📦 Orthanc

Orthanc server versions before 1.5.8 have remote access enabled without basic authentication by default, allowing attackers to access medical imaging data without credentials. This affects all deploym...

This vulnerability in Orthanc allows authenticated users with API access to overwrite arbitrary files on the file system. In specific deployment scenarios, attackers can overwrite the configuration fi...