47 matches found
CVE-2023-25200
The CVE-2023-25200 entry concerns MT Safeline X-Ray X3310 Webserver NXG 19.05 with an HTML injection vulnerability that can cause a remote attacker to render malicious HTML in a victim's browser and access sensitive information. Red Hat and other sources describe it as an HTML injection/XSS issue...
CVE-2023-25200
An HTML injection vulnerability exists in the MT Safeline X-Ray X3310 webserver version NXG 19.05 that enables a remote attacker to render malicious HTML and obtain sensitive information in a victim's browser...
Friday Squid Blogging: Multiplexing SQUIDs for X-ray Telescopes
NASA is researching new techniques for multiplexing SQUIDs--thats superconducting quantum interference devices--for X-ray observatories. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my blog posting guidelines here...
The NYPD Had a Secret Fund for Surveillance Tools
Documents reveal that police bought facial-recognition software, vans equipped with x-ray machines, and “stingray” cell site simulators—with no public oversight...
The vulnerability of the "instanceof" operator in Mozilla Firefox allows attackers to influence data integrity.
The vulnerability of the “instanceof” operator in Mozilla Firefox is related to the mechanism for handling X-rays. Exploiting this vulnerability allows a remote attacker to influence the integrity of data...
Critical, Unpatched Bug Opens GE Radiological Devices to Remote Code Execution
A pair of critical vulnerabilities have been discovered in dozens of GE Healthcare radiological devices popular in hospitals, which could allow an attacker to gain access to sensitive personal health information PHI, alter data and even shut the machine’s availability down. The flaws affect 100...
Microsoft Launches Free Linux Forensics and Rootkit Malware Detection Service
Microsoft has announced a new free-to-use initiative aimed at uncovering forensic evidence of sabotage on Linux systems, including rootkits and intrusive malware that may otherwise go undetected. The cloud offering, dubbed Project Freta, is a snapshot-based memory forensic mechanism that aims to...
Hackers Behind Healthcare Espionage Infect X-Ray and MRI Machines
Security researchers have uncovered a new hacking group that is aggressively targeting healthcare organizations and related sectors across the globe to conduct corporate espionage. Dubbed "Orangeworm," the hacking group has been found installing a wormable trojan on machines hosting software used...
The vulnerabilities of the M3000 Terminal and M3210 Terminal authentication services, the M3000 Desktop software, the MAC4 Controller, the SensorX23 X-ray Machine and SensorX25 X-ray Machine, the MWS2 Weighing System – these all allow a intruder to gain unauthorized access to the administrators’ control over the respective devices.
The vulnerabilities of the M3000 Terminal and M3210 Terminal authentication services, the M3000 Desktop software, the MAC4 Controller, the SensorX23 X-ray Machine and SensorX25 X-ray Machine, as well as the MWS2 Weighing System are related to the use of unchangeable, pre-set system accounts...
Hardcoded credentials
A Hard-Coded Passwords issue was discovered in Marel Food Processing Systems M3000 terminal associated with the following systems: A320, A325, A371, A520 Master, A520 Slave, A530, A542, A571, Check Bin Grader, FlowlineQC T376, IPM3 Dual Cam v132, IPM3 Dual Cam v139, IPM3 Single Cam v132, P520,...
Multiple Marel Products Security Bypass Vulnerabilities
The Marel SensorX25 X-ray Machine and other products from Marel Iceland are used in the medical industry to provide a wide range of medical tests. A security bypass vulnerability exists in a number of Marel products and stems from the program's use of hard-coded certificates. A remote attacker...
Simulator X-Ray Bag Joke - Dynamic Code Loading, External URLs, Native code usage vulnerabilities
HackApp vulnerability scanner discovered that application Simulator X-Ray Bag Joke published at the 'play' market has multiple vulnerabilities...
X-ray Body Scanner Prank - Dynamic Code Loading, External URLs, Suspicious files vulnerabilities
HackApp vulnerability scanner discovered that application X-ray Body Scanner Prank published at the 'play' market has multiple vulnerabilities...
X-Ray Scanner - Base64 encoded String, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application X-Ray Scanner published at the 'play' market has multiple vulnerabilities...
X-Ray Scanner Clothes Prank - Dynamic Code Loading, External URLs, SD-card access vulnerabilities
HackApp vulnerability scanner discovered that application X-Ray Scanner Clothes Prank published at the 'play' market has multiple vulnerabilities...
World’s First 200GB microSD Card Arrives
There isn't any troll in the title. The "World's Largest microSD" card sized at 200GB is now officially available for purchasing from Amazon and number of retailers. So, Is your 16GB, or 32GB, or even 64GB smartphone not enough to store all your data in one place? Order a Sandisk's new...
Malicious Infrared X-Ray Android app infecting users in Japan
Researchers are already warning that malware authors developing more sophisticated attack techniques for mobile devices, using encryption and randomization or hiding malicious code in image files. As analyzed by Symantec a malicious Infrared X-Ray Android application, attempting to lure Android...
Google Updates Chrome for Android, Fixes Several Vulnerabilities
Google has issued a security update for its Chrome operating system on Android devices, resolving seven medium-risk vulnerabilities and paying out a total of $3,500 in rewards to two researchers. On the Google Chrome Blog, software engineer Jay Civelli wrote that the update strengthens Chrome for...
New X-Ray Android Security App Scans Devices For Vulnerabilities
Mobile security has become a major concern both for consumers and for enterprises worried about the integrity of their sensitive data. Part of that worry centers on the security of the apps on mobile devices, something that’s largely unknowable in a lot of cases right now. Duo Security today is...