CVE-2024-23747

CVE-2024-23747 The Moderna Sistemas ModernaNet Hospital Management System 2024 is susceptible to an Insecure Direct Object Reference IDOR vulnerability. PoC This vulnerability resides in the system's handling of user data access through a /Modernanet/LAUDO/LAU0000100/Laudo?id= URL. Bymanipulating...

medical-data (0.2.0.dev0), ptlflow (>=0.3.0, <=0.3.2) +4 more potentially affected by CVE-2024-8019 via lightning (1.9.5)

lightning PYPI version 1.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on lightning and may be impacted: - medical-data 0.2.0.dev0 - ptlflow =0.3.0, =0.0.1, =0.1.0, =0.2.13, =0.3.3 Source cves: CVE-2024-8019 Source advisory: OSV:PYSEC-2026-3970...

medical-data (0.2.0.dev0), ptlflow (>=0.3.0, <=0.3.2) +4 more potentially affected by CVE-2024-8020 via lightning (1.9.5)

lightning PYPI version 1.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on lightning and may be impacted: - medical-data 0.2.0.dev0 - ptlflow =0.3.0, =0.0.1, =0.1.0, =0.2.13, =0.3.3 Source cves: CVE-2024-8020 Source advisory: OSV:PYSEC-2026-3971...

medical-data (0.2.0.dev0), ptlflow (>=0.3.0, <=0.3.2) +4 more potentially affected by CVE-2026-31221 via lightning (1.9.5)

lightning PYPI version 1.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on lightning and may be impacted: - medical-data 0.2.0.dev0 - ptlflow =0.3.0, =0.0.1, =0.1.0, =0.2.13, =0.3.3 Source cves: CVE-2026-31221 Source advisory: OSV:PYSEC-2026-3972...

CVE-2026-52723

In ePA 3.x Integration versions prior to 1.3.0, app/vau/VAUProtokoll.py validates the VAU server certificate without anchoring it to independent trusted material, creating a circular trust relationship. Combined with disabled TLS certificate verification, a network-positioned attacker can interce...

Some Claude Chats Are Searchable on Google

And it's personal information alternate link: The exposed data includes an AI-powered therapy app that someone appears to have vibe-coded, notes on meetings, and a dashboard someone made apparently to analyze medical billing data. Exposed chats reportedly include private cryptocurrency wallet key...

medical-data (0.2.0.dev0), ptlflow (>=0.3.0, <=0.3.2) +4 more potentially affected by CVE-2026-58659 via lightning (1.9.5)

lightning PYPI version 1.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on lightning and may be impacted: - medical-data 0.2.0.dev0 - ptlflow =0.3.0, =0.0.1, =0.1.0, =0.2.13, =0.3.3 Source cves: CVE-2026-58659 Source advisory: OSV:GHSA-QQMF-GPG7-G8GW...

medical-data (0.2.0.dev0), ptlflow (>=0.3.0, <=0.3.2) +4 more potentially affected by CVE-2026-58659 via lightning (1.9.5)

lightning PYPI version 1.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on lightning and may be impacted: - medical-data 0.2.0.dev0 - ptlflow =0.3.0, =0.0.1, =0.1.0, =0.2.13, =0.3.3 Source cves: CVE-2026-58659 Source advisory: OSV:PYSEC-2026-3624...

medical-data (0.2.0.dev0), ptlflow (>=0.3.0, <=0.3.2) +4 more potentially affected by CVE-2024-5980 via lightning (1.9.5)

lightning PYPI version 1.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on lightning and may be impacted: - medical-data 0.2.0.dev0 - ptlflow =0.3.0, =0.0.1, =0.1.0, =0.2.13, =0.3.3 Source cves: CVE-2024-5980 Source advisory: OSV:PYSEC-2026-386...

medical-data (0.2.0.dev0), ptlflow (>=0.3.0, <=0.3.2) +4 more potentially affected by CVE-2024-5452 via lightning (1.9.5)

lightning PYPI version 1.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on lightning and may be impacted: - medical-data 0.2.0.dev0 - ptlflow =0.3.0, =0.0.1, =0.1.0, =0.2.13, =0.3.3 Source cves: CVE-2024-5452 Source advisory: OSV:PYSEC-2026-385...

MphRx Minerva Access Control Vulnerability

MphRx Minerva is a medical data integration and interoperability platform developed by MphRx Corporation. Version MphRx Minerva V3.6.0 contains a security vulnerability related to access control. This vulnerability stems from an insecure direct object reference in the /minerva/moUser/show endpoin...

Bell Ambulance Confirms Data Breach Affecting 237,830 Individuals

Bell Ambulance disclosed a data breach impacting 237,830 individuals after unauthorized access to its network exposed personal and medical data...

EUVD-2019-8052

Malware in sbrugna...

EUVD-2024-21203

Malicious code in bioql PyPI...

FBI Warns of Health Insurance Scam Stealing Personal and Medical Data

The Federal Bureau of Investigation FBI has issued a warning about a scam where criminals pretend to be…...

CVE-2019-18254

BIOTRONIK CardioMessenger II, The affected products do not encrypt sensitive information while at rest. An attacker with physical access to the CardioMessenger can disclose medical measurement data and the serial number from the implanted cardiac device the CardioMessenger is paired with...

Patient Record Management System dental_pending.php File SQL Injection Vulnerability

Patient Record Management System is a medical record management system. Patient Record Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the parameter ID of the /dentalpending.php file. An attacker can exploit...

Hard drives containing sensitive medical data found in flea market

Somebody bought a batch of 15 GB hard drives from a flea market, and during a routine check of the contents they found medical data about hundreds of patients. After some more investigation in the Netherlands, it turned out the data came from a software provider in the medical industry which had...

PT-2025-5866 · Unknown · Orthanc Dicom Server

Name of the Vulnerable Software and Affected Versions: Orthanc DICOM Server versions prior to 1.5.8 Description: The issue allows unauthorized access to medical images due to missing authentication. This exposes medical data to potential unauthorized access. Remote attackers can exploit this to...

U.S. Dept Of Defense: Air Force candidate PII + recruitment chat logs accessible via BAC/IDOR on █████████ (very large/significant exposure)

A vulnerability was discovered in a Department of Defense-owned Salesforce asset that allowed unauthorized access to sensitive personal information of Air Force candidates. The vulnerability stemmed from a misconfiguration in the Document object, which permitted an attacker to retrieve a large...