OpenEMR Arbitrary Command Execution

The vulnerability of the OpenEMR system for medical documentation lies in the lack of measures to neutralize certain special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

OpenEMR Privilege Escalation

The vulnerability of the OpenEMR system for medical documentation is related to improper behavior patterns. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges...

OpenEMR SRF

The vulnerability of the OpenEMR system for medical documentation is related to insufficient validation of requests on the server side. Exploiting this vulnerability could allow a malicious actor to execute a SRF attack remotely...

Data Poisoning Vulnerabilities across Healthcare AI Architectures: A Security Threat Analysis

Healthcare AI systems face major vulnerabilities to data poisoning that current defenses and regulations cannot adequately address. We analyzed eight attack scenarios in four categories: architectural attacks on convolutional neural networks, large language models, and reinforcement learning...