apps.allianzworldwidecare.com XSS vulnerability

Vulnerable URL: https://apps.allianzworldwidecare.com/poi/hospital-doctor-and-health-practitioner-finder?PROVTYPE=HOSPITALS=Asia=India=Delhi%22%3E%3Csvg/onload=alertdocument.domain%3E%7Cdelhi.geocci.ru/search.php%7Cq=leela=www.tury.ru=en Details: Description| Value ---|--- Patched:| Yes, at...

China Telecom's Care eTone for Android has logical design flaws

Based on China Telecom's CDMA network and "Wing Positioning" technology, Caring eTone is designed for middle and high-end users of Telecom to query the location information of their family members at any time through their Skywing 3G smartphones and to facilitate the search of information around...

Week 6 of Girls Who Code: Artificial Intelligence and Human Expertise at Watson Health

Week 6 of the Girls Who Code summer-immersion program at Akamai featured a field trip to IBM's Watson Health, where the girls learned about the concept of "cognitive computing," and how this technology is being used by IBM to help doctors help their patients. The girls met some of the women at IB...

Cisco Smart Net Total Care Software Collector Appliance SQL Injection Vulnerability

Cisco Smart Net Total Care SNTC Software is an intelligent network support service. A SQL injection vulnerability in the Cisco Smart Net Total Care Software WEB management interface allows remote attackers to exploit the vulnerability by submitting specially crafted SQL queries to manipulate or...

CVE-2017-6754

A vulnerability in the web-based management interface of the Cisco Smart Net Total Care SNTC Software Collector Appliance 3.11 could allow an authenticated, remote attacker to perform a read-only, blind SQL injection attack, which could allow the attacker to compromise the confidentiality of the...

Sql injection

A vulnerability in the web-based management interface of the Cisco Smart Net Total Care SNTC Software Collector Appliance 3.11 could allow an authenticated, remote attacker to perform a read-only, blind SQL injection attack, which could allow the attacker to compromise the confidentiality of the...

CVE-2017-6754

A vulnerability in the web-based management interface of the Cisco Smart Net Total Care SNTC Software Collector Appliance 3.11 could allow an authenticated, remote attacker to perform a read-only, blind SQL injection attack, which could allow the attacker to compromise the confidentiality of the...

CVE-2017-6754

Cisco SNTC Software Collector Appliance 3.11 exposes a read-only, blind SQL injection vulnerability in its web-based management interface. An authenticated remote attacker can exploit insufficient input validation by submitting crafted URLs to extract information from the underlying database via ...

Anthem Agrees to Settle 2015 Data Breach for $115 Million

Like many companies hit by data breaches, Anthem, the United States’ largest for-profit health care company, has been forced to watch from the sidelines while the incident plays out in court. An end finally appears to be in sight however. Late Friday the company agreed to settle a series of...

Healthcare Industry Cybersecurity Report

New US government report: "Report on Improving Cybersecurity in the Health Care Industry." It's pretty scathing, but nothing in it will surprise regular readers of this blog. It's worth reading the executive summary, and then skimming the recommendations. Recommendations are in six areas. The Tas...

communityfostercare.co.uk XSS vulnerability

Vulnerable URL: http://www.communityfostercare.co.uk/foster-carers/different-types-of-foster-care/short-term-fostering-and-respite-care/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

FTC Promotes Privacy Awareness Week

The Federal Trade Commission FTC has released an announcement on Privacy Awareness Week, celebrated this week in the U.S. The theme of this year’s initiative is “Share with Care,” and the FTC is offering privacy tips, including how to safeguard your information online, improve your computer...

Lack of Security Talent Afflicts Health Care

BOSTON—Reality has bitten healthcare hard in the last year, with dire vulnerabilities in medical devices bubbling to the surface, malware infections affecting patient care at a number of facilities, and the realization that nowhere is the lack of information security professionals more pressing...

repair-care.be XSS vulnerability

Vulnerable URL: http://www.repair-care.be/search.asp?searchfield=%22%27--%21%3E%3CScript%2FK%2F%3Econfirm%28%60OPENBUGBOUNTY%60%29%3C%2FScript%2FK%2F%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

Lenovo Customer Care Software Development Kit Local Elevation of Privilege Vulnerability

The Lenovo Customer Care Software Development Kit CCSDK is a set of pre-installed software for program maintenance use by the Chinese company Lenovo. A local elevation of privilege vulnerability exists in Lenovo Customer Care Software Development Kit. A local attacker could exploit this...

CVE-2016-9355

An issue was discovered in Becton, Dickinson and Company BD Alaris 8015 Point of Care PC unit, Version 9.5 and prior versions, and Version 9.7. An unauthorized user with physical access to an Alaris 8015 PC unit may be able to obtain unencrypted wireless network authentication credentials and oth...

CVE-2016-8375

An issue was discovered in Becton, Dickinson and Company BD Alaris 8015 Point of Care PC unit, Version 9.5 and prior versions, and Version 9.7, and 8000 PC unit. An unauthorized user with physical access to an affected Alaris PC unit may be able to obtain unencrypted wireless network authenticati...

ICSMA-17-009-01A_St. Jude Merlin@home Transmitter Vulnerability (Update A)

OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSMA-17-009-01 St. Jude Merlin@home Transmitter Vulnerability that was published January 9, 2017, on the NCCIC/ICS-CERT web site. --------- Begin Update A Part 1 of 5 -------- MedSec Holdings has identified a channel...

secure2.carenewengland.org XSS vulnerability

Open Bug Bounty ID: OBB-186767 Description| Value ---|--- Affected Website:| secure2.carenewengland.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Medical Devices Should Withstand Rigor, Expert Says

CAMBRIDGE, Ma.—When it comes to managing medical device security risk, hospital administrators should focus on weathering the storm and not necessarily prevention, Dr. Kevin Fu, a noted medical device security expert, encouraged this week. “How do you fail gracefully when things go wrong? Will yo...