vbull

vBulletin बड़े पैमाने पर शोषण CVE-2019-16759 चेतावनी! यह उपकरण CVE-2019-16759 के पेनिट्रेशन परीक्षण के लिए बनाया गया था। हम इस उपकरण के उपयोगकर्ताओं द्वारा की गई त्रुटियों के लिए जिम्मेदार नहीं हैं। स्थापना और उपयोग: $ pkg install git python2 $ pip2 install requests $ git clone...

pwn-vbulletin

Mass-Pwn-vBulletin Shodan का उपयोग करके संवेदनशील RCE vBulletin 5.0.0 - 5.5.4 इंस्टेंसेस की पहचान करें CVE-2019-16759 बुलेटिन डेमो आवश्यकताएँ: Python = 3.5.3 asyncio = 3.4.3 aiohttp = 3.6.1 ipaddress termcolor = 1.1.0 tqdm = 4.36 pyfiglet click = 7.0 IPy = 1.0 होस्ट्स एकत्र करना: यह उपकरण असंख्यक...

vBulletin_Routestring-RCE

CVE-2019-16759vBulletinRoutestring-RCE-PoC vBulletin में एक कमजोरी खोजी गई है जो दूरस्थ कोड निष्पादन remote code execution की अनुमति दे सकती है जब कमजोर एप्लिकेशन पर एक दुर्भावनापूर्ण POST अनुरोध भेजा जाता है। यह कमजोरी कमजोर मॉड्यूल में HTTP अनुरोध को पार्स करते समय इनपुट सत्यापन त्रुटि के कारण...

http-vuln-CVE-2019-16759

ОПИСАНИЕ Простой скрипт NSE для обнаружения vBulletin 5.x 0day pre-auth RCE. Должен работать на всех версиях от 5.0.0 до 5.5.4 УСТАНОВКА $ git clone https://github.com/r00tpgp/http-vuln-CVE-2019-16759 $ cd http-vuln-CVE-2019-16759/ $ sudo cp http-vuln-CVE-2019-16759.nse /usr/share/nmap/scripts/...

CVE-2019-16759-bypass

CVE-2019-16759-bypass...

vbulletin5-rce

vbulletin5 outil de détection de la vulnérabilité RCE 0x00 Aperçu En septembre 2019, vbulletion5 5.0.0-5.5.4 a révélé une vulnérabilité RCE CVE-2019-16759. En utilisant le fichier ajax/render/widgetphp et le paramètre POST widgetConfigcode, il est possible d'exécuter du code à distance directemen...

vBulletin 5.0.0-5.5.4 - Remote Command Execution

vBulletin 5.0.0 through 5.5.4 is susceptible to a remote command execution vulnerability via the widgetConfig parameter in an ajax/render/widgetphp routestring request. An attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system...

CVE-2019-16759-Vbulletin-rce-exploit

В этом репозитории нет README...

CVE-2020-17496

vBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an ajax/render/widgettabbedcontainertabpanel request. NOTE: this issue exists because of an incomplete fix for CVE-2019-16759...

CVE-2020-7373

vBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an ajax/render/widgettabbedcontainertabpanel request. NOTE: this issue exists because of an incomplete fix for CVE-2019-16759. ALSO NOTE: CVE-2020-7373 is a duplicate of CVE-2020-17496. CVE-2020-17496 is...

CVE-2019-16759

vBulletin 5.x through 5.5.4 allows remote command execution via the widgetConfigcode parameter in an ajax/render/widgetphp routestring request...

vBulletin PHP Module Remote Code Execution Vulnerability

The PHP module within vBulletin contains an unspecified vulnerability that allows for remote code execution via crafted subWidgets data in an ajax/render/widgettabbedcontainertabpanel request. This CVE ID resolves an incomplete patch for CVE-2019-16759...

CVE-2020-7373

vBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an ajax/render/widgettabbedcontainertabpanel request. NOTE: this issue exists because of an incomplete fix for CVE-2019-16759. ALSO NOTE: CVE-2020-7373 is a duplicate of CVE-2020-17496. CVE-2020-17496 is...

Design/Logic Flaw

vBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an ajax/render/widgettabbedcontainertabpanel request. NOTE: this issue exists because of an incomplete fix for CVE-2019-16759. ALSO NOTE: CVE-2020-7373 is a duplicate of CVE-2020-17496. CVE-2020-17496 is...

CVE-2020-7373

vBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an ajax/render/widgettabbedcontainertabpanel request. NOTE: this issue exists because of an incomplete fix for CVE-2019-16759. ALSO NOTE: CVE-2020-7373 is a duplicate of CVE-2020-17496. CVE-2020-17496 is...

CVE-2020-7373

Summary (CVE-2020-17496 / CVE-2020-7373): vBulletin 5.5.4–5.6.2 is vulnerable to remote code execution via crafted subWidgets data in an ajax/render/widget_tabbedcontainer_tab_panel request. This issue stems from an incomplete fix of CVE-2019-16759, and CVE-2020-7373 is a duplicate of CVE-2020-17...

CVE-2020-7373

vBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an ajax/render/widgettabbedcontainertabpanel request. NOTE: this issue exists because of an incomplete fix for CVE-2019-16759. ALSO NOTE: CVE-2020-7373 is a duplicate of CVE-2020-17496. CVE-2020-17496 is...

Exploit for Code Injection in Vbulletin

CVE-2019-16759vBulletinRoutestring-RCE-PoC A vulnerability...

Exploit for Code Injection in Vbulletin

It is an exploit module for Apache Struts 2. CVE-2019-16759 is t...

vBulletin 5.x Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'vBulletin 5.x /ajax/render/widgettabbedcontainertabpanel PHP remote code execution.', 'Description' = %q This module exploits a logic bug within...