Why Healthcare Keeps Falling Prey to Ransomware and Other Cyberattacks

The healthcare industry is under attack like never before. What started as a surge in criminal activity during the early days of the coronavirus pandemic has now metastasized into a full-blown crisis within the healthcare industry worldwide. The recent disruptive ransomware attacks on Scripps...

Bachmann Electronic All M-Base Controllers 加密问题漏洞

Bachmann Electronic All M-Base Controllers is a controller system from Bachmann, Germany, used to control networks. A cryptographic issue vulnerability exists in Bachmann Electronic All M-Base Controllers that stems from not properly using the relevant cryptographic algorithms, resulting in...

CVE-2021-32698

eLabFTW is an open source electronic lab notebook for research labs. This vulnerability allows an attacker to make GET requests on behalf of the server. It is "blind" because the attacker cannot see the result of the request. Issue has been patched in eLabFTW 4.0.0...

CVE-2021-32698

eLabFTW is an open source electronic lab notebook for research labs. This vulnerability allows an attacker to make GET requests on behalf of the server. It is "blind" because the attacker cannot see the result of the request. Issue has been patched in eLabFTW 4.0.0...

CVE-2021-32698 Blind Server-Side Request Forgery (SSRF) in eLabFTW

eLabFTW is an open source electronic lab notebook for research labs. This vulnerability allows an attacker to make GET requests on behalf of the server. It is "blind" because the attacker cannot see the result of the request. Issue has been patched in eLabFTW 4.0.0...

CVE-2021-32698

CVE-2021-32698 affects the eLabFTW open source electronic lab notebook. The issue is a blind server-side request forgery (SSRF) that lets an attacker cause the server to issue GET requests on behalf of the server, without the attacker seeing the response. The vulnerability is mitigated by a patch...

Logic Flaw Vulnerability in Cloud Patrol System of Beijing Landsea Electronic Technology Co.

Beijing Landwell Electronic Technology Co., Ltd Landwell for short, has created all the mobile automatic identification products with independent intellectual property rights and independent brand "LANDWELL"; and built a high-tech enterprise which is integrated with the research, development,...

Unauthorized Access Vulnerability in Cloud Patrol System of Beijing Landsea Electronic Technology Co.

Beijing Landwell Electronic Technology Co., Ltd Landwell for short, has created all the mobile automatic identification products with independent intellectual property rights and independent brand "LANDWELL"; and built a high-tech enterprise which is integrated with the research, development,...

Cleo LexiCom 路径遍历漏洞

Cleo LexiCom is an integrated platform from Cleo, Inc. Accelerate EDI automation, speed trade partner on-boarding and easily resolve EDI issues. A path traversal vulnerability exists in Cleo LexiCom 5.5.0.0, which originates in an AS2 message where the sender can specify a filename that can conta...

Game giant Electronic Arts is the latest victim of massive data breach

By Deeba Ahmed Electronic Arts EA has confirmed that hackers have stolen valuable information from the company, and around 780GB of data was compromised. This is a post from HackRead.com Read the original post: Game giant Electronic Arts is the latest victim of massive data breach...

Hackers Steal FIFA 21 Source Code, Tools in EA Breach

Hackers have breached computer game maker Electronic Arts EA and stolen source code and related tools for the company’s extensive game library, the company has confirmed. EA said it’s investigating “a recent incident of intrusion into our network where a limited amount of game source code and...

Weak Password Vulnerability in Beidou Active Security Cloud Platform

Founded in March 2012, Hunan Changshang Technology Co., Ltd. is a high-tech enterprise integrating R&D, manufacturing, sales and service of electronic technology and its related products. There is a weak password vulnerability in Beidou Active Security Cloud Platform, which can be exploited by...

Command Execution Vulnerability in Electronic Document Management System (EDFMS) of Istar

Electronic document security management system CDG for short is an electronic document security encryption software, the system utilizes the driver layer transparent encryption technology, through the encryption and protection of electronic documents, to prevent the internal staff leakage and...

Logic Vulnerabilities in the Lock Group Management System of Jiangsu Esso Electronic Technology Co.

Ltd. is specialized in substation video monitoring system, passive intelligent lock group management system development, power intelligent auxiliary monitoring system, distribution room monitoring system, intelligent access control system, production and sales of high-tech enterprises. Ltd. lock...

Shenzhen Police Wing Intelligent Technology Co., Ltd. electronic evidence management platform has information leakage vulnerability

Shenzhen Police Wings Intelligent Technology Co., Ltd. is an enterprise in China's law enforcement recorder industry, integrating R&D, manufacturing, sales and service. Shenzhen Police Wing Intelligent Technology Co., Ltd. electronic evidence management platform there is an information leakage...

Deploying EFBs securely

It may come as a surprise to some to discover that electronic flight bag security at airlines is often quite variable. Whilst some use an MDM, a lot don’t. Of those who do, PINs are often weak. Some airlines actively encourage pilots to use their devices for personal use. We’ve heard stories of a...

Supreme Court Limits Scope of Controversial Hacking Law

The United States Supreme Court has ruled that a police officer who received money for obtaining data from a law-enforcement database for an associate did not violate a controversial federal hacking law, marking a victory for the ethical hacking community by limiting the law’s scope. In a landmar...

Weak Password Vulnerability in TGS-AGW Gateway of Guangzhou Tongjucheng Electronic Technology Co.

Guangzhou Tongjucheng Electronic Technology Co., Ltd. is a company focusing on the "TGS-AGW" series of security gateway products with independent intellectual property rights, stable performance, powerful functions, through the authoritative certification of public information network security; t...

Unauthorized Access Vulnerability in Electronic Evidence Management Platform of Shenzhen Police Wing Intelligent Technology Co.

hereinafter referred to as the police wing is China's law enforcement recorder industry leader, set R & D, manufacturing, sales, service in one, focusing on law enforcement departments to provide law enforcement recorder as the core, including the police wing of the mobile law enforcement...

Police Wing Law Enforcement Recorder Electronic Evidence Management Software has Information Leakage Vulnerability

hereinafter referred to as the police wing is China's law enforcement recorder industry leader, set R & D, manufacturing, sales, service in one, focusing on law enforcement departments to provide law enforcement recorder as the core, including the police wing of the mobile law enforcement...