SuperMicro-Password-Scanner

Supermicro IPMI/BMC 平文パスワードスキャナ v20140622 by 1N3 https://crowdshield.com 使用方法: sh supermicroscan.sh proxy 概要: SupermicroのIPMI/BMC実装では、リモートの未認証攻撃者がポート49152を介してPSBlockファイルを要求することができます。この平文パスワードファイルには、IPMIのユーザー名とパスワード情報が含まれています。このスクリプトを使用すると、ユーザーはネットワークをスキャンして、パッチ適用が必要な脆弱なシステムを確認できます。 使用方法:...

Linux Distros Unpatched Vulnerability : CVE-2026-59785

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Host search in Frontend allows filtering by fields that are not displayed, including stored IPMI and PSK credentials. A user with read access can guess a...

DEBIAN-CVE-2026-59785

Host search in Frontend allows filtering by fields that are not displayed, including stored IPMI and PSK credentials. A user with read access can guess a credential and see from the search result whether the guess was right, letting them uncover it...

CVE-2026-59785

Host search in Frontend allows filtering by fields that are not displayed, including stored IPMI and PSK credentials. A user with read access can guess a credential and see from the search result whether the guess was right, letting them uncover it...

CVE-2026-59785 Hidden host credentials inferable via multiselect.get filtering

Host search in Frontend allows filtering by fields that are not displayed, including stored IPMI and PSK credentials. A user with read access can guess a credential and see from the search result whether the guess was right, letting them uncover it...

EUVD-2026-92397

Host search in Frontend allows filtering by fields that are not displayed, including stored IPMI and PSK credentials. A user with read access can guess a credential and see from the search result whether the guess was right, letting them uncover it...

CVE-2026-59785

The Frontend host search functionality is vulnerable to an information disclosure flaw due to improper filtering in multiselect.get . This allows users with read access to filter by hidden fields, specifically stored IPMI and PSK credentials . By observing differences in search results, an attack...

EUVD-2014-0890

Malware in sbrugna...

EUVD-2024-48911

Malicious code in bioql PyPI...

CVE-2024-8059

IPMI credentials may be captured in XCC audit log entries when the account username length is 16 characters...

CVE-2024-8059

IPMI credentials may be captured in XCC audit log entries when the account username length is 16 characters...

CVE-2024-8059

IPMI credentials may be captured in XCC audit log entries when the account username length is 16 characters...

CVE-2024-8059

CVE-2024-8059 concerns Lenovo XClarity Controller (XCC). The issue arises from the exposure of IPMI credentials in XCC audit log entries when the account username length is 16 characters. Affected software is Lenovo XCC; the root cause is credentials being captured in logs, leading to potential e...

CVE-2024-8059

IPMI credentials may be captured in XCC audit log entries when the account username length is 16 characters...

Security Bulletin: IBM BladeCenter Advanced Management Module (AMM), Integrated Management Module (IMM), and Integrated Management Module 2 (IMM2) Potential IPMI credentials Exposure (CVE-2014-0860)

Summary The administrative IPMI credentials for authenticating communications between the IBM BladeCenter Advanced Management Module AMM, Integrated Management Module IMM, and Integrated Management Module 2 IMM2 are stored in plaintext within the AMM firmware binaries. Vulnerability Details...

CVE-2014-0860

The firmware before 3.66E in IBM BladeCenter Advanced Management Module AMM, the firmware before 1.43 in IBM Integrated Management Module IMM, and the firmware before 4.15 in IBM Integrated Management Module II IMM2 contains cleartext IPMI credentials, which allows attackers to execute arbitrary...

Design/Logic Flaw

The firmware before 3.66E in IBM BladeCenter Advanced Management Module AMM, the firmware before 1.43 in IBM Integrated Management Module IMM, and the firmware before 4.15 in IBM Integrated Management Module II IMM2 contains cleartext IPMI credentials, which allows attackers to execute arbitrary...

CVE-2014-0860: Undefined Security Weakness

The firmware before 3.66E in IBM BladeCenter Advanced Management Module AMM, the firmware before 1.43 in IBM Integrated Management Module IMM, and the firmware before 4.15 in IBM Integrated Management Module II IMM2 contains cleartext IPMI credentials, which allows attackers to execute arbitrary...