1867 matches found
vbulletin5-rce
vbulletin5 rce vulnerability detection tool 0x00 Overview In September 2019, vbulletin5 5.0.0-5.5.4 disclosed an RCE vulnerability CVE-2019-16759. Using the file ajax/render/widgetphp and the POST parameter widgetConfigcode, remote code execution can be directly achieved. On August 11, 2020, a...
CVE-2019-16759
CVE-2019-16759 vBulletin 5.x Unauthenticated Remote Code Execution Vulnerability Note: Some PoC packets return 403 instead of 200 Enhanced detection: echo md5'vBulletin'; Check if the response contains be4ea51d962be8308a0099ae1eb3ec63 print r.text.split'be4ea51d962be8308a0099ae1eb3ec63'0...
CVE-2025-48827
CVE-2025-48827 - vBulletin Authentication Bypass Exploit Overview This repository contains a proof-of-concept exploit for CVE-2025-48827, a critical authentication bypass vulnerability affecting vBulletin 5.0.0–5.7.5 and 6.0.0–6.0.3 when running on PHP 8.1 or later. The vulnerability allows...
vBulletin_Routestring-RCE
CVE-2019-16759vBulletinRoutestring-RCE-PoC A vulnerability has been discovered in vBulletin which could allow for remote code execution when a malicious POST request is sent to the vulnerable application. The vulnerability is due to an input validation error while parsing a HTTP request in the...
CVE-2019-16759
CVE-2019-16759 vBulletin 5.0 5.5.4 - 'widgetphp ' Unauthenticated Remote Code Execution Interactive-Like Command-Line Console for CVE-2019-16759 Usage: python3 exploit.py Enter the Site with Http/Https and Get the Shell :p...
CVE-2015-7808
CVE-2015-7808 PoC code for vBulletin PreAuth vulnerability Usage: perl vbulletin.pl www.vbulletin.com/forum id...
http-vuln-CVE-2019-16759
SUMMARY Simple NSE script to detect vBulletin 5.x 0day pre-auth RCE. This should work on all versions from 5.0.0 till 5.5.4 INSTALLATION $ git clone https://github.com/r00tpgp/http-vuln-CVE-2019-16759 $ cd http-vuln-CVE-2019-16759/ $ sudo cp http-vuln-CVE-2019-16759.nse /usr/share/nmap/scripts/...
CVE-2019-16759
CVE-2019-16759 Vbulletin RCE Exploits...
CVE-2026-61511-PoC-Exploit
CVE-2026-61511 – vBulletin Pre‑Auth RCE Exploit & Verifier ETHICAL USE ONLY – AUTHORIZED SECURITY TESTING This repository provides tools for authorized security professionals, blue teams, and penetration testers only. Unauthorized access to computer systems is illegal under CFAA US, Computer Misu...
vbscan
OWASP VBScan OWASP VBScan short for VBulletin Vulnerability Scanner is an opensource project in perl programming language to detect VBulletin CMS vulnerabilities and analysis them . Why OWASP VBScan ? If you want to do a penetration test on a vBulletin Forum, OWASP VBScan is Your best shot ever!...
vBulletin 5.0.0-5.5.4 - Remote Command Execution
vBulletin 5.0.0 through 5.5.4 is susceptible to a remote command execution vulnerability via the widgetConfig parameter in an ajax/render/widgetphp routestring request. An attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system...
vBulletin SQL Injection
vBulletin before 5.5.6pl1, 5.6.0 before 5.6.0pl1, and 5.6.1 before 5.6.1pl1 has incorrect access control that permits SQL injection attacks. id: CVE-2020-12720 info: name: vBulletin SQL Injection author: pdteam severity: critical description: vBulletin before 5.5.6pl1, 5.6.0 before 5.6.0pl1, and...
vbull
vBulletin Mass Exploit CVE-2019-16759 Alert! This tool was made for penetration testing CVE-2019-16759. We are not responsible for errors made by users of this tool. Installation and usage: $ pkg install git python2 $ pip2 install requests $ git clone https://github.com/psychoxploit/vbull $ cd...
Ultimate-CVE-2026-61511
CVE-2026-61511 – Proof of Concept Educational and defensive Proof of Concept PoC for validating exposure to the vBulletin vulnerability CVE-2026-61511 – Unauthenticated Remote Code Execution. Contact Telegram: https://t.me/thecodeb0ss Overview This repository provides a defensive detection and...
vBulletin widget_php RCE (CVE-2019-16759)
Exploits CVE-2019-16759 in vBulletin 5.0.0–5.5.4 via unauthenticated ajax/render/widgettabbedcontainertabpanel widgetphp template injection. !/usr/bin/env python3 -- coding: utf-8 -- """vBulletin widgetphp RCE CVE-2019-16759.""" import hashlib import re import urllib.parse from kittysploit import...
VulnCheck KEV: CVE-2026-61511
vBulletin 5.x through 5.7.5 and 6.x through 6.2.1 contains an eval injection vulnerability in the vB5TemplateRuntime::runMaths method within the template runtime that allows unauthenticated remote attackers to execute arbitrary PHP code by supplying crafted input through the pagenavpagenumber...
Exploit for CVE-2026-61511
VBulletin RC...
Exploit for CVE-2026-61511
CVE-2026-61511 – vBulletin Pre‑Auth RCE E...