EUVD-2020-7479

Malware in sbrugna...

DEBIAN-CVE-2025-53853

A heap-based buffer overflow vulnerability exists in the ISHNE parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch 35a819fa. A specially crafted ISHNE ECG annotations file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this...

UBUNTU-CVE-2025-53853

A heap-based buffer overflow vulnerability exists in the ISHNE parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch 35a819fa. A specially crafted ISHNE ECG annotations file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this...

CVE-2025-53853

A heap-based buffer overflow vulnerability exists in the ISHNE parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch 35a819fa. A specially crafted ISHNE ECG annotations file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this...

The Biosig Project libbiosig ISHNE ECG Annotations file parsing heap-based buffer overflow vulnerability

Talos Vulnerability Report TALOS-2025-2232 The Biosig Project libbiosig ISHNE ECG Annotations file parsing heap-based buffer overflow vulnerability August 25, 2025 CVE Number CVE-2025-53853 SUMMARY A heap-based buffer overflow vulnerability exists in the ISHNE parsing functionality of The Biosig...

Malicious code in ecg-js-banners (npm)

The package ecg-js-banners was found to contain malicious code...

MAL-2025-19114 Malicious code in ecg-js-banners (npm)

The package ecg-js-banners was found to contain malicious code...

CVE-2020-15486

An issue was discovered on Dr Trust ECG Pen 2.00.08 devices. Because the Bluetooth LE support is implemented without a requirement for pairing or security, any attacker can access the GATT server of the device and can sniff the data being broadcasted while a measurement is being done. Also, saved...

CVE-2024-32368

Insecure Permission vulnerability in Agasta Sanketlife 2.0 Pocket 12-Lead ECG Monitor FW Version 3.0 allows a local attacker to cause a denial of service via the Bluetooth Low Energy BLE component...

Agasta Sanketlife 安全漏洞

Agasta Sanketlife is a portable ECG monitor from Agasta India. A security vulnerability exists in Agasta Sanketlife version 2.0 Pocket 12-Lead ECG Monitor FW 3.0. A local attacker can exploit this vulnerability to cause a denial of service via the Bluetooth Low Energy BLE component...

CVE-2024-32368

Insecure Permission vulnerability in Agasta Sanketlife 2.0 Pocket 12-Lead ECG Monitor FW Version 3.0 allows a local attacker to cause a denial of service via the Bluetooth Low Energy BLE component...

CVE-2024-32368

Insecure Permission vulnerability in Agasta Sanketlife 2.0 Pocket 12-Lead ECG Monitor FW Version 3.0 allows a local attacker to cause a denial of service via the Bluetooth Low Energy BLE component...

PT-2024-24536 · Agasta · Agasta Sanketlife 2.0 Pocket 12-Lead Ecg Monitor

Name of the Vulnerable Software and Affected Versions: Agasta Sanketlife 2.0 Pocket 12-Lead ECG Monitor version 3.0 Description: The issue allows a local attacker to cause a denial of service via the Bluetooth Low Energy BLE component. This is due to an insecure permission vulnerability...

CVE-2024-32368

CVE-2024-32368 concerns the Agasta Sanketlife 2.0 Pocket 12-Lead ECG Monitor FW 3.0. The Red Hat advisory confirms an issue in the BLE component where insecure permissions enable a local attacker to cause a denial of service. The vulnerability affects the BLE permissions/handling, leading to pote...

ecg-expert.fr Cross Site Scripting vulnerability OBB-2926539

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2020-15486

An issue was discovered on Dr Trust ECG Pen 2.00.08 devices. Because the Bluetooth LE support is implemented without a requirement for pairing or security, any attacker can access the GATT server of the device and can sniff the data being broadcasted while a measurement is being done. Also, saved...

CVE-2020-15486

An issue was discovered on Dr Trust ECG Pen 2.00.08 devices. Because the Bluetooth LE support is implemented without a requirement for pairing or security, any attacker can access the GATT server of the device and can sniff the data being broadcasted while a measurement is being done. Also, saved...

Design/Logic Flaw

An issue was discovered on Dr Trust ECG Pen 2.00.08 devices. Because the Bluetooth LE support is implemented without a requirement for pairing or security, any attacker can access the GATT server of the device and can sniff the data being broadcasted while a measurement is being done. Also, saved...

CVE-2020-15486

An issue was discovered on Dr Trust ECG Pen 2.00.08 devices. Because the Bluetooth LE support is implemented without a requirement for pairing or security, any attacker can access the GATT server of the device and can sniff the data being broadcasted while a measurement is being done. Also, saved...

CVE-2020-15486

CVE-2020-15486 impacts Dr Trust ECG Pen 2.00.08, where Bluetooth LE is implemented without pairing or security. The device’s GATT server is accessible to attackers, who can sniff data broadcast during measurement, extract saved data over Bluetooth, and perform a man-in-the-middle attack to compro...