cve-2023-30990

cve-2023-30990-rce IBM i DDM RCE sin autenticación - Java Reverse Shell...

CVE-2023-45182

CVE-2023-45182 IBM i Access Client Solutions 1.1.9.4 - Cifrado débil de contraseñas Cronología Vulnerabilidad reportada al proveedor: 22.09.2023 Nueva versión corregida 1.1.9.4 publicada: 08.12.2023 Divulgación pública: 15.12.2023 Descripción IBM i Access Client Solutions, para almacenar las...

CVE-2023-45184

CVE-2023-45184 IBM i Access Client Solutions 1.1.9.4 - Control de acceso roto en el servidor local. Cronología Vulnerabilidad reportada al proveedor: 22.09.2023 Nueva versión corregida 1.1.9.4 publicada: 08.12.2023 Divulgación pública: 15.12.2023 Descripción IBM i Access Client Solutions para...

CVE-2023-30990

CVE-2023-30990 exploits See our blog post for details: https://blog.silentsignal.eu/2025/09/04/Exploit-development-for-IBM-i/ The Python scripts require the ebcdic module: pip install ebcdic DRDA S38CMD method root@kitploit: python3 ddm.py "" DRDA SQL method root@kitploit: python3...

CVE-2026-18869

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions and access internal network services due to improper validation of FTP PORT and EPRT commands...

CVE-2026-17262

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to cause a denial of service due to improper validation of FTP authentication commands...

EUVD-2026-83299

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions and access internal network services due to improper validation of FTP PORT and EPRT commands...

CVE-2026-18869 IBM i is Affected By Denial of Service and Security Restriction Bypass Vulnerabilities in FTP [, ]

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions and access internal network services due to improper validation of FTP PORT and EPRT commands...

CVE-2026-18869 IBM i is Affected By Denial of Service and Security Restriction Bypass Vulnerabilities in FTP [, ]

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions and access internal network services due to improper validation of FTP PORT and EPRT commands...

CVE-2026-18869

IBM i versions 7.3 through 7.6 are affected by a Server-Side Request Forgery (SSRF) vulnerability in the FTP service. Improper validation of PORT and EPRT commands allows a remote authenticated attacker to bypass security restrictions and access internal network services . The CVSS 3.1 base score...

CVE-2026-17262

IBM i versions 7.3 through 7.6 are vulnerable to denial of service and security restriction bypass due to improper validation of FTP authentication commands (CWE-78, OS Command Injection). A local attacker on an adjacent network with no required privileges can exploit this with low complexity, re...

CVE-2026-17262 IBM i is Affected By Denial of Service and Security Restriction Bypass Vulnerabilities in FTP [, ]

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to cause a denial of service due to improper validation of FTP authentication commands...

EUVD-2026-83295

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to cause a denial of service due to improper validation of FTP authentication commands...

CVE-2026-17262 IBM i is Affected By Denial of Service and Security Restriction Bypass Vulnerabilities in FTP [, ]

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to cause a denial of service due to improper validation of FTP authentication commands...

CVE-2026-18869: Server-Side Request Forgery (SSRF)

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions and access internal network services due to improper validation of FTP PORT and EPRT commands...

CVE-2026-17262: Improper Neutralization of Special Elements used in an OS Command

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to cause a denial of service due to improper validation of FTP authentication commands...

Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in NTP

Summary IBM i is vulnerable to multiple vulnerabilities CVE-2026-63379, CVE-2026-63381, CVE-2026-63382, CVE-2026-63383, CVE-2026-63384, CVE-2026-63385, CVE-2026-63387, CVE-2026-63388 in Network Time Protocol NTP as described in the vulnerability details section. Vulnerability Details...

Security Bulletin: IBM i is Affected By Denial of Service and Security Restriction Bypass Vulnerabilities in FTP [CVE-2026-17262, CVE-2026-18869]

Summary IBM i is vulnerable to a denial of service and security restriction bypass due to improper validation of commands CVE-2026-17262, CVE-2026-18869 in File Transfer Protocol FTP as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-17262 DESCRIPTION: IBM i...

CVE-2026-19086

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a denial of service as a result of a buffer overflow in a PASE process. An authenticated attacker could leverage this to terminate their own process...

CVE-2026-18069

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to obtain ownership of arbitrary file system objects due to a time-of-check to time-of-use TOCTOU race condition...