Lucene search
+L

46 matches found

Kitploit
Kitploit
•added 2026/09/28 12:10 a.m.•17 views

vbulletin5-rce

vbulletin5 rce vulnerability detection tool 0x00 Overview In September 2019, vbulletin5 5.0.0-5.5.4 disclosed an RCE vulnerability CVE-2019-16759. Using the file ajax/render/widgetphp and the POST parameter widgetConfigcode, remote code execution can be directly achieved. On August 11, 2020, a...

9.8CVSS9AI score0.99728EPSS
SaveExploits28
Kitploit
Kitploit
•added 2026/09/27 5:53 p.m.•15 views

pwn-vbulletin

Mass-Pwn-vBulletin Identify vulnerable RCE vBulletin 5.0.0 - 5.5.4 instances using Shodan CVE-2019-16759 Bulletin Demo Requirements: Python = 3.5.3 asyncio = 3.4.3 aiohttp = 3.6.1 ipaddress termcolor = 1.1.0 tqdm = 4.36 pyfiglet click = 7.0 IPy = 1.0 Gathering Hosts: This tool asynchronously...

9.8CVSS8.8AI score0.99728EPSS
SaveExploits28
Kitploit
Kitploit
•added 2026/09/26 10:54 p.m.•12 views

vBulletin_Routestring-RCE

CVE-2019-16759vBulletinRoutestring-RCE-PoC A vulnerability has been discovered in vBulletin which could allow for remote code execution when a malicious POST request is sent to the vulnerable application. The vulnerability is due to an input validation error while parsing a HTTP request in the...

9.8CVSS8.8AI score0.99728EPSS
SaveExploits28
Kitploit
Kitploit
•added 2026/09/26 4:53 a.m.•12 views

CVE-2019-16759-bypass

CVE-2019-16759-bypass...

9.8CVSS8.7AI score0.99728EPSS
SaveExploits28
Nuclei
Nuclei
•added 2026/09/25 2:05 a.m.•79 views

vBulletin 5.0.0-5.5.4 - Remote Command Execution

vBulletin 5.0.0 through 5.5.4 is susceptible to a remote command execution vulnerability via the widgetConfig parameter in an ajax/render/widgetphp routestring request. An attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system...

9.8CVSS8.7AI score0.99728EPSS
SaveExploits28References5
Kitploit
Kitploit
•added 2026/09/24 2:53 p.m.•9 views

CVE-2019-16759-Vbulletin-rce-exploit

This repository does not have a README...

9.8CVSS8.5AI score0.99728EPSS
SaveExploits28
Kitploit
Kitploit
•added 2026/09/24 11:52 a.m.•12 views

http-vuln-CVE-2019-16759

SUMMARY Simple NSE script to detect vBulletin 5.x 0day pre-auth RCE. This should work on all versions from 5.0.0 till 5.5.4 INSTALLATION $ git clone https://github.com/r00tpgp/http-vuln-CVE-2019-16759 $ cd http-vuln-CVE-2019-16759/ $ sudo cp http-vuln-CVE-2019-16759.nse /usr/share/nmap/scripts/...

9.8CVSS8.4AI score0.99728EPSS
SaveExploits28References1
Kitploit
Kitploit
•added 2026/09/22 3:40 a.m.•10 views

vbull

vBulletin 大量エクスプロイト CVE-2019-16759 警告! このツールは、CVE-2019-16759 のペネトレーションテスト用に作られました。 このツールの利用者による過ちについて、私たちは責任を負いません。 インストールと使用方法: $ pkg install git python2 $ pip2 install requests $ git clone https://github.com/psychoxploit/vbull $ cd vbull 注意: このツールを実行する前に、http://target.tld/ または...

9.8CVSS8.7AI score0.99728EPSS
SaveExploits28References1
RedhatCVE
RedhatCVE
•added 2025/05/22 3:16 p.m.•15 views

CVE-2020-17496

vBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an ajax/render/widgettabbedcontainertabpanel request. NOTE: this issue exists because of an incomplete fix for CVE-2019-16759...

9.8CVSS7.2AI score0.99728EPSS
SaveExploits29
RedhatCVE
RedhatCVE
•added 2025/05/22 3:07 p.m.•24 views

CVE-2020-7373

vBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an ajax/render/widgettabbedcontainertabpanel request. NOTE: this issue exists because of an incomplete fix for CVE-2019-16759. ALSO NOTE: CVE-2020-7373 is a duplicate of CVE-2020-17496. CVE-2020-17496 is...

