89168 matches found
CVE-2025-14753
IBM Cloud Pak for Data 5.1.2 is vulnerable to a path traversal (CWE-22) attack. A remote, unauthenticated attacker can send a specially crafted URL containing "dot dot" (/../) sequences to traverse directories and view arbitrary files on the system, potentially exposing sensitive information. The...
EUVD-2025-210936
IBM Cloud Pak for Data 5.1.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system...
CVE-2025-1350
IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...
CVE-2025-13882
IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0 through 6.3.0.2, and 6.2.4.0 through 6.2.4.4 and IBM Sterling Partner Engagement Manager Standard Edition 6.2.4.0 through 6.2.4.4 could allow an unauthenticated user to cause a denial of service in the email service due to imprope...
CVE-2024-56344
IBM Cognos Analytics 12.0.4 through 12.0.4 FP2, and 12.1.0 through 12.1.3 FP1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using...
EUVD-2025-210934
IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0 through 6.3.0.2, and 6.2.4.0 through 6.2.4.4 and IBM Sterling Partner Engagement Manager Standard Edition 6.2.4.0 through 6.2.4.4 could allow an unauthenticated user to cause a denial of service in the email service due to imprope...
CVE-2025-13882 Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager.
IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0 through 6.3.0.2, and 6.2.4.0 through 6.2.4.4 and IBM Sterling Partner Engagement Manager Standard Edition 6.2.4.0 through 6.2.4.4 could allow an unauthenticated user to cause a denial of service in the email service due to imprope...
CVE-2025-13882
IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0–6.3.0.2, 6.2.4.0–6.2.4.4, and Standard Edition 6.2.4.0–6.2.4.4 could allow an unauthenticated remote attacker to cause a denial of service in the email service due to improper control of interaction frequency (CWE-799). The CVSS 3...
EUVD-2025-210933
IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...
CVE-2025-1350
IBM Controller (also known as IBM Cognos Controller) versions 11.0.0 through 11.0.1 FP7 and 11.1.0 through 11.1.3 FP1 are affected by a sensitive information disclosure vulnerability (CWE-209). A remote, unauthenticated attacker can obtain sensitive information when a detailed technical error mes...
CVE-2024-56344
IBM Cognos Analytics versions 12.0.4 through 12.0.4 FP2 and 12.1.0 through 12.1.3 FP1 are affected by a failure to properly enable HTTP Strict Transport Security (HSTS) , classified as CWE-327 (Use of a Broken or Risky Cryptographic Algorithm). A remote attacker with no privileges can exploit thi...
EUVD-2024-55771
IBM Cognos Analytics 12.0.4 through 12.0.4 FP2, and 12.1.0 through 12.1.3 FP1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using...
tivoli-poc
tivoli-poc CVE-2017-1635 PoC 코드 CVEID: CVE-2017-1635 CVSS 기본 점수: 8 영향받는 제품 및 버전: IBM Tivoli Monitoring Basic Services KGL, KAX의 KDH 구성 요소, 버전 6.2.2.0부터 6.2.2.9까지 IBM Tivoli Monitoring 기본 서비스에서 제공하는 내부 웹 서버에 취약점이 존재합니다. 이 취약점은 use-after-free 오류로 인해 원격 공격자가 시스템에서 임의의 코드를 실행할 수 있게 합니다. 원격 공격자는 이 취약점...
Tivoli-Madness
Tivoli-Madness 권고 사항: CVE-2020-28054: JamoDat – TSMManager Collector v. = 6.5.0.21에 영향을 미치는 권한 우회 취약점 IBM Tivoli Storage Manager 명령줄 관리 인터페이스 버전 5, 릴리스 2, 레벨 0.1에 영향을 미치는 스택 기반 버퍼 오버플로우 안타깝게도, Hackerone의 트라이어저와 가장 무례한 만남을 가진 후, 다음과 같은 결론을 얻었습니다: IBM Tivoli Storage Manager는 지원이 종료되어 패치되지 않을 것입니다...
CVE-2026-9198
🚨 CVE-2026-9198 IBM Langflow OSS 자동 로그인 우회를 통한 무인증 RCE 📋 개요 CVE-2026-9198 는 IBM Langflow OSS에서 발생하는 치명적인 무인증 원격 코드 실행RCE 취약점입니다. 이 익스플로잇은 두 가지 취약점을 연쇄적으로 이용합니다: CVE-2026-9103 : 무인증 호출자에게 슈퍼유저 JWT 토큰을 부여하는 자동 로그인 우회 CVE-2026-8481 : 임의 Python 코드 실행을 허용하는 /api/v1/validate/code 엔드포인트의 코드 인젝션 ⚠️ 경고 : 이...
CVE-2007-3830
CVE-2007-3830 IBM Proventia Sensor Appliance - 다중 입력 검증 취약점 Exploit-db 게시물: https://www.exploit-db.com/exploits/30290/ Exploit-db 논문: https://www.exploit-db.com/docs/english/13081-having-fun-with-proventia-gx5108-&-gx5008-insecurities.pdf Git 저장소:...
BRIntelcollector
BRIntelcollector Обзор BRIntelcollector — это инструмент киберразведки CTI, ориентированный на национальные индикаторы угроз Бразилии. Инструмент позволяет искать и консолидировать информацию о киберугрозах из нескольких источников разведки, облегчая создание централизованной базы данных для...
CVE-2023-45182
CVE-2023-45182 IBM i Access Client Solutions 1.1.9.4 - 취약한 비밀번호 암호화 타임라인 취약점 공급업체에 보고: 22.09.2023 수정된 1.1.9.4 버전 출시: 08.12.2023 공개 공개: 15.12.2023 설명 IBM i Access Client Solutions는 사용자 비밀번호를 저장하기 위해 AES 알고리즘을 사용하지만, 16바이트 암호화 키는 정적 문자열Thanatos과 다른 정적 문자열Behemoth과 사용자 이름, 사용자의 홈 폴더, OS예: Linux, 그리고...
sqlmap
sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...