PT-2014-6463

Name of the Vulnerable Software and Affected Versions CareFusion Pyxis SupplyStation version 8.1 with hardware test tool version 1.0.16 and earlier Description The issue concerns a hardcoded database password, which can be exploited by local users to gain privileges. This can be achieved by...

CVE-2014-5420: Undefined Security Weakness

CareFusion Pyxis SupplyStation 8.1 with hardware test tool before 1.0.16 has a hardcoded application password, which makes it easier for remote authenticated users to obtain application-file access via unspecified vectors...

CVE-2014-5423: Undefined Security Weakness

CareFusion Pyxis SupplyStation 8.1 with hardware test tool before 1.0.16 allows local users to obtain potentially sensitive information by reading a temporary 1 debugging file or 2 developer file...

PT-2014-6465

Name of the Vulnerable Software and Affected Versions CareFusion Pyxis SupplyStation version 8.1 with hardware test tool versions prior to 1.0.16 Description The issue allows local users to obtain potentially sensitive information by reading temporary files, specifically 1 debugging files or 2...

CVE-2014-5421: Undefined Security Weakness

CareFusion Pyxis SupplyStation 8.1 with hardware test tool 1.0.16 and earlier has a hardcoded database password, which makes it easier for local users to gain privileges by leveraging cabinet access...

CVE-2014-5422: Undefined Security Weakness

CareFusion Pyxis SupplyStation 8.1 with hardware test tool before 1.0.16 has a hardcoded service password, which makes it easier for remote attackers to obtain access via unspecified vectors...

PT-2014-6462

Name of the Vulnerable Software and Affected Versions CareFusion Pyxis SupplyStation version 8.1 with hardware test tool versions prior to 1.0.16 Description The issue concerns a hardcoded application password, making it easier for remote authenticated users to obtain application-file access...

CareFusion Pyxis SupplyStation System Vulnerabilities

OVERVIEW Independent researcher Billy Rios identified authentication vulnerabilities in CareFusion’s Pyxis SupplyStation system. CareFusion has implemented additional controls to mitigate some of these vulnerabilities in the SupplyStation system. Some of the reported vulnerabilities could be...

MERCURY/Templates mercury.ASP SQL Injection

MERCURY/Templates mercury.ASP SQL Injection Credit : CodeXpLoder'tq mail : codexploderathotmaildotcom site : Biyosecurity.net,expw0rm.com thx : BiyoSecurityTeam 1- example.com/patch/mercury.asp?pageid=1&newsid=sql methot 1- example.com/templates/mercury.asp?pageid=1&newsid=sql methot...