12 matches found
physicianskinsolutions.com Cross Site Scripting vulnerability OBB-3651554
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
A Ride on the Wild Side with Hacking Heavyweight Sick Codes
Beverage of Choice: Krating Daeng Thai Red Bull Industry Influencer he Admires: Casey John Ellis What did you want to be when you grew up? A physician and nearly did Hobbies Present & Past: Motorcycling & Australian Football Bucket List: Continuing to discover new software Fun Fact: He currently...
OpenEMR <= 7.0.0 IDOR Vulnerability
OpenEMR is prone to an insecure direct object reference IDOR vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
OpenEMR 6.0.0 - 'noteid' Insecure Direct Object Reference (IDOR)
Exploit Title: OpenEMR 6.0.0 - 'noteid' Insecure Direct Object Reference IDOR Date: 31/08/2021 Exploit Author: Allen Enosh Upputori Vendor Homepage: https://www.open-emr.org Software Link: https://www.open-emr.org/wiki/index.php/OpenEMRDownloads Version: 6.0.0 Tested on: Linux CVE : CVE-2021-4035...
OpenEMR 6.0.0 - (noteid) Insecure Direct Object Reference Vulnerability
Exploit Title: OpenEMR 6.0.0 - 'noteid' Insecure Direct Object Reference IDOR Exploit Author: Allen Enosh Upputori Vendor Homepage: https://www.open-emr.org Software Link: https://www.open-emr.org/wiki/index.php/OpenEMRDownloads Version: 6.0.0 Tested on: Linux CVE : CVE-2021-40352 How to Reproduc...
PHPGurukul Hospital Management System has an unspecified vulnerability
PHPGurukul Hospital Management System is a PHP and MySQL based hospital management system. a security vulnerability exists in PHPGurukul Hospital Management System, which originates from admin-panel1.php in the software, which can delete unauthenticated authenticated physician entries. No details...
Hospital Management System 安全漏洞
PHPGurukul Hospital Management System is a PHP and MySQL based hospital management system. a security vulnerability exists in PHPGurukul Hospital Management System, which originates from admin-panel1.php in the software, which can delete unauthenticated authenticated physician entries. No details...
CVE-2020-27256
In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, a hard-coded physician PIN in the physician menu of the insulin pump allows attackers with physical access to change insulin therapy settings...
CVE-2020-27256
In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, a hard-coded physician PIN in the physician menu of the insulin pump allows attackers with physical access to change insulin therapy settings...
Physician, protect thyself: An ounce of prevention is worth a pound of cure
In part one of our Physician, protect thyself series, we recognized significant security problems within the healthcare industry that need addressing. Health organizations moving from the paper to the 'puter—a shift meant to improve care and overall patient experience—inadvertently introduced...
Small Medical Offices Biggest Risk to Patient Data Security, Privacy
Small physician practices, much like their small commercial business counterparts, have been the primary source of health care related data breaches, according to an analysis of breaches from 2009 to October 2012 released today by the Health Information Trust Alliance HITRUST. These smaller medic...
UAMS Alerts Patients to Data Breach Linked to Fired Resident
The University of Arkansas for Medical Sciences is letting some 1,500 patients know their information was kept without permission by a resident physician after she was terminated. The health care facility plans to mail impacted patients who had surgery or were seen by a neurosurgeon from January ...