vBulletin 5.x Pre-Auth Remote Code Execution

!/usr/bin/python vBulletin 5.x 0day pre-auth RCE exploit This should work on all versions from 5.0.0 till 5.5.4 Google Dorks: - site:.vbulletin.net - "Powered by vBulletin Version 5.5.4" import requests import sys if lensys.argv != 2: sys.exit"Usage: %s " % sys.argv0 params =...

PT-2019-6135

Name of the Vulnerable Software and Affected Versions vBulletin versions 5.0.0 through 5.5.4 Description The issue is related to errors in code generation management, allowing a remote attacker to execute arbitrary commands using a specially crafted widgetConfigcode parameter in an...

vBulletin 5.0 5.5.4 - widget_php Unauthenticated Remote Code Execution

vBulletin 5.0 5.5.4 - widgetphp Unauthenticated Remote Code Execution !/usr/bin/python vBulletin 5.x 0day pre-auth RCE exploit This should work on all versions from 5.0.0 till 5.5.4 Google Dorks: - site:.vbulletin.net - "Powered by vBulletin Version 5.5.4" import requests import sys if lensys.arg...

vBulletin widgetConfig RCE

vBulletin 5.x through 5.5.4 allows remote command execution via the widgetConfigcode parameter in an ajax/render/widgetphp routestring POST request. Module Options msf use exploit/multi/http/vbulletin/widgetconfigrce msf undefinedwidgetconfigrce show actions ...actions... msf...

vBulletin 5.0 < 5.5.4 - 'widget_php ' Unauthenticated Remote Code Execution

!/usr/bin/python vBulletin 5.x 0day pre-auth RCE exploit This should work on all versions from 5.0.0 till 5.5.4 Google Dorks: - site:.vbulletin.net - "Powered by vBulletin Version 5.5.4" import requests import sys if lensys.argv != 2: sys.exit"Usage: %s " % sys.argv0 params =...

Data Breach Disclosed by Online Invitation Firm Evite

Online invitation and stationary company Evite has notified customers of a data breach that stemmed from an “inactive data storage file” associated with user accounts. The company over the weekend said that during April 2019, it became aware of a “security incident involving potential unauthorize...

vBulletin 4.2.5 Member Map 1.1.2 Open Redirection

Exploit Title : vBulletin 4.2.5 Member Map 1.1.2 Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 04/03/2019 Vendor Homepage : vbulletin.com dragonbyte-tech.com Software Information Link : dragonbyte-tech.com/store/member-map.229/ Software Affect...

vBulletin 4.x Seo By vBSeo 3.3.2 Open Redirection

Exploit Title : vBulletin 4.x Seo by vBSeo 3.3.2 Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 04/03/2019 Vendor Homepages : vbulletin.com vbseo.com Software Information Links : vbulletin-mods.com/forum/showthread.php?t=936...

vBulletin 4.2.5 vBSuper_PM 1.2.3 Lite Open Redirection

Exploit Title : vBulletin 4.2.5 vBSuperPM 1.2.3 Lite Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 04/03/2019 Vendor Homepage : vbulletin.com/org dragonbyte-tech.com Software Information Link : vbulletin.org/forum/showthread.php?p=2583345...

vBulletin 4.2.5 Thread Post Bookmarking 1.2.0 Open Redirection

Exploit Title : vBulletin 4.2.5 Thread Post Bookmarking 1.2.0 Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 04/03/2019 Vendor Homepages : vbulletin.com dragonbyte-tech.com Software Information Link :...

vBulletin 4.2.5 Ajax Threads 1.1.3 Lite Open Redirection

Exploit Title : vBulletin 4.2.5 Ajax Threads 1.1.3 Lite Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 04/03/2019 Vendor Homepage : vbulletin.com dragonbyte-tech.com Software Information Link : dragonbyte-tech.com/store/ajax-threads.114/ Softwa...

vBulletin 4.x.x vB Optimise 2.6.3 Pro Open Redirection

Exploit Title : vBulletin 4.x.x vB Optimise v2.6.3 Pro Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 02/03/2019 Vendor Homepage : vbulletin.com dragonbyte-tech.com Software Information Link : dragonbyte-tech.com/store/vb-optimise.1/ Software...

vBulletin 4.2.5 Advanced User Tagging 3.1.3 Open Redirection

Exploit Title : vBulletin 4.2.5 Advanced User Tagging v3.1.3 Pro Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 02/03/2019 Vendor Homepage : vbulletin.com dragonbyte-tech.com Software Information Link :...

vBulletin 3.8.x vBadvanced CMPS 3.2.3 Open Redirection

Exploit Title : vBulletin 3.8.x vBadvanced CMPS v3.2.3 Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 01/03/2019 Vendor Homepage : vbulletin.com vbadvanced.com Software Download Link : vbadvanced.com/products.php?do=productinfo&productid=4...

vBulletin 3.8.4 Zoints SEO 2.3.2 Open Redirection

Exploit Title : vBulletin 3.8.4 Zoints SEO 2.3.2 Computer-Logic Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 01/03/2019 Vendor Homepages : zoints.com computer-logic.org Software Information Links : vbulletin.org/forum/showthread.php?t=127336...

vBulletin 4.2.3 vBSecurity 2.2.2 Pro Open Redirection

Exploit Title : vBulletin 4.2.3 vBSecurity v2.2.2 Pro Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 01/03/2019 Vendor Homepage : vbulletin.com dragonbyte-tech.com Software Information Link : dragonbyte-tech.com/store/vbsecurity.123/ Software...

vBulletin 4.x.x DragonByte SEO 2.0.31 Open Redirection

Exploit Title : vBulletin 4.x.x DragonByte SEO v2.0.31 Pro Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 28/02/2019 Vendor Homepages : vbulletin.com dragonbyte-tech.com Vendor Name : DragonByte Technologies Software Information Link :...

vBulletin 4.2.5 vBSEO 3.6.1 Open Redirection

Exploit Title : vBulletin 4.2.5 vBSEO 3.6.1 Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 28/02/2019 Vendor Homepage : vbulletin.com vbseo.com Software Information Links : vbulletin.web.tr/forumdisplay.php/49-vBulletin-seo-vBseo-dbseo...

vBulletin 4.2.0 ChangUonDyU Chatbox 3.6.0 Cross Site Scripting

Exploit Title : vBulletin 4.2.0 ChangUonDyU Chatbox Plugins 3.6.0 Cross Site Scripting Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 26/02/2019 Vendor Homepages : vbulletin.com vietvbb.vn Software Download Link : vietvbb.vn/up/showthread.php?t=40346&page=3...

CMS Scanner - Scan Wordpress, Drupal, Joomla, vBulletin Websites For Security Issues

Scan Wordpress, Drupal, Joomla, vBulletin websites for Security issues. CMSScan provides a centralized Security Dashboard for CMS Security scans. It is powered by wpscan, droopescan, vbscan and joomscan. It supports both on demand and scheduled scans and has the ability to sent email reports...