CVE-2025-7389

A vulnerability in the AdminServer component of OpenEdge on all supported platforms grants its authenticated users OS-level access to the server through the adopted authority of the AdminServer process itself. The delegated authority of the AdminServer could allow its users the ability to read...

CVE-2024-53919

Barco ClickShare CX-30/20, C-5/10, and ClickShare Bar Pro/Core models running firmware before 2.21.1 are affected by an injection vulnerability in the webUI that allows physically proximate attackers or local admins to trigger OS-level command execution as root. The issue affects the web interfac...

CVE-2020-5805

In Marvell QConvergeConsole GUI = 5.5.0.74, credentials are stored in cleartext in tomcat-users.xml. OS-level users on the QCC host who are not authorized to use QCC may use the plaintext credentials to login to QCC...

Sony IPELA ENGINE IP Cameras Backdoor Accounts

We have published an accompanying blog post to this technical advisory with further information: http://blog.sec-consult.com/2016/12/backdoor-in-sony-ipela-engine-ip-cameras.html SEC Consult Vulnerability Lab Security Advisory ======================================================================...