52 matches found
vbulletin5-rce
vbulletin5 RCE दोष जाँच उपकरण 0x00 सिंहावलोकन 201909 में vBulletin 5 5.0.0-5.5.4 में RCE दोष CVE-2019-16759 सामने आया। फ़ाइल ajax/render/widgetphp और POST पैरामीटर widgetConfigcode का उपयोग करके सीधे रिमोट कोड निष्पादन किया जा सकता है। 20200811 को, इंटरनेट पर खबर आई कि CVE-2019-16759 के पैच को...
pwn-vbulletin
Mass-Pwn-vBulletin Identifica istanze vulnerabili RCE di vBulletin 5.0.0 - 5.5.4 utilizzando Shodan CVE-2019-16759 Bulletin Demo Requisiti: Python = 3.5.3 asyncio = 3.4.3 aiohttp = 3.6.1 ipaddress termcolor = 1.1.0 tqdm = 4.36 pyfiglet click = 7.0 IPy = 1.0 Raccolta Host: Questo strumento itera...
CVE-2019-16759-Vbulletin-rce-exploit
Este repositorio nao tem um README...
http-vuln-CVE-2019-16759
RESUMO Script NSE simples para detectar vBulletin 5.x 0day RCE pré-autenticação. Isso deve funcionar em todas as versões de 5.0.0 até 5.5.4 INSTALAÇÃO $ git clone https://github.com/r00tpgp/http-vuln-CVE-2019-16759 $ cd http-vuln-CVE-2019-16759/ $ sudo cp http-vuln-CVE-2019-16759.nse...
vbull
vBulletin Mass Exploit CVE-2019-16759 Alerta! Esta ferramenta foi feita para testes de penetração na CVE-2019-16759. Não nos responsabilizamos por erros cometidos pelos usuários desta ferramenta. Instalação e uso: $ pkg install git python2 $ pip2 install requests $ git clone...
CVE-2019-16759-bypass
CVE-2019-16759-bypass...
vBulletin_Routestring-RCE
CVE-2019-16759vBulletinRoutestring-RCE-PoC In vBulletin wurde eine Schwachstelle entdeckt, die eine Remote-Codeausführung ermöglichen könnte, wenn eine bösartige POST-Anfrage an die verwundbare Anwendung gesendet wird. Die Schwachstelle ist auf einen Eingabevalidierungsfehler beim Parsen einer...
vBulletin 5.0.0-5.5.4 - Remote Command Execution
vBulletin 5.0.0 through 5.5.4 is susceptible to a remote command execution vulnerability via the widgetConfig parameter in an ajax/render/widgetphp routestring request. An attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system...
CVE-2020-17496
vBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an ajax/render/widgettabbedcontainertabpanel request. NOTE: this issue exists because of an incomplete fix for CVE-2019-16759...
CVE-2020-7373
vBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an ajax/render/widgettabbedcontainertabpanel request. NOTE: this issue exists because of an incomplete fix for CVE-2019-16759. ALSO NOTE: CVE-2020-7373 is a duplicate of CVE-2020-17496. CVE-2020-17496 is...
CVE-2019-16759
vBulletin 5.x through 5.5.4 allows remote command execution via the widgetConfigcode parameter in an ajax/render/widgetphp routestring request...
CVE-2020-16759
This CVE entry is rejected/not used and does not represent an active vulnerability entry.
vBulletin PHP Module Remote Code Execution Vulnerability
The PHP module within vBulletin contains an unspecified vulnerability that allows for remote code execution via crafted subWidgets data in an ajax/render/widgettabbedcontainertabpanel request. This CVE ID resolves an incomplete patch for CVE-2019-16759...
CVE-2020-7373
vBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an ajax/render/widgettabbedcontainertabpanel request. NOTE: this issue exists because of an incomplete fix for CVE-2019-16759. ALSO NOTE: CVE-2020-7373 is a duplicate of CVE-2020-17496. CVE-2020-17496 is...
Design/Logic Flaw
vBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an ajax/render/widgettabbedcontainertabpanel request. NOTE: this issue exists because of an incomplete fix for CVE-2019-16759. ALSO NOTE: CVE-2020-7373 is a duplicate of CVE-2020-17496. CVE-2020-17496 is...
CVE-2020-7373
vBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an ajax/render/widgettabbedcontainertabpanel request. NOTE: this issue exists because of an incomplete fix for CVE-2019-16759. ALSO NOTE: CVE-2020-7373 is a duplicate of CVE-2020-17496. CVE-2020-17496 is...
CVE-2020-7373
Summary (CVE-2020-17496 / CVE-2020-7373): vBulletin 5.5.4–5.6.2 is vulnerable to remote code execution via crafted subWidgets data in an ajax/render/widget_tabbedcontainer_tab_panel request. This issue stems from an incomplete fix of CVE-2019-16759, and CVE-2020-7373 is a duplicate of CVE-2020-17...
CVE-2020-7373
vBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an ajax/render/widgettabbedcontainertabpanel request. NOTE: this issue exists because of an incomplete fix for CVE-2019-16759. ALSO NOTE: CVE-2020-7373 is a duplicate of CVE-2020-17496. CVE-2020-17496 is...
