Omar Crespo, Pentester, GM Sectec, Corp.

BASIS BBj < 25.00 Unauthenticated Arbitrary File Read RCE

Perle IOLAN STS/SCS Authenticated Command Injection via 'shell ps'

Buffalo TeraStation TS5400R Excessive File Permissions Information Disclosure

The Print Service component of Fiserv Originate Loans Peripherals (formerly Velocity Services) in unsupported version 2021.2.4 (build 4.7.3155.0011) uses deprecated .NET Remoting TCP channels that allow unsafe deserialization of untrusted data. When these

Glory RBG-100 Recycler System Local Privilege Escalation via Insecure File Permissions

Glory RBG-100 Recycler System Hard-coded OS Credentials