2060 matches found
cve-2023-30990
cve-2023-30990-rce IBM i DDM Unauthenticated RCE - Java Reverse Shell...
CVE-2023-45182
CVE-2023-45182 IBM i Access Client Solutions 1.1.9.4 - Weak password encryption Timeline Vulnerability reported to vendor: 22.09.2023 New fixed 1.1.9.4 version released: 08.12.2023 Public disclosure: 15.12.2023 Description IBM i Access Client Solutions for storing user passwords uses AES algorith...
CVE-2023-30990
CVE-2023-30990 exploits See our blog post for details: https://blog.silentsignal.eu/2025/09/04/Exploit-development-for-IBM-i/ The Python scripts require the ebcdic module: pip install ebcdic DRDA S38CMD method python3 ddm.py "" DRDA SQL method python3 ddm-bypass-test.py "" Simple bindshell with...
CVE-2023-45184
CVE-2023-45184 IBM i Access Client Solutions 1.1.9.4 - Local server broken access control. Timeline Vulnerability reported to vendor: 22.09.2023 New fixed 1.1.9.4 version released: 08.12.2023 Public disclosure: 15.12.2023 Description IBM i Access Client Solutions for storing temporary password...
EUVD-2026-98177
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to execute arbitrary script code due to improper validation of user-supplied input...
EUVD-2026-98180
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform brute-force attacks to obtain credentials due to improper authentication...
EUVD-2026-98168
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to cause a denial of service due to improper access control...
EUVD-2026-98179
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to modify the BOOTP table due to improper authorization...
EUVD-2026-98178
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of service and obtain information due to an out-of-bounds read in the File Server...
EUVD-2026-98176
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information or execute arbitrary code on the system due to improper data sanitization by the HTTP Server Administration web application...
EUVD-2026-98167
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to enumerate user profiles due to the return of distinct error codes during the sign-on process...
CVE-2026-96119
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information or execute arbitrary code on the system due to improper data sanitization by the HTTP Server Administration web application...
CVE-2026-17487
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to enumerate user profiles due to the return of distinct error codes during the sign-on process...
CVE-2026-18343
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to modify the BOOTP table due to improper authorization...
CVE-2026-18318
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform brute-force attacks to obtain credentials due to improper authentication...
CVE-2026-81858
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of service and obtain information due to an out-of-bounds read in the File Server...
CVE-2026-93886
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to execute arbitrary script code due to improper validation of user-supplied input...
CVE-2026-17484
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to cause a denial of service due to improper access control...
CVE-2026-17484
IBM i versions 7.3, 7.4, 7.5, and 7.6 are vulnerable to a denial of service (DoS) condition caused by improper access control within Dedicated Service Tools (DST) or System Service Tools (SST). A local attacker could exploit this flaw to disrupt service availability. Remediation involves installi...