9.8CVSS7.1AI score0.99728EPSS
SaveExploits30References1
RedhatCVE
RedhatCVE
•added 2025/05/22 10:35 a.m.•18 views

CVE-2019-16759

vBulletin 5.x through 5.5.4 allows remote command execution via the widgetConfigcode parameter in an ajax/render/widgetphp routestring request...

9.8CVSS7.4AI score0.99728EPSS
SaveExploits28References1
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•163 views

vBulletin PHP Module Remote Code Execution Vulnerability

The PHP module within vBulletin contains an unspecified vulnerability that allows for remote code execution via crafted subWidgets data in an ajax/render/widgettabbedcontainertabpanel request. This CVE ID resolves an incomplete patch for CVE-2019-16759...

9.8CVSS9.5AI score0.99728EPSS
SaveIn wildExploits29
NVD
NVD
•added 2020/10/30 5:15 p.m.•47 views

CVE-2020-7373

vBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an ajax/render/widgettabbedcontainertabpanel request. NOTE: this issue exists because of an incomplete fix for CVE-2019-16759. ALSO NOTE: CVE-2020-7373 is a duplicate of CVE-2020-17496. CVE-2020-17496 is...

9.8CVSS9.8AI score0.45007EPSS
SaveExploits3References4
Prion
Prion
•added 2020/10/30 5:15 p.m.•46 views

Design/Logic Flaw

vBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an ajax/render/widgettabbedcontainertabpanel request. NOTE: this issue exists because of an incomplete fix for CVE-2019-16759. ALSO NOTE: CVE-2020-7373 is a duplicate of CVE-2020-17496. CVE-2020-17496 is...

7.5CVSS9.7AI score0.99728EPSS
SaveExploits30References4Affected Software1
attackerkb
attackerkb
•added 2020/10/30 5:15 p.m.•81 views

CVE-2020-7373

vBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an ajax/render/widgettabbedcontainertabpanel request. NOTE: this issue exists because of an incomplete fix for CVE-2019-16759. ALSO NOTE: CVE-2020-7373 is a duplicate of CVE-2020-17496. CVE-2020-17496 is...

9.8CVSS8.9AI score0.45007EPSS
SaveExploits3References5
CVE
CVE
•added 2020/10/30 4:50 p.m.•131 views

CVE-2020-7373

Summary (CVE-2020-17496 / CVE-2020-7373): vBulletin 5.5.4–5.6.2 is vulnerable to remote code execution via crafted subWidgets data in an ajax/render/widget_tabbedcontainer_tab_panel request. This issue stems from an incomplete fix of CVE-2019-16759, and CVE-2020-7373 is a duplicate of CVE-2020-17...

9.8CVSS9.7AI score0.45007EPSS
SaveExploits3References4Affected Software1
Cvelist
Cvelist
•added 2020/10/30 4:50 p.m.•46 views

CVE-2020-7373

vBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an ajax/render/widgettabbedcontainertabpanel request. NOTE: this issue exists because of an incomplete fix for CVE-2019-16759. ALSO NOTE: CVE-2020-7373 is a duplicate of CVE-2020-17496. CVE-2020-17496 is...

9.8AI score0.45007EPSS
SaveExploits3References4
GithubExploit
GithubExploit
•added 2020/08/31 1:44 p.m.•55 views

Exploit for Code Injection in Vbulletin

CVE-2019-16759vBulletinRoutestring-RCE-PoC A vulnerability...

9.8CVSS10AI score0.99728EPSS
SaveExploits28
GithubExploit
GithubExploit
•added 2020/08/24 4:15 p.m.•96 views

Exploit for Code Injection in Vbulletin

It is an exploit module for Apache Struts 2. CVE-2019-16759 is t...

9.8CVSS10AI score0.99728EPSS
SaveExploits28
Packet Storm
Packet Storm
•added 2020/08/13 12:00 a.m.•264 views

vBulletin 5.x Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'vBulletin 5.x /ajax/render/widgettabbedcontainertabpanel PHP remote code execution.', 'Description' = %q This module exploits a logic bug within...

7.5CVSS0.2AI score0.99728EPSS
SaveExploits29
Rows per page
Query Builder