Toshiba VFAS3-4300PCE ASD Drive Detection

Binary data 757965.prm...

The vulnerability of the DataPump component of the Oracle Database Server RDBMS system allows a hacker to gain full control over the system.

The vulnerability of the RDBMS DataPump component of the Oracle Database Server management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, who has administrative privileges as a database administrator, to gain full control over the...

New Breed of Fuel Pump Skimmer? Not Really

Fraud investigators say they've uncovered a sophisticated new breed of credit card skimmers being installed at gas pumps that is capable of relaying stolen card data via mobile text message. KrebsOnSecurity has since learned those claims simply don't hold water. An earlier version of this story...

Critical Flaws in Syringe Pump, Device Gateways Threaten Patient Safety

Two previously undocumented, critical vulnerabilities in widely deployed medical devices have sparked patient-safety and data-privacy concerns. Flaws in the Qualcomm Life Capsule Datacaptor Terminal Server and the Becton Dickinson BD Alaris TIVA Syringe Pump have been acknowledged by the vendors...

Multiple BD products improperly certified for loopholes

BD Alaris GS, etc. are different series of medical syringe pump products from BD USA. The improper authentication vulnerability exists in multiple BD products and stems from the software failing to perform authentication for functions that require authentication. A remote attacker could use this...

CVE-2018-14781

CVE-2018-14781 affects Medtronic MiniMed MMT-500/MMT-503 Remote Controllers and related pumps (e.g., MMT-508, MMT-511/512/712, MMT-515/723, MMT-522/723 REAL-TIME, MMT-551/751, etc.). Root cause: Authentication Bypass by Capture-replay when paired with a remote controller with non-default easy bol...

CVE-2018-10634

CVE-2018-10634 affects Medtronic MiniMed MMT-500/MMT-503 Remote Controllers and related pumps. The vulnerability stems from cleartext transmission of sensitive information between the pump and wireless accessories, enabling potential information disclosure (e.g., device serial numbers). A separat...

CVE-2018-14781 Medtronic MiniMed MMT-500/MMT-503 Remote Controllers Authentication Bypass by Capture-replay

Medtronic MiniMed MMT devices when paired with a remote controller and having the “easy bolus” and “remote bolus” options enabled non-default, are vulnerable to a capture-replay attack. An attacker can capture the wireless transmissions between the remote controller and the pump and replay them t...

CVE-2018-10634

Communications between Medtronic MiniMed MMT pumps and wireless accessories are transmitted in cleartext. A sufficiently skilled attacker could capture these transmissions and extract sensitive information, such as device serial numbers...

Information disclosure

Medtronic MMT 508 MiniMed insulin pump, 522 / MMT - 722 Paradigm REAL-TIME, 523 / MMT - 723 Paradigm Revel, 523K / MMT - 723K Paradigm Revel, and 551 / MMT - 751 MiniMed 530G communications between the pump and wireless accessories are transmitted in cleartext. A sufficiently skilled attacker cou...

Gas Pump Hack

This is weird: Police in Detroit are looking for two suspects who allegedly managed to hack a gas pump and steal over 600 gallons of gasoline, valued at about $1,800. The theft took place in the middle of the day and went on for about 90 minutes, with the gas station attendant unable to thwart th...

Crooks hack gas station fuel pump to steal 600 gallons of gas

By Uzair Amir We have read about credit card skimmers at ATMs or This is a post from HackRead.com Read the original post: Crooks hack gas station fuel pump to steal 600 gallons of gas...

How to Avoid Card Skimmers at the Pump

Previous stories here on the proliferation of card-skimming devices hidden inside fuel pumps have offered a multitude of security tips for readers looking to minimize their chances of becoming the next victim, such as favoring filling stations that use security cameras and tamper-evident tape on...

grit-pump.com XSS vulnerability

Open Bug Bounty ID: OBB-588493 Description| Value ---|--- Affected Website:| grit-pump.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-12721

An Improper Certificate Validation issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. The pump does not validate host certificates, leaving the pump vulnerable to a man-in-the-middle MITM attack...

Improper access control

An Improper Access Control issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. The FTP server on the pump does not require authentication if the pump is configured to allow FTP connections...

CVE-2017-12720

An Improper Access Control issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. The FTP server on the pump does not require authentication if the pump is configured to allow FTP connections...

CVE-2017-12718

A Classic Buffer Overflow issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. A third-party component used in the pump does not verify input buffer size prior to copying, leading to a buffer overflow, allowing remote code execution on t...

CVE-2017-12721

An Improper Certificate Validation issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. The pump does not validate host certificates, leaving the pump vulnerable to a man-in-the-middle MITM attack...

CVE-2017-12725

A Use of Hard-coded Credentials issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. The pump with default network configuration uses hard-coded credentials to automatically establish a wireless network connection. The pump will establis...