CVE-2026-59785

Host search in Frontend allows filtering by fields that are not displayed, including stored IPMI and PSK credentials. A user with read access can guess a credential and see from the search result whether the guess was right, letting them uncover it...

CVE-2026-59785 Hidden host credentials inferable via multiselect.get filtering

Host search in Frontend allows filtering by fields that are not displayed, including stored IPMI and PSK credentials. A user with read access can guess a credential and see from the search result whether the guess was right, letting them uncover it...

EUVD-2026-92397

Host search in Frontend allows filtering by fields that are not displayed, including stored IPMI and PSK credentials. A user with read access can guess a credential and see from the search result whether the guess was right, letting them uncover it...

CVE-2026-59785

The Frontend host search functionality is vulnerable to an information disclosure flaw due to improper filtering in multiselect.get . This allows users with read access to filter by hidden fields, specifically stored IPMI and PSK credentials . By observing differences in search results, an attack...

SuperMicro-Password-Scanner

Supermicro IPMI/BMC 평문 비밀번호 스캐너 v20140622 by 1N3 https://crowdshield.com 사용법: sh supermicroscan.sh 프록시 소개: Supermicro의 IPMI/BMC 구현은 원격의 인증되지 않은 공격자가 포트 49152를 통해 PSBlock 파일을 요청할 수 있도록 합니다. 이 평문 비밀번호 파일에는 IPMI 사용자 이름과 비밀번호 정보가 포함되어 있습니다. 이 스크립트는 사용자가 네트워크를 스캔하여 패치가 필요한 취약한 시스템을 확인할 수 있도록 합니다. 사용법:...

EUVD-2014-0890

Malware in sbrugna...

EUVD-2024-48911

Malicious code in bioql PyPI...

CVE-2024-8059

IPMI credentials may be captured in XCC audit log entries when the account username length is 16 characters...

CVE-2024-8059

IPMI credentials may be captured in XCC audit log entries when the account username length is 16 characters...

CVE-2024-8059

IPMI credentials may be captured in XCC audit log entries when the account username length is 16 characters...

CVE-2024-8059

IPMI credentials may be captured in XCC audit log entries when the account username length is 16 characters...

CVE-2024-8059

CVE-2024-8059 concerns Lenovo XClarity Controller (XCC). The issue arises from the exposure of IPMI credentials in XCC audit log entries when the account username length is 16 characters. Affected software is Lenovo XCC; the root cause is credentials being captured in logs, leading to potential e...

Security Bulletin: IBM BladeCenter Advanced Management Module (AMM), Integrated Management Module (IMM), and Integrated Management Module 2 (IMM2) Potential IPMI credentials Exposure (CVE-2014-0860)

Summary The administrative IPMI credentials for authenticating communications between the IBM BladeCenter Advanced Management Module AMM, Integrated Management Module IMM, and Integrated Management Module 2 IMM2 are stored in plaintext within the AMM firmware binaries. Vulnerability Details...

CVE-2014-0860

The firmware before 3.66E in IBM BladeCenter Advanced Management Module AMM, the firmware before 1.43 in IBM Integrated Management Module IMM, and the firmware before 4.15 in IBM Integrated Management Module II IMM2 contains cleartext IPMI credentials, which allows attackers to execute arbitrary...

Design/Logic Flaw

The firmware before 3.66E in IBM BladeCenter Advanced Management Module AMM, the firmware before 1.43 in IBM Integrated Management Module IMM, and the firmware before 4.15 in IBM Integrated Management Module II IMM2 contains cleartext IPMI credentials, which allows attackers to execute arbitrary...

CVE-2014-0860: Undefined Security Weakness

The firmware before 3.66E in IBM BladeCenter Advanced Management Module AMM, the firmware before 1.43 in IBM Integrated Management Module IMM, and the firmware before 4.15 in IBM Integrated Management Module II IMM2 contains cleartext IPMI credentials, which allows attackers to execute arbitrary...