CVE-2025-7389

A vulnerability in the AdminServer component of OpenEdge on all supported platforms grants its authenticated users OS-level access to the server through the adopted authority of the AdminServer process itself. The delegated authority of the AdminServer could allow its users the ability to read...

CVE-2024-53919

Barco ClickShare CX-30/20, C-5/10, and ClickShare Bar Pro/Core models running firmware before 2.21.1 are affected by an injection vulnerability in the webUI that allows physically proximate attackers or local admins to trigger OS-level command execution as root. The issue affects the web interfac...

Sony IPELA ENGINE IP Cameras Backdoor Accounts

We have published an accompanying blog post to this technical advisory with further information: http://blog.sec-consult.com/2016/12/backdoor-in-sony-ipela-engine-ip-cameras.html SEC Consult Vulnerability Lab Security Advisory ======================================================================...