Animas OneTouch Ping insulin pump contains multiple vulnerabilities

Overview The Animas OneTouch Ping insulin pump contains multiple vulnerabilities that may allow an unauthenticated remote attacker to obtain patient treatment or device data, or execute commands on the device. The attacker cannot obtain personally identifiable information. Description CWE-319:...

Oracle Database Multiple Vulnerabilities (July 2016 CPU) (FREAK)

The remote Oracle Database Server is missing the July 2016 Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities : - A security feature bypass vulnerability, known as FREAK Factoring attack on RSA-EXPORT Keys, exists in the RDBMS HTTPS Listener package due to the suppo...

CVE-2016-3489

Unspecified vulnerability in the Data Pump Import component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows local users to affect confidentiality, integrity, and availability via unknown vectors...

CVE-2016-3489

Unspecified vulnerability in the Data Pump Import component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows local users to affect confidentiality, integrity, and availability via unknown vectors...

CVE-2016-3489

CVE-2016-3489 refers to an unspecified vulnerability in the Data Pump Import component of Oracle Database Server versions 11.2.0.4, 12.1.0.1, and 12.1.0.2. The issue is described as affecting confidentiality, integrity, and availability via unknown vectors, exploitable by local users. The connect...

CVE-2016-3489

Unspecified vulnerability in the Data Pump Import component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows local users to affect confidentiality, integrity, and availability via unknown vectors...

Unspecified Vulnerability in Oracle Database Server Data Pump Import Component

Oracle Database Server is an object-relational database management system. It provides an open, comprehensive, and integrated approach to information management. A security vulnerability exists in the Data Pump Import component of Oracle Database Server versions 11.2.0.4, 12.1.0.1, 12.1.0.2, whic...

Breastfeeding Feed Pump Track - Dangerous filesystem permissions, MIT license, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Breastfeeding Feed Pump Track published at the 'play' market has multiple vulnerabilities...

pump-world.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-127352 Description| Value ---|--- Affected Website:| pump-world.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet...

TECO JN5 L510-DriveLink 1.482 - .lf5 Overwrite Buffer Overflow (SEH)

TECO JN5 L510-DriveLink 1.482 - .lf5 Overwrite Buffer Overflow SEH !/usr/bin/perl TECO JN5 L510-DriveLink 1.482 SEH Overwrite Buffer Overflow Exploit Vendor: TECO Electric and Machinery Co., Ltd. Product web page: http://www.teco-group.eu Download:...

Hospira Lifecare PCA Infusion Pump Security Bypass Vulnerability

Hospira Lifecare PCA infusion Pump is a suite of smart infusion pump software from Hospira, USA. A security bypass vulnerability exists in Hospira Lifecare PCA Infusion Pump. An attacker could use this vulnerability to bypass authentication mechanisms and gain access to affected devices...

Hospira Lifecare PCA Infusion Pump Information Disclosure Vulnerability

Hospira Lifecare PCA infusion Pump is a suite of smart infusion pump software from Hospira, USA. An information disclosure vulnerability exists in Hospira Lifecare PCA Infusion Pump. An attacker could exploit this vulnerability to gain access to sensitive information...

Hospira Lifecare PCA Infusion Pump Arbitrary Command Execution Vulnerability

Hospira Lifecare PCA infusion pump is a suite of smart infusion pump software from Hospira USA. Failure to perform authentication for Telnet sessions in Hospira Lifecare PCA infusion pumps running SW ver 412 allows a remote attacker to gain root privileges by accessing the telnet service...

Authentication flaw

The communication module on the Hospira LifeCare PCA Infusion System before 7.0 does not require authentication for root TELNET sessions, which allows remote attackers to modify the pump configuration via unspecified commands...

CVE-2015-3459

The communication module on the Hospira LifeCare PCA Infusion System before 7.0 does not require authentication for root TELNET sessions, which allows remote attackers to modify the pump configuration via unspecified commands...

Hospira MedNet Vulnerabilitie

OVERVIEW Independent researcher Billy Rios has identified four vulnerabilities in Hospira’s MedNet server software. Hospira has released a new version of the MedNet software and provided mitigation recommendations that mitigate the reported vulnerabilities. Three of the four vulnerabilities could...

NIBE heat pump RCE exploit

No description provided by source. !/usr/bin/python import socket,sys,os,base64 NIBE heat pump RCE exploit Written by Jelmer de Hen Published at http://h.ackack.net/?p=302 Web interface is running with root rights def fingerheatpumpip, port: s = socket.socketsocket.AFINET, socket.SOCKSTREAM...

NIBE heat pump LFI exploit

No description provided by source. !/usr/bin/python import socket,sys,os,base64 NIBE heat pump LFI exploit Written by Jelmer de Hen Published at http://h.ackack.net/?p=302 Special thanks to Fredrik Nordberg Almroth and Mathias Karlsson for obtaining this information http://h.ackack.net/?p=274 whi...

Bluetooth Gas Pump Skimmer Scam Nets $2 Million

Thirteen men were indicted this week for allegedly using Bluetooth-enabled skimmers to steal more than $2 million from customers at gas stations across the Southern United States between 2012 and 2013. Documents released on Tuesday by the offices of Manhattan District Attorney Cyrus R. Vance, Jr...

Command Shell, Reverse TCP (via Firefox XPCOM script)

Creates an interactive shell via Javascript with access to Firefox's XPCOM API This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = :dynamic include Msf::Payload::Single include...