CVE-2022-40263 BD Totalys MultiProcessor - Hardcoded Credentials

BD Totalys MultiProcessor, versions 1.70 and earlier, contain hardcoded credentials. If exploited, threat actors may be able to access, modify or delete sensitive information, including electronic protected health information ePHI, protected health information PHI and personally identifiable...

PT-2022-5147 · Microsoft · Office 365

Name of the Vulnerable Software and Affected Versions: Microsoft Office 365 affected versions not specified Description: The issue is related to a security mechanism in Office 365 Message Encryption OME that uses the Electronic Codebook ECB mode. This allows a remote attacker to potentially acces...

The vulnerability of the Office 365 Message Encryption security mechanism in the Microsoft Office 365 software package allows a perpetrator to gain access to protected information.

The vulnerability of the Office 365 Message Encryption security mechanism OME in the Microsoft Office 365 suite is related to the possibility of using the Electronic Codebook mode. Exploiting this vulnerability could allow a malicious actor to gain access to protected information...

Ukraine Arrests Cybercrime Group for Selling Data of 30 Million Accounts

Ukrainian law enforcement authorities on Friday disclosed that it had "neutralized" a hacking group operating from the city of Lviv that it said acted on behalf of Russian interests. The group specialized in the sales of 30 million accounts belonging to citizens from Ukraine and the European Unio...

Large-Scale Collection of Cell Phone Data at US Borders

The Washington Post is reporting that the US Customs and Border Protection agency is seizing and copying cell phone, tablet, and computer data from "as many as" 10,000 phones per year, including an unspecified number of American citizens. This is done without a warrant, because "…courts have long...

DEF CON 30. Hacking EFBs. Engine Performance

At DEF CON 30 this year we demonstrated some vulnerabilities in electronic flight bags and the potential impact on flight safety. There’s plenty more detail of EFB security issues here. As part of the Aerospace Village at DEF CON 30, we invited people to fly our flight sim under instruction from...

Multiple Vulnerabilities in Isthmus Electronic Document Security Management System

Yisetong electronic document security management system is an electronic document security protection software, the system utilizes the driver layer transparent encryption technology, through the encryption protection of electronic documents, to prevent internal employees from leaking and externa...

Black Hat and DEF CON Roundup

There was nothing typical this year at BSides LV, Black Hat USA and DEF CON – also known collectively as Hacker Summer Camp. The weeklong collection of cybersecurity conferences featured an eclectic mix of attendees to learn, network, hack and have fun. The week even included a rare Las Vegas fla...

编号撤回

HTMLDOC is an open source program that converts HTML and Markdown files to EPUB, Indexed HTML, PostScript and PDF formats. This CVE number has been withdrawn...

Database Integrity Vulnerabilities in Boeing’s Onboard Performance Tool

This post is released in a co-ordinated manner with Boeing. TL;DR: Security gaps in older, unprotected Windows desktop versions of Boeing’s Onboard Performance Tool OPT could make certain Electronic Flight Bags EFB more susceptible to attack. In particular, OPT’s use of plain text configuration...

CVE-2022-2693

A vulnerability has been found in SourceCodester Electronic Medical Records System and classified as critical. This vulnerability affects unknown code of the file register.php of the component UPDATE Statement Handler. The manipulation of the argument pconsultation leads to sql injection. The...

Sql injection

A vulnerability has been found in SourceCodester Electronic Medical Records System and classified as critical. This vulnerability affects unknown code of the file register.php of the component UPDATE Statement Handler. The manipulation of the argument pconsultation leads to sql injection. The...

CVE-2022-2693 SourceCodester Electronic Medical Records System UPDATE Statement register.php sql injection

A vulnerability has been found in SourceCodester Electronic Medical Records System and classified as critical. This vulnerability affects unknown code of the file register.php of the component UPDATE Statement Handler. The manipulation of the argument pconsultation leads to sql injection. The...

CVE-2022-2693

The CVE-2022-2693 vulnerability affects SourceCodester Electronic Medical Records System, specifically the register.php file in the UPDATE Statement Handler. The root cause is injectable SQL through the pconsultation parameter, allowing remote exploitation with publicly disclosed exploits. Docume...

CVE-2022-2676

A vulnerability was found in SourceCodester Electronic Medical Records System and classified as critical. Affected by this issue is some unknown functionality of the component POST Request Handler. The manipulation of the argument useremail leads to sql injection. The attack may be launched...

Sql injection

A vulnerability was found in SourceCodester Electronic Medical Records System and classified as critical. Affected by this issue is some unknown functionality of the component POST Request Handler. The manipulation of the argument useremail leads to sql injection. The attack may be launched...

CVE-2022-2676 SourceCodester Electronic Medical Records System POST Request sql injection

A vulnerability was found in SourceCodester Electronic Medical Records System and classified as critical. Affected by this issue is some unknown functionality of the component POST Request Handler. The manipulation of the argument useremail leads to sql injection. The attack may be launched...

CVE-2022-2676

The CVE-2022-2676 issue affects SourceCodester Electronic Medical Records System, specifically the POST Request Handler. The root cause is manipulation of the user_email parameter, leading to an SQL injection vulnerability that can be exploited remotely. Multiple connected sources confirm the vul...

Electronic Medical Records System SQL注入漏洞

Electronic Medical Records System is an electronic medical records system. Electronic Medical Records System suffers from a SQL injection vulnerability that stems from an unknown function of its POST request handler that operates on the parameter useremail to cause sql injection. The attack metho...

PT-2022-18061 · Sourcecodester · Sourcecodester Electronic Medical Records System

Name of the Vulnerable Software and Affected Versions: SourceCodester Electronic Medical Records System affected versions not specified Description: A critical issue was found in the component POST Request Handler, where the manipulation of the user email argument leads to sql injection. This iss...