Lucene search
+L

1688 matches found

Kitploit
Kitploit
added 2026/09/16 7:37 p.m.14 views

vbulletin5-rce

Herramienta de detección de vulnerabilidades RCE para vbulletin5 0x00 Resumen En 201909, se reveló una vulnerabilidad RCE en vbulletion5 5.0.0-5.5.4 CVE-2019-16759. Utilizando el archivo ajax/render/widgetphp y el parámetro POST widgetConfigcode, se puede ejecutar código de forma remota...

9.8CVSS8.7AI score0.99728EPSS
SaveExploits28
Kitploit
Kitploit
added 2026/09/16 6:00 p.m.9 views

CVE-2026-61511-PoC-Exploit

CVE-2026-61511 – Exploit y Verificador de RCE Pre‑Auth en vBulletin ⚠️ SOLO USO ÉTICO – PRUEBAS DE SEGURIDAD AUTORIZADAS Este repositorio proporciona herramientas solo para profesionales de seguridad autorizados, equipos azules y pentesters. El acceso no autorizado a sistemas informáticos es ilega...

9.8CVSS6.4AI score0.70766EPSS
SaveExploits8References1
Kitploit
Kitploit
added 2026/09/16 5:18 p.m.11 views

pwn-vbulletin

Mass-Pwn-vBulletin Identifica instancias vulnerables RCE de vBulletin 5.0.0 - 5.5.4 usando Shodan CVE-2019-16759 Bulletin Demo Requisitos: Python = 3.5.3 asyncio = 3.4.3 aiohttp = 3.6.1 ipaddress termcolor = 1.1.0 tqdm = 4.36 pyfiglet click = 7.0 IPy = 1.0 Recopilación de hosts: Esta herramienta...

9.8CVSS8.7AI score0.99728EPSS
SaveExploits28
Kitploit
Kitploit
added 2026/09/16 2:54 p.m.8 views

vBulletin-CVE-2025-48828-Multi-target

💥 Scanner de Ejecución Remota de Código en vBulletin replaceAdTemplate Esta herramienta Python automatiza la detección de vulnerabilidades RCE sin autenticación en vBulletin a través del vector de explotación replaceAdTemplate. Basada en la prueba de concepto original de EgiX , esta versión sopor...

9CVSS8.9AI score0.57367EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/16 2:39 p.m.11 views

http-vuln-CVE-2019-16759

RESUMEN Script NSE sencillo para detectar el 0day de RCE pre-autenticación de vBulletin 5.x. Debería funcionar en todas las versiones desde la 5.0.0 hasta la 5.5.4. INSTALACIÓN $ git clone https://github.com/r00tpgp/http-vuln-CVE-2019-16759 $ cd http-vuln-CVE-2019-16759/ $ sudo cp...

9.8CVSS8.3AI score0.99728EPSS
SaveExploits28References1
Nuclei
Nuclei
added 2026/09/16 2:04 p.m.429 views

vBulletin <= 4.2.3 - SQL Injection

vBulletin versions 3.6.0 through 4.2.3 are vulnerable to an SQL injection vulnerability in the vBulletin core forumrunner addon. The vulnerability allows an attacker to execute arbitrary SQL queries and potentially access sensitive information from the database. id: CVE-2016-6195 info: name:...

9.8CVSS8.5AI score0.68493EPSS
SaveExploits7References5
Nuclei
Nuclei
added 2026/09/16 2:04 p.m.66 views

vBulletin - Open Redirect

vBulletin 3.x.x and 4.2.x through 4.2.5 contains an open redirect vulnerability via the redirector.php URL parameter. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2018-6200 info: name:...

6.1CVSS6.2AI score0.03474EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/09/16 2:04 p.m.41 views

vBulletin 5.0.0-6.0.3 - Authentication Bypass

vBulletin 5.0.0 through 5.7.5 and 6.0.0 through 6.0.3 contain an authentication bypass caused by unauthenticated access to protected API controllers on PHP 8.1 or later, letting unauthenticated attackers invoke protected methods remotely.Starting from PHP 8.1, due to an internal adjustment to...

10CVSS8.3AI score0.75844EPSS
SaveExploits4References2
Nuclei
Nuclei
added 2026/09/16 2:04 p.m.32 views

vBulletin 6.x - Remote Code Execution

vBulletin 5.x through 5.7.5 and 6.x through 6.2.1 contain an eval injection vulnerability caused by insufficiently restrictive regex filtering in vB5TemplateRuntime::runMaths, letting unauthenticated remote attackers execute arbitrary PHP code via the pagenavpagenumber parameter in ajax/render...

