GE Healthcare Centricity PACS-IW Built-in Account Vulnerability

GE Healthcare Centricity PACS-IW is an image archiving and delivery system for the healthcare industry. Built-in accounts exist for GE Healthcare Centricity PACS-IW, with 'shared' passwords for shared users; and 'scan' passwords for scan users, allowing remote attackers to to utilize these accoun...

GE Healthcare Centricity PACS-IW Built-in Account Vulnerability (CNVD-2015-05174)

GE Healthcare Centricity PACS-IW is an image archiving and delivery system for the healthcare industry. GE Healthcare Centricity PACS-IW has built-in accounts for sa users with 'A11enda1e' passwords, allowing remote attackers to take control of the device using these accounts...

GE Healthcare Revolution XQ/i Built-in Account Vulnerability

Acquisition Workstation for the GE Healthcare Revolution XQ/i is a digital radiography acquisition workstation for the healthcare industry. The Acquisition Workstation for the GE Healthcare Revolution XQ/i has built-in accounts, and the sdc uses 'adw3.1' passwords, allowing remote attackers to ta...

GE Healthcare CADStream Server Built-in Account Vulnerability

GE Healthcare CADStream Server is a suite of applications used in the healthcare industry and provides automated analysis and reporting for magnetic resonance imaging. GE Healthcare CADStream Server has built-in accounts, and admin uses 'confirma' passwords, allowing remote attackers to utilize...

GE Healthcare Optima MR360 HIPAA Configuration Interface Built-in Account Vulnerability

GE Healthcare CADStream Server is a suite of applications used in the healthcare industry and provides automated analysis and reporting for magnetic resonance imaging. Built-in accounts exist for the GE Healthcare Optima MR360 HIPAA configuration interface, with the root account using the...

GE Healthcare Centricity PACS Workstation Built-in Account Vulnerability

GE Healthcare Centricity PACS Workstation is a General Electric image archiving and transfer system workstation for the healthcare industry. GE Healthcare Centricity PACS Workstation includes built-in accounts for Administrator users with the 'CANal1' password and IIS users with the 'iis '...

GE Healthcare Centricity Analytics Server Built-in Account Vulnerability

GE Healthcare Centricity Analytics Server is a suite of imaging analytics solutions for the healthcare industry. GE Healthcare Centricity Analytics Server has built-in accounts, sa users use the 'V0yag3r' password, analyst uses the G3car3s password, ccg uses the G3car3s password, viewer uses the...

Debian DLA-272-1 : python-django security update

Several vulnerabilities were discovered in Django, a high-level Python web development framework : CVE-2015-2317 Daniel Chatfield discovered that python-django, a high-level Python web development framework, incorrectly handled user-supplied redirect URLs. A remote attacker could use this flaw to...

[SECURITY] [DLA 272-1] python-django security update

Package : python-django Version : 1.2.3-3+squeeze13 CVE ID : CVE-2015-2317 CVE-2015-5143 CVE-2015-5144 Several vulnerabilities were discovered in Django, a high-level Python web development framework: CVE-2015-2317 Daniel Chatfield discovered that python-django, a high-level Python web developmen...

Header injection via multi-lines input

Some built-in validators django.core.validators.EmailValidator, most seriously don't prohibit newline characters due to the usage of $ instead of \Z in the regular expressions. If you use values with newlines in HTTP response or email headers, you can suffer from header injection attacks...

PT-2015-5705

Name of the Vulnerable Software and Affected Versions Symfony versions 2.3.x through 2.3.26 Symfony versions 2.4.x through 2.5.10 Symfony versions 2.6.x through 2.6.5 Description The issue allows remote attackers to execute arbitrary PHP code via a language="php" attribute of a SCRIPT element...

Toshiba CHEC Built-in Encryption Key Information Disclosure Vulnerability

Toshiba CHEC is a product of Toshiba Corporation. Toshiba CHEC has a security vulnerability due to the inclusion of a built-in encryption key in the CreateBossCredentials.jar file. This allows an attacker with access to bossinfo.pro to decrypt content, including BOSS database information, using t...

Lantronix xPort telnet access configuration operation vulnerability

The XPort is based on Lantronix's DSTni network processor SoC and already includes a 10/100 MAC/PHY and 256 KB of SRAM memory. A built-in web server allows standard browsers to communicate with the device. The Lantronix xPort fails to properly restrict access to TCP port 9999, allowing remote...

Cryptowall 3.0 Slims Down, Removes Exploits From Dropper

A slimmed down version of Cryptowall is in circulation, and this one contains no built-in exploits, confirming a growing trend that most ransomware will be spread almost exclusively via exploit kits. Kits such as Angler, Nuclear, and most recently Hanjuan, have been busy incorporating Flash...

Discuz! 7.2 某自带功能存在储存型XSS漏洞

简要描述： Discuz! 7.2 某自带功能存在储存型XSS漏洞 详细说明： 还是在签到哦 plugin.php?id=dpssign:sign 发表签到 签到可以写入xss 但是要干扰前面的代码 才可以形成xss https://images.seebug.org/upload/201409/1100522754a8ee564ad50b51a9dcd8669c53e051.jpg https://images.seebug.org/upload/201409/1100524583a5fba1a426878f1f3598aaf1fa7dfc.jpg 漏洞证明：...

Cisco Unified Computing System E DoS

SSH DoS in built in management controller...

Android built-in browser cross-domain vulnerabilities UXSS-a vulnerability warning-the black bar safety net

Related links: http://www.rafayhackingarticles.net/2014/08/android-browser-same-origin-policy.html Test Link: http://x7s.pw/001.html iframe name="m" src="http://www.myhack58.com/" onload="window. open'\u0000javascript:alertdocument. location','m'" Genesis: because the Android built-in browser to...

“Invalid Credentials” Error Adding a Hyper-V Host Using a Local Account

Article Applicability This article relates to an error that only occurs when Veeam Backup & Replication is deployed on a Windows machine. With the Veeam Software Appliance, to add a Hyper-V host using credentials, it requires that both the appliance and the Windows machine are added to the same...

QuickCommerce 2.5/3.0,Cart32 2.5 a/3.0,Shop Express 1.0,StoreCreator 3.0 Web Shopping Cart Hidden Form Field Vulnerability

No description provided by source. E-Commerce Exchange QuickCommerce 2.5/3.0,McMurtrey/Whitaker & Associates Cart32 2.5 a/3.0,Shop Express 1.0,StoreCreator 3.0 Web Shopping Cart Hidden Form Field Vulnerability source: http://www.securityfocus.com/bid/1237/info Various shopping cart applications u...

openSUSE Security Update : seamonkey (openSUSE-SU-2014:0008-1)

This update fixes the following security issues with SeaMonkey : - update to SeaMonkey 2.23 bnc854370 - requires NSPR 4.10.2 and NSS 3.15.3.1 - MFSA 2013-104/CVE-2013-5609/CVE-2013-5610 Miscellaneous memory safety hazards - MFSA 2013-105/CVE-2013-5611 bmo771294 Application Installation doorhanger...