ipmitest

ipmitest IPMI cipher type zero 인증 우회 취약점CVE-2013-4784을 테스트하기 위한 셸 스크립트 IPMI는 시스템 관리자가 컴퓨터 시스템의 대역 외 관리를 위해 사용하는 표준화된 컴퓨터 시스템 인터페이스로, 시스템 운영을 모니터링하는 데 사용됩니다. 운영 체제나 로그인 셸이 아닌 네트워크 연결을 통해 하드웨어에 접속하여 전원이 꺼져 있거나 응답하지 않는 컴퓨터를 관리할 수 있는 방법입니다. 이 취약점으로 인해 원격 공격자는 cipher suite 0일명 cipher zero과 임의의 비밀번호를...

CosmicRakp

CosmicRakp Содержание Введение CVE-2013-4786 Установка Использование Авторы Лицензия Введение CosmicRakp — это мощный инструмент, написанный на Go, который позволяет специалистам red team и пентестерам извлекать хэши IPMI. Этот проект стремится быть эффективным, быстрым и простым в использовании...

CVE-2026-89486

A flaw was found in the Linux kernel's Intelligent Platform Management Interface IPMI subsystem. Due to incorrect synchronization during the deallocation of command receiver objects, a use-after-free vulnerability can occur. This allows a freed memory region to be accessed, which could be exploit...

SuperMicro-Password-Scanner

Supermicro IPMI/BMC 평문 비밀번호 스캐너 v20140622 by 1N3 https://crowdshield.com 사용법: sh supermicroscan.sh 프록시 소개: Supermicro의 IPMI/BMC 구현은 원격의 인증되지 않은 공격자가 포트 49152를 통해 PSBlock 파일을 요청할 수 있도록 합니다. 이 평문 비밀번호 파일에는 IPMI 사용자 이름과 비밀번호 정보가 포함되어 있습니다. 이 스크립트는 사용자가 네트워크를 스캔하여 패치가 필요한 취약한 시스템을 확인할 수 있도록 합니다. 사용법:...

CVE-2026-81006

A flaw was found in the Linux kernel's Intelligent Platform Management Interface IPMI component. During the registration of an IPMI system management interface, an error in the cleanup process can leave a system file sysfs attribute registered even after its associated memory has been released...

CVE-2026-81004

A flaw was found in the Linux kernel's Intelligent Platform Management Interface IPMI message handler. When an error occurs during the startup of an IPMI interface, scheduled work may not be properly canceled. This can prevent the interface from being freed cleanly, potentially leading to resourc...

CVE-2026-89486

In the Linux kernel, the following vulnerability has been resolved: ipmi: Fix use-after-free of cmdrcvr in ipmidestroyuser Commit 9e91f8a6c868 "ipmi:msghandler: Remove srcu for the ipmiinterfaces list" dropped the synchronizercu between unlinking the command receivers from intf-cmdrcvrs and freei...

CVE-2026-81004

In the Linux kernel, the following vulnerability has been resolved: ipmi:msghandler: Cancel work cleanly on an error If an error occurs during startup of an IPMI interface, it may have scheduled work to run. The work needs to be canceled before the interface can be freed...

CVE-2026-81006

In the Linux kernel, the following vulnerability has been resolved: ipmi: Remove all sysfs files on registration failure ipmiaddsmi creates the nrusers and nrmsgs files before trying to create the maintenancemode file. If that last creation fails, the error path removes only nrusers before droppi...

EUVD-2026-76392

In the Linux kernel, the following vulnerability has been resolved: ipmi: Fix use-after-free of cmdrcvr in ipmidestroyuser Commit 9e91f8a6c868 "ipmi:msghandler: Remove srcu for the ipmiinterfaces list" dropped the synchronizercu between unlinking the command receivers from intf-cmdrcvrs and freei...

CVE-2026-89486

CVE-2026-89486 is a use-after-free in the Linux kernel IPMI subsystem. A prior commit (9e91f8a6c868) removed the synchronize_rcu() call before freeing entries from the cmd_rcvrs list, but that list is still traversed under plain RCU by find_cmd_rcvr() and handle_ipmb_get_msg_cmd(). Without the gr...

CVE-2026-89486 ipmi: Fix use-after-free of cmd_rcvr in _ipmi_destroy_user()

In the Linux kernel, the following vulnerability has been resolved: ipmi: Fix use-after-free of cmdrcvr in ipmidestroyuser Commit 9e91f8a6c868 "ipmi:msghandler: Remove srcu for the ipmiinterfaces list" dropped the synchronizercu between unlinking the command receivers from intf-cmdrcvrs and freei...

EUVD-2026-76329

In the Linux kernel, the following vulnerability has been resolved: ipmi: Remove all sysfs files on registration failure ipmiaddsmi creates the nrusers and nrmsgs files before trying to create the maintenancemode file. If that last creation fails, the error path removes only nrusers before droppi...

CVE-2026-81007

CVE-2026-81007 affects the Linux kernel IPMI/IPMB driver. The vulnerability resides in the ipmb_write() function, which reads message fields before validating the length byte . A zero or short write can read uninitialized stack bytes , and a length smaller than the SMBus header underflows the blo...

CVE-2026-81006 ipmi: Remove all sysfs files on registration failure

In the Linux kernel, the following vulnerability has been resolved: ipmi: Remove all sysfs files on registration failure ipmiaddsmi creates the nrusers and nrmsgs files before trying to create the maintenancemode file. If that last creation fails, the error path removes only nrusers before droppi...

CVE-2026-81006

CVE-2026-81006 affects the Linux kernel ipmi subsystem. In ipmi_add_smi(), the nr_users and nr_msgs sysfs files are created before the maintenance_mode file. If the maintenance_mode creation fails, the error path removes only nr_users but leaves nr_msgs registered in the now-freed interface, resu...

CVE-2026-81004

CVE-2026-81004 affects the Linux kernel component ipmi:msghandler . If an error occurs during startup of an IPMI interface, scheduled work may not be canceled before the interface is freed, potentially leading to a use-after-free condition. The fix is provided via kernel patches (available as ups...

CVE-2026-81004 ipmi:msghandler: Cancel work cleanly on an error

In the Linux kernel, the following vulnerability has been resolved: ipmi:msghandler: Cancel work cleanly on an error If an error occurs during startup of an IPMI interface, it may have scheduled work to run. The work needs to be canceled before the interface can be freed...

EUVD-2026-76327

In the Linux kernel, the following vulnerability has been resolved: ipmi:msghandler: Cancel work cleanly on an error If an error occurs during startup of an IPMI interface, it may have scheduled work to run. The work needs to be canceled before the interface can be freed...

PT-2026-90202

In the Linux kernel, the following vulnerability has been resolved: ipmi: Fix use-after-free of cmd rcvr in ipmi destroy user Commit 9e91f8a6c868 "ipmi:msghandler: Remove srcu for the ipmi interfaces list" dropped the synchronize rcu between unlinking the command receivers from intf-cmd rcvrs and...