9.8CVSS6.5AI score0.70766EPSS
SaveExploits8References2
Nuclei
Nuclei
added 2026/09/16 2:04 p.m.130 views

vBulletin <= 5.6.9 - Pre-authentication Remote Code Execution

vBulletin before 5.6.9 PL1 allows an unauthenticated remote attacker to execute arbitrary code via a crafted HTTP request that triggers deserialization. This occurs because verifyserialized checks that a value is serialized by calling unserialize and then checking for errors. id: CVE-2023-25135...

9.8CVSS8.7AI score0.23926EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/09/16 2:04 p.m.107 views

vBulletin SQL Injection

vBulletin before 5.5.6pl1, 5.6.0 before 5.6.0pl1, and 5.6.1 before 5.6.1pl1 has incorrect access control that permits SQL injection attacks. id: CVE-2020-12720 info: name: vBulletin SQL Injection author: pdteam severity: critical description: vBulletin before 5.5.6pl1, 5.6.0 before 5.6.0pl1, and...

9.8CVSS8.3AI score0.88948EPSS
SaveExploits13References5
Nuclei
Nuclei
added 2026/09/16 2:04 p.m.128 views

vBulletin replaceAdTemplate - Remote Code Execution

vBulletin versions 5.0.0 through 6.0.3 contain a Remote Code Execution RCE vulnerability in the ajax/api/ad/replaceAdTemplate endpoint. This flaw arises from improper use of PHP's Reflection API, allowing unauthenticated attackers to invoke protected controller methods. By injecting a crafted...

10CVSS8.2AI score0.75844EPSS
SaveExploits6References4
Kitploit
Kitploit
added 2026/09/16 11:45 a.m.8 views

CVE-2019-16759

CVE-2019-16759 vBulletin 5.x Vulnerabilidad de ejecución remota de código no autenticada Nota: Algunos POC devuelven 403 en lugar de 200 Verificación mejorada: echo md5'vBulletin'; Comprobar si la respuesta contiene be4ea51d962be8308a0099ae1eb3ec63 print...

9.8CVSS8.8AI score0.99728EPSS
SaveExploits28
Kitploit
Kitploit
added 2026/09/16 11:29 a.m.9 views

CVE-2015-7808

CVE-2015-7808 Código PoC de la vulnerabilidad PreAuth de vBulletin Uso: perl vbulletin.pl www.vbulletin.com/forum id...

7.5CVSS8.3AI score0.80635EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/16 11:25 a.m.6 views

Ultimate-CVE-2026-61511

CVE-2026-61511 – Proof of Concept Educational and defensive Proof of Concept PoC for validating exposure to the vBulletin vulnerability CVE-2026-61511 – Unauthenticated Remote Code Execution. Contact Telegram: https://t.me/thecodeb0ss Overview This repository provides a defensive detection and...

9.8CVSS6.8AI score0.70766EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/16 10:54 a.m.7 views

CVE-2019-16759-Vbulletin-rce-exploit

Este repositorio no tiene un README...

9.8CVSS8.4AI score0.99728EPSS
SaveExploits28
Kitploit
Kitploit
added 2026/09/16 9:50 a.m.8 views

CVE-2026-61511

VBulletin RCE POC Telegram : @esp256 Support : massive/single scan Fofa Dork root@kitploit: body="Powered by vBulletin" body="vbulletin/core/cpstyles" body="Powered by vBulletin" && body="6.2" body="Powered by vBulletin" && body="6.1" body="Powered by vBulletin" && body="6."...

9.8CVSS6.3AI score0.70766EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/16 5:28 a.m.12 views

CVE-2019-16759

CVE-2019-16759 Exploits de RCE de Vbulletin...

9.8CVSS8.7AI score0.99728EPSS
SaveExploits28
Kitploit
Kitploit
added 2026/09/16 4:15 a.m.8 views

vbull

Exploit Masivo de vBulletin CVE-2019-16759 ¡Alerta! Esta herramienta fue creada para pruebas de penetración de CVE-2019-16759. No somos responsables por errores cometidos por los usuarios de esta herramienta. Instalación y uso: $ pkg install git python2 $ pip2 install requests $ git clone...

9.8CVSS8.5AI score0.99728EPSS
SaveExploits28References1
Kitploit
Kitploit
added 2026/09/16 3:31 a.m.10 views

CMSScan

CMSScan Escanee sitios web de WordPress, Drupal, Joomla, vBulletin en busca de problemas de seguridad. Hecho con en India CMSScan proporciona un panel de seguridad centralizado para escaneos de seguridad de CMS. Está impulsado por wpscan, droopescan, vbscan y joomscan. Admite escaneos tanto bajo...

5.9AI score
SaveExploits0References1
Rows per page
Query Builder