FDA, DHS Investigating St. Jude Device Vulnerabilities

The U.S. government has entered into the St. Jude-MedSec-Muddy Waters fray with an investigation into claims St. Jude medical devices are vulnerable to cyberattacks. The Food and Drug Administration and Department of Homeland Security also apparently disapprove of the approach taken by MedSec and...

St. Jude Alleges False Claims, Stock Manipulation in Suit Against Med Sec, Muddy Waters

St. Jude Medical yesterday filed a lawsuit alleging that investment research firm Muddy Waters and healthcare security research company Med Sec made false claims in a report focused on the security of St. Jude products. The report released Aug. 25 warned of potentially catastrophic cybersecurity...

classifieds.stcatharinesstandard.ca XSS vulnerability

Vulnerable URL: http://classifieds.stcatharinesstandard.ca/st-catharines/all-categories/search?searchtype=advancedsearchkeyword=%22%3E%3Csvg%20onload=prompt%22OPENBUGBOUNTY%22%3E Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 18:29 GMT...

Researchers: MedSec, Muddy Waters Set Bad Precedent With St. Jude Medical Short

Security researchers warn mixing vulnerability disclosures with stock market bets sets a troubling precedent that erodes confidence in the relationship between businesses and white hat hackers who help uncover threats. Researchers are responding to the unprecedented partnership between security...

Pacemaker Hacking Fears Rise With Critical Research Report

Pacemakers, defibrillators and other medical devices made by a leading medical equipment maker are vulnerable to potentially “catastrophic” cyberattacks. With relatively little effort tens of thousands of cardiac devices made by St. Jude Medical are vulnerable to attack, according a report releas...

Former Cardinals Scout Christopher Correa Sentenced Four Years for Houston Astros Hack

The Federal Court came down hard on a former scouting director for the St. Louis Cardinals on Monday, sentencing Christopher Correa to almost four years in prison for hacking into a computer system that belongs to the Houston Astros. Correa, who until last summer served as Director of Baseball...

stalbansnth.vic.edu.au XSS vulnerability

Open Bug Bounty ID: OBB-160139 Description| Value ---|--- Affected Website:| stalbansnth.vic.edu.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

stjohnqld.com.au XSS vulnerability

Vulnerable URL: http://www.stjohnqld.com.au/Search-Results.aspx?searchtext=%3C/script%3E%3Cimg%20src=x%20onerror=prompt/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

ead-shs.univ-st-etienne.fr XSS vulnerability

Vulnerable URL: https://ead-shs.univ-st-etienne.fr/claroline/backends/download.php?url=aHR0cDovL2cuZTxzdmcgb25sb2FkPWFsZXJ0KCJYU1NQT1NFRCIpPg===true=M2SIGTRAVAUX Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:|...

FC St. Pauli - Runtime privilege escalation, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application FC St. Pauli published at the 'play' market has multiple vulnerabilities...

ST MOSFET Finder - Customized SSL, GPL license, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application ST MOSFET Finder published at the 'play' market has multiple vulnerabilities...

addisonstjames.com XSS vulnerability

Vulnerable URL: http://www.addisonstjames.com/home.php?nats=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...

st-ebbes.oxon.sch.uk XSS vulnerability

Open Bug Bounty ID: OBB-139625 Description| Value ---|--- Affected Website:| st-ebbes.oxon.sch.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

stjosephsschool.ae XSS vulnerability

Vulnerable URL: http://www.stjosephsschool.ae/viewcomments.php?msg=%27%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6768821 Google...

stolaf.edu XSS vulnerability

Open Bug Bounty ID: OBB-114770 Description| Value ---|--- Affected Website:| stolaf.edu Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

st-andrews.ac.uk XSS vulnerability

Vulnerable URL: http://www.st-andrews.ac.uk/qoi/photos.htm?folder=exhibit2011=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 28.06.2016 Latest check for patch:| 28.06.2016 06:31 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

resourcelists.st-andrews.ac.uk vulnerability

Vulnerable URL: http://resourcelists.st-andrews.ac.uk/link?url=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 21.12.2015 Latest check for patch:| 21.12.2015 18:50 GMT Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0...

Honeywell HART DTM Vulnerability

OVERVIEW Alexander Bolshev of Digital Security has identified an improper input vulnerability in the CodeWrights GmbH HART Device Type Manager DTM library used in Honeywell’s HART DTM. CodeWrights GmbH has addressed the vulnerability with a new library, which Honeywell validated and released for...

Directory Traversal

Overview Versions of st prior to 0.2.5 are affected by a directory traversal vulnerability. Vulnerable versions fail to properly handle URL encoded dots, which caused %2e to be interpreted as . by the filesystem, resulting the potential for an attacker to read sensitive files on the server...

boutique-st-james.com XSS vulnerability

Open Bug Bounty ID: OBB-87669 Description| Value ---|--- Affected Website:| boutique-st-james.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...