EUVD-2022-44726

Malicious code in bioql PyPI...

EUVD-2022-45164

Malicious code in bioql PyPI...

Frauscher FDS102 Full Control

The vulnerability of the software-hardware complex for diagnosing and monitoring railway infrastructure, the Frauscher FDS102, is related to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability can allow a perpetrator ...

CVE-2022-41513

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /diagnostic/edittest.php...

GE HealthCare Kiosk Mode Privilege Escalation

The vulnerability of GE HealthCare’s ultrasonic diagnostic system’s Kiosk Mode feature is related to a breach in data protection mechanisms. Exploiting this vulnerability can allow attackers to circumvent security restrictions, gain unauthorized access to protected information, and enhance their...

Common Service Desktop getAllFolderContents() Unauthenticated Access

The vulnerability of the getAllFolderContents function in the GE HealthCare ultrasonic diagnostic system’s web application is related to an incorrect restriction on the path to the restricted-access directory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to...

Frauscher Sensortechnik FDS102 Code Injection Vulnerability

Frauscher Sensortechnik FDS102 is a diagnostic system device from Frauscher. A code injection vulnerability exists in Frauscher Sensortechnik FDS102 v2.10.1. An attacker could abuse the code by exploiting this vulnerability...

Frauscher Sensortechnik FDS101 v1.4.24 Code Injection Vulnerability

Frauscher Sensortechnik FDS101 is a diagnostic system device from Frauscher. A code injection vulnerability exists in Frauscher Sensortechnik FDS101 v1.4.24, which stems from the presence of a remote code execution RCE vulnerability...

Frauscher Sensortechnik FDS101 Path Traversal Vulnerability

Frauscher Sensortechnik FDS101 is a diagnostic system device from Frauscher. A path traversal vulnerability exists in Frauscher Sensortechnik FDS101 v1.4.24, which stems from the presence of a path traversal vulnerability...

Frauscher Sensortechnik FDS101 SQL Injection Vulnerability

Frauscher Sensortechnik FDS101 is a diagnostic system device from Frauscher. Frauscher Sensortechnik FDS101 version v1.4.24 suffers from a SQL injection vulnerability that stems from the presence of a SQL injection vulnerability...

Frauscher Sensortechnik GmbH FDS001 Path traversal vulnerability

Frauscher Sensortechnik GmbH FDS001 is a diagnostic system device from Frauscher. A path traversal vulnerability exists in Frauscher Sensortechnik GmbH FDS001 version 1.3.3 and earlier, which stems from the presence of a path traversal vulnerability. An attacker can exploit this vulnerability to...

Online Diagnostic Lab Management System SQL Injection Vulnerability

Online Diagnostic Lab Management System is an online diagnostic lab management system. A SQL injection vulnerability exists in Online Diagnostic Lab Management System v1.0, which originates from the id parameter in /diagnostic/editcategory.php being susceptible to SQL injection attacks...

PT-2022-11810

Name of the Vulnerable Software and Affected Versions Riverbed AppResponse versions 11.8.0 through 11.11.5a Description The issue concerns the logging of usernames and passwords when incorrect credentials are entered during login to the WebUI. If a user enters an incorrect username and/or passwor...

Acclaim USAHERDS Trust Management Vulnerability

Acclaim Systems Acclaim Usaherds is an Animal Health Emergency Reporting Diagnostic System from Acclaim Systems USA. A security vulnerability exists in Acclaim USAHERDS version 7.4.0.1 and prior versions that stems from the presence of hard-coded credentials in the program...

Electro Industries GaugeTech Nexus Device Information Disclosure Vulnerability

The Electro Industries GaugeTech Nexus devices are a utility billing device with advanced communication features from Electro Industries GaugeTech, Inc. A security vulnerability exists in the Electro Industries GaugeTech Nexus devices. A remote attacker can exploit this vulnerability by sending a...

Hackers Find A Way To Disable Car Airbags System

Car Hacking is a hot topic today. Today, many automobiles companies are offering vehicles that run on the mostly drive-by-wire system, which means that a majority of car's functions are electronically controlled, from instrument cluster to steering, brakes, and accelerator. No doubt these...

Hackers Demonstrate Car Hacking using a laptop

Computer geeks already knew it was possible to hack into a car's computerized systems and finally, two U.S. hackers - Charlie Miller and Chris Valasek, sponsored by the Pentagon's research facility DARPA recently demonstrated just how easy it is for malicious hackers to physically hijack a modern...