-2020-12035 affects Baxter PrismaFlex (all versions) and PrisMax (all versions prior to 3.x). Root cause is a hard-coded service password that grants access to biomedical information, device settings, calibration settings, and network configuration, enabling an attacker to modify device settin...