CVE-2025-46171

vBulletin 3.8.7 is vulnerable to a denial-of-service condition via the misc.php?do=buddylist endpoint. If an authenticated user has a sufficiently large buddy list, processing the list can consume excessive memory, exhausting system resources and crashing the forum...

vBulletin 安全漏洞

vBulletin is an open source web forum program based on PHP and MySQL from vBulletin, Inc. in the United States. A security vulnerability exists in vBulletin version 3.8.7, which stems from improper handling of the misc.php?do=buddylist endpoint, which could lead to a denial of service attack...