CVE-2024-23747

CVE-2024-23747 El Sistema de Gestión Hospitalaria ModernaNet 2024 de Moderna Sistemas es susceptible a una vulnerabilidad de Referencia Directa a Objetos Insegura IDOR. PoC Esta vulnerabilidad reside en el manejo que hace el sistema del acceso a los datos de usuario a través de una URL...

FBI agents’ blood tests and doctors’ notes surface after breach

BBC News reports it has seen samples of stolen FBI agents’ medical examinations. The “fitness-for-work” reports identify FBI agents by name and address, and reveal even more personal details. They include blood and urine test results and doctors’ notes mentioning high cholesterol, blood in the...

CVE-2025-29009

CVE-2025-29009 WordPress Medical Prescription Attachment Plugin for WooCommerce = 1.2.3 es vulnerable a una subida arbitraria de archivos de prioridad alta CVE-2025-29009 Webkul Medical Prescription Attachment — Subida de archivos sin restricciones → Web Shell ,-. . , ,--. ,-. ,-. ,-. ;--' ,-. ,-...

CVE-2025-29009-POC

CVE-2025-29009-POC Plugin de Adjunto de Recetas Médicas para WooCommerce = 1.2.3 - Carga Arbitraria de Archivos No Autenticada. Mira la demostración aquí: https://youtu.be/WvW2shDBIFs...

Astra Linux – Vulnerability in dcmtk

DCMTK through version 3.6.6 does not handle memory deallocation properly. The object in the program is freed, but its address is still used in other locations. Sending specific requests to the dcmqrdb program will lead to a double-free. An attacker can use this vulnerability to launch a DoS attac...

CVE-2026-44715

OpenMRS is an open source electronic medical record system platform. Prior to versions 1.23.0 and 2.10.0, an authenticated user can trigger administrative DWR services. Specifically, the startHl7ArchiveMigration method is accessible, which should be restricted to admin-level accounts. Versions...

CVE-2026-87020

creationtimestamp| type| source ---|---|--- 2026-09-10 16:15:27+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-253-02 2026-09-10 20:01:51+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mv6ts5ifxy2y...

CVE-2026-82578

creationtimestamp| type| source ---|---|--- 2026-09-10 16:05:49+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mv6gm3rxy52o 2026-09-10 16:15:33+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-253-01...

CVE-2026-78224

creationtimestamp| type| source ---|---|--- 2026-09-10 16:05:49+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mv6gm3rxy52o 2026-09-10 16:15:31+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-253-01...

CVE-2026-82583

creationtimestamp| type| source ---|---|--- 2026-09-10 16:05:49+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mv6gm3rxy52o 2026-09-10 16:15:29+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-253-01...

CVE-2026-82181

Medical Practice Management System developed by Le-yan has a Sensitive Data in URL vulnerability. Unauthenticated remote attackers can obtain sensitive information via victim's browser history or log files...

CVE-2026-82181 Le-yan｜Medical Practice Management System - Sensitive Data in URL

Medical Practice Management System developed by Le-yan has a Sensitive Data in URL vulnerability. Unauthenticated remote attackers can obtain sensitive information via victim's browser history or log files...

CVE-2026-82181: Use of GET Request Method With Sensitive Query Strings

Medical Practice Management System developed by Le-yan has a Sensitive Data in URL vulnerability. Unauthenticated remote attackers can obtain sensitive information via victim's browser history or log files...

PT-2026-83155

Medical Practice Management System developed by Le-yan has a Sensitive Data in URL vulnerability. Unauthenticated remote attackers can obtain sensitive information via victim's browser history or log files...

CVE-2026-78685

Medical Practice Management System developed by Le-yan has a Remote Code Execution vulnerability. Unauthenticated remote attackers can execute arbitrary OS commamnds via a crafted HTML page...

CVE-2026-78685 Le-yan｜Medical Practice Management System - Remote Code Execution

Medical Practice Management System developed by Le-yan has a Remote Code Execution vulnerability. Unauthenticated remote attackers can execute arbitrary OS commamnds via a crafted HTML page...

CVE-2026-78685 Le-yan｜Medical Practice Management System - Remote Code Execution

Medical Practice Management System developed by Le-yan has a Remote Code Execution vulnerability. Unauthenticated remote attackers can execute arbitrary OS commamnds via a crafted HTML page...

CVE-2026-78685

CVE-2026-78685 affects the Le-yan Medical Practice Management System , a web-based application for managing medical practices. The vulnerability is a Remote Code Execution (RCE) flaw that allows unauthenticated remote attackers to execute arbitrary OS commands by serving a crafted HTML page that ...

CVE-2026-78685: Improper Verification of Source of a Communication Channel

Medical Practice Management System developed by Le-yan has a Remote Code Execution vulnerability. Unauthenticated remote attackers can execute arbitrary OS commamnds via a crafted HTML page...

CVE-2026-19417

The KiviCare WordPress plugin before 4.5.4 does not verify that the requesting user is entitled to the media file being served, allowing authenticated patient-level users to download any file in the media library, including other patients' uploaded medical reports...