105 matches found
CVE-2023-30990
CVE-2023-30990 漏洞利用 详见我们的博客文章：https://blog.silentsignal.eu/2025/09/04/Exploit-development-for-IBM-i/ Python 脚本需要 ebcdic 模块：pip install ebcdic DRDA S38CMD 方法 root@kitploit: python3 ddm.py "" DRDA SQL 方法 root@kitploit: python3 ddm-bypass-test.py "" 使用 S38CMD 方法的简单 bindshell root@kitploit: ./exploit...
EUVD-2026-75759
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow an attacker with the ability to control or impersonate a DRDA server endpoint to execute arbitrary commands on Db2 clients due to a stack-based buffer overflow that improperly copies user-controlled data into a fixed-size stack...
CVE-2026-86093
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow an attacker with the ability to control or impersonate a DRDA server endpoint to execute arbitrary commands on Db2 clients due to a stack-based buffer overflow that improperly copies user-controlled data into a fixed-size stack...
CVE-2026-86093 IBM® Db2® federated server could allow an attacker with the ability to control or impersonate a DRDA server endpoint to execute arbitrary commands under certain conditions
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow an attacker with the ability to control or impersonate a DRDA server endpoint to execute arbitrary commands on Db2 clients due to a stack-based buffer overflow that improperly copies user-controlled data into a fixed-size stack...
CVE-2026-86093
IBM Db2 versions 11.5.0–11.5.9 and 12.1.0–12.1.5 (Client, Server, and Db2 Connect editions, all platforms) are affected by a stack-based buffer overflow (CWE-121) in the DRDA server endpoint handling. An attacker who can control or impersonate a DRDA server endpoint can copy user-controlled data ...
CVE-2026-86093 IBM® Db2® federated server could allow an attacker with the ability to control or impersonate a DRDA server endpoint to execute arbitrary commands under certain conditions
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow an attacker with the ability to control or impersonate a DRDA server endpoint to execute arbitrary commands on Db2 clients due to a stack-based buffer overflow that improperly copies user-controlled data into a fixed-size stack...
Security Bulletin: IBM® Db2® federated server could allow an attacker with the ability to control or impersonate a DRDA server endpoint to execute arbitrary commands under certain conditions (CVE-2026-86093)
Summary IBM® Db2® federated server could allow an attacker with the ability to control or impersonate a DRDA server endpoint to execute arbitrary commands on Db2 clients due to a stack-based buffer overflow that improperly copies user-controlled data into a fixed-size stack buffer without bounds...
PT-2026-89600
🚨 CVE-2026-86093 IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow an attacker with the ability to control or impersonate a DRDA server endpoint to execute arbitrary commands on Db2 clients due to a stack-based buffer overflow that improperly copies user-controlled data into a...
CVE-2026-18221
IBM i versions 7.3 through 7.6 are vulnerable to improper authentication (CWE-287) in Distributed Data Management (DDM) / Distributed Relational Database Architecture (DRDA) . A remote attacker with no privileges or user interaction can gain unauthorized access by supplying crafted authentication...
CVE-2026-18221 IBM i is Affected By Improper Authorization and Authentication Vulnerabilities in DDM / DRDA [, ]
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to gain unauthorized access due to improper validation of client-supplied authentication parameters...
Security Bulletin: IBM i is Affected By Improper Authorization and Authentication Vulnerabilities in DDM / DRDA [CVE-2026-18175, CVE-2026-18221]
Summary IBM i is vulnerable to manipulation of database transactions due to improper authorization CVE-2026-18175 and allowing unathorized access due to improper validation CVE-2026-18221 in Distributed Data Management DDM / Distributed Relational Database Architecture DRDA as described in the...
Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in Host Servers
Summary IBM i is vulnerable to multiple vulnerabilities CVE-2026-17223, CVE-2026-17206, CVE-2026-17208, CVE-2026-16929, CVE-2026-17004, CVE-2026-18846, CVE-2026-17197, CVE-2026-17217, CVE-2026-17199, CVE-2026-17229, CVE-2026-16982 in host servers, and a buffer overflow CVE-2026-17220 in host,...
CVE-2026-17216
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an integer error when processing DRDA large-object headers...
CVE-2026-17076
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to improper processing of DRDA and DDM resynchronization requests...
CVE-2026-17216
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an integer error when processing DRDA large-object headers...
CVE-2026-17216 IBM i is Affected By Multiple Vulnerabilities in DRDA / DDM
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an integer error when processing DRDA large-object headers...
EUVD-2026-58402
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an integer error when processing DRDA large-object headers...
CVE-2026-17216
CVE-2026-17216 affects IBM i 7.6, 7.5, 7.4, and 7.3. A remote attacker could cause a denial of service due to an integer error when processing DRDA large-object headers. The CVSS v3.1 base score is 5.3 (Medium) with network attack vector, no user interaction required, and availability impact desc...
CVE-2026-17078
CVE-2026-17078 affects IBM i releases 7.6, 7.5, 7.4, and 7.3 (5770-SS1) due to a denial of service from resource exhaustion in DRDA / DDM. The vulnerability is remote and can be triggered without user interaction. Affected versions have published fixes via PTFs SJ10836 (7.6), SJ10837 (7.5), SJ108...