bmc_bladelogic

BMC Bladelogic RSCD exploits remotos para Linux y Windows Cambiar contraseñas, listar usuarios y ejecución remota de código Explotando vulnerabilidades en el agente BMC BladeLogic RSCD CVE-2016-1542 BMC-2015-0010 CVE-2016-1543 BMC-2015-0011 CVE-2016-5063 Publicado en exploit-db BMCrexec.py...

BMC FootPrints 'feedUrl' - Server-Side Request Forgery

BMC FootPrints versions 20.20.02 through 20.24.01.001 contain a Server-Side Request Forgery SSRF vulnerability in the /footprints/servicedesk/externalfeed/RSS endpoint. The 'feedUrl' parameter allows unauthenticated attackers to force the server to make HTTP requests to arbitrary URLs, enabling...

BMC FootPrints 'searchWeb' - Server-Side Request Forgery

BMC FootPrints versions 20.20.02 through 20.24.01.001 contain a Server-Side Request Forgery SSRF vulnerability in the /footprints/servicedesk/import/searchWeb endpoint. The 'url' parameter allows unauthenticated attackers to force the server to make HTTP requests to arbitrary URLs, enabling acces...

BMC FootPrints - Authentication Bypass

BMC FootPrints versions 20.20.02 through 20.24.01.001 contain an authentication bypass vulnerability in the password reset functionality. Unauthenticated attackers can access the /footprints/servicedesk/passwordreset/request/ endpoint to obtain a valid SECTOKEN session cookie without proper...

bladelogic_bmc-cve-2016-1542

bladelogicbmc-cve-2016-1542 Una versión reconstruida del exploit para CVE-2016-1542 y CVE-2016-1543 de insinuator.net https://insinuator.net/2016/03/bmc-bladelogic-cve-2016-1542-and-cve-2016-1543/ Recientemente me encontré con sistemas vulnerables a este CVE en una prueba de penetración y encontr...

PoC

PoC Repositorio de exploits y herramientas de prueba de concepto. BMCRSCDRCE Exploit de ejecución remota de comandos no autenticado para el agente RSCD de BMC Server Automation. El exploit funciona contra servidores afectados por CVE-2016-1542 detectado por Nessus. Esto ahora es un módulo de...

SuperMicro-Password-Scanner

Escáner de contraseñas en texto claro de Supermicro IPMI/BMC v20140622 por 1N3 https://crowdshield.com Uso: sh supermicroscan.sh proxy ACERCA DE: La implementación de IPMI/BMC de Supermicro permite a atacantes remotos no autenticados solicitar el archivo PSBlock a través del puerto 49152. Este...

bmc-tools

BMC-Tools RDP位图缓存解析器。 输入 bmc-tools 处理Windows用户配置文件中的 bcache.bmc 和 cache????.bin 文件。 用法 ./bmc-tools.py -h -s SRC -d DEST -c COUNT -v -o -b -w WIDTH 各参数含义如下： -h, --help 显示此帮助信息并退出 -s SRC, --src SRC 指定要处理的BMCache文件或目录。 -d DEST, --dest DEST 指定存储提取位图的目录。 -c COUNT, --count COUNT 仅提取指定数量的位图。 -v, --verbo...

ipmi

I wrote some software to explore IPMI; here are some of results. I thought I'd do the usual detect, get data, and audit sort of cycle. Each of these turned out to be fairly interesting problem on its own, at least to me. BTW/FYI - I released a new tool to explore IPMI -...

Amazon Linux 2023 : freeipmi, freeipmi-bmc-watchdog, freeipmi-devel (ALAS2023-2026-3134)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3134 advisory. FreeIPMI before 1.6.19 has a stack-based buffer overflow in ipmiseloemfujitsugetselentrylongtext in libfreeipmi/sel/ipmi-sel-string-fujitsu-irmc-common.c via malformed Fujitsu SEL long-text...

cve-2019-6260

Una herramienta de prueba y depuración para interfaces AHB de ASPEED BMC Advertencia NO UTILICE ESTA HERRAMIENTA SI NO HA COMPRENDIDO SUS COMPORTAMIENTOS EN EL CONTEXTO DE SU MÁQUINA OBJETIVO. Esta herramienta interviene en interfaces de hardware y firmware de bajo nivel de su máquina. En...

watchTowr-vs-BMC-Footprints-RCE-CVE-2025-71257-CVE-2025-71260

CVE-2025-71257 y CVE-2025-71260 Cadena de Ejecución Remota de Código Pre-Autenticada en BMC FootPrints Herramienta Generadora de Artefactos de Detección de la Cadena de Ejecución Remota de Código Pre-Autenticada en BMC FootPrints Descripción Este Generador de Artefactos de Detección verifica si l...

CVE-2024-54085

CVE-2024-54085: Vulnerabilidad crítica de omisión de autenticación en AMI MegaRAC BMC Sistemas afectados La vulnerabilidad afecta a una amplia gama de hardware de servidores de los principales fabricantes: AMI MegaRAC SPx : versiones 12.x hasta 12.7 y 13.x hasta 13.5 HPE Cray XD670 : versiones...

openSUSE 16: freeipmi / freeipmi-bmc-watchdog / freeipmi-devel / etc (openSUSE-SU-2026:21883-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21883-1 advisory. - CVE-2026-85504: stack-based buffer overflow via malformed Fujitsu SEL long-text responses bsc1278719. - CVE-2026-85505: Denial of Service via...

CVE-2026-18857

IBM OPENBMC FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in the BMC firmware management interface. The host system can cause the BMC firmware management service to crash or allow a limited amount of BMC internal memory to...

CVE-2026-18857

IBM OPENBMC firmware versions FW1120.00 - FW1120.01 , FW1110.00 - FW1110.31 , and FW1060.00 - FW1060.81 are affected by an out-of-bounds read vulnerability (CWE-125) in the BMC firmware management interface . A host system can exploit this to crash the BMC firmware management service or read a li...

EUVD-2026-85893

IBM OPENBMC FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in the BMC firmware management interface. The host system can cause the BMC firmware management service to crash or allow a limited amount of BMC internal memory to...

CVE-2026-18857 This Power System update is being released to address

IBM OPENBMC FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in the BMC firmware management interface. The host system can cause the BMC firmware management service to crash or allow a limited amount of BMC internal memory to...

Security Bulletin: This Power System update is being released to address CVE-2026-18857

Summary BMC firmware is affected by a vulnerability in the BMC firmware management interface. The host system can cause the BMC firmware management service to crash or allow a limited amount of BMC internal memory to be read, resulting in a confidentiality and availability impact to the managed...

PT-2026-97812

Name of the Vulnerable Software and Affected Versions IBM OPENBMC versions FW1120.00 through FW1120.01 IBM OPENBMC versions FW1110.00 through FW1110.31 IBM OPENBMC versions FW1060.00 through FW1060.81 Description A flaw exists in the BMC firmware management interface. A host system can trigger a...