vbulletin5-rce

vbulletin5 rce 취약점 탐지 도구 0x00 개요 2019년 9월, vbulletion55.0.0-5.5.4에서 rce 취약점CVE-2019-16759이 공개되었으며, ajax/render/widgetphp 파일과 post 매개변수 widgetConfigcode를 사용하여 직접 원격 코드 실행이 가능합니다. 2020년 8월 11일, 인터넷에 CVE-2019-16759 패치가 우회될 수 있다는 소식이 퍼졌으며, ajax/render/widgettabbedcontainertabpanel을 사용하고 post 매개변수...

CVE-2019-16759

CVE-2019-16759 vBulletin 5.x 인증되지 않은 원격 코드 실행 취약점 참고: 일부 PoC 전송 시 403이 반환되고 200이 아닙니다 확인 강화: echo md5'vBulletin'; 실행 후 응답 패킷에 be4ea51d962be8308a0099ae1eb3ec63이 있는지 확인 print r.text.split'be4ea51d962be8308a0099ae1eb3ec63'0 CVE-2019-16759.py root@kitploit: import requests import sys if lensys.argv !...

vBulletin 5.5.4 - 5.6.2- Remote Command Execution

vBulletin versions 5.5.4 through 5.6.2 allow remote command execution via crafted subWidgets data in an ajax/render/widgettabbedcontainertabpanel request. NOTE: this issue exists because of an incomplete fix for CVE-2019-16759. id: CVE-2020-17496 info: name: vBulletin 5.5.4 - 5.6.2- Remote Comman...

vBulletin <= 4.2.3 - SQL Injection

vBulletin versions 3.6.0 through 4.2.3 are vulnerable to an SQL injection vulnerability in the vBulletin core forumrunner addon. The vulnerability allows an attacker to execute arbitrary SQL queries and potentially access sensitive information from the database. id: CVE-2016-6195 info: name:...

vBulletin - Open Redirect

vBulletin 3.x.x and 4.2.x through 4.2.5 contains an open redirect vulnerability via the redirector.php URL parameter. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2018-6200 info: name:...

vBulletin 5.0.0-6.0.3 - Authentication Bypass

vBulletin 5.0.0 through 5.7.5 and 6.0.0 through 6.0.3 contain an authentication bypass caused by unauthenticated access to protected API controllers on PHP 8.1 or later, letting unauthenticated attackers invoke protected methods remotely.Starting from PHP 8.1, due to an internal adjustment to...

vBulletin 6.x - Remote Code Execution

vBulletin 5.x through 5.7.5 and 6.x through 6.2.1 contain an eval injection vulnerability caused by insufficiently restrictive regex filtering in vB5TemplateRuntime::runMaths, letting unauthenticated remote attackers execute arbitrary PHP code via the pagenavpagenumber parameter in ajax/render...

vBulletin SQL Injection

vBulletin before 5.5.6pl1, 5.6.0 before 5.6.0pl1, and 5.6.1 before 5.6.1pl1 has incorrect access control that permits SQL injection attacks. id: CVE-2020-12720 info: name: vBulletin SQL Injection author: pdteam severity: critical description: vBulletin before 5.5.6pl1, 5.6.0 before 5.6.0pl1, and...

vBulletin <= 5.6.9 - Pre-authentication Remote Code Execution

vBulletin before 5.6.9 PL1 allows an unauthenticated remote attacker to execute arbitrary code via a crafted HTTP request that triggers deserialization. This occurs because verifyserialized checks that a value is serialized by calling unserialize and then checking for errors. id: CVE-2023-25135...

vBulletin replaceAdTemplate - Remote Code Execution

vBulletin versions 5.0.0 through 6.0.3 contain a Remote Code Execution RCE vulnerability in the ajax/api/ad/replaceAdTemplate endpoint. This flaw arises from improper use of PHP's Reflection API, allowing unauthenticated attackers to invoke protected controller methods. By injecting a crafted...

Ultimate-CVE-2026-61511

CVE-2026-61511 – 概念実証 vBulletin の脆弱性 CVE-2026-61511（認証不要のリモートコード実行）への曝露を検証するための教育・防御目的の概念実証（PoC）です。 連絡先 Telegram: https://t.me/thecodeb0ss 概要 このリポジトリは、vBulletin の脆弱性 CVE-2026-61511 に対する防御的な検出および検証の概念実証 を提供します。 公開されているセキュリティ研究によると、CVE-2026-61511 は vBulletin のテンプレートランタイムにおける重大な eval...

CVE-2026-61511-PoC-Exploit

CVE-2026-61511 – vBulletin Pre‑Auth RCE Exploit & Verifier ⚠️ ETHICAL USE ONLY – AUTHORIZED SECURITY TESTING This repository provides tools for authorized security professionals, blue teams, and penetration testers only. Unauthorized access to computer systems is illegal under CFAA US, Computer...

CVE-2026-61511

VBulletin RCE POC Telegram : @esp256 지원 : 대량/단일 스캔 Fofa Dork root@kitploit: body="Powered by vBulletin" body="vbulletin/core/cpstyles" body="Powered by vBulletin" && body="6.2" body="Powered by vBulletin" && body="6.1" body="Powered by vBulletin" && body="6."...

CMSScan

CMSScan WordPress、Drupal、Joomla、vBulletin のウェブサイトをセキュリティ問題についてスキャンします。 Made with in India CMSScan は CMS セキュリティスキャンのための集中型セキュリティダッシュボードを提供します。wpscan、droopescan、vbscan、joomscan を基盤としています。オンデマンドスキャンと定期的スキャンの両方をサポートし、メールレポートを送信する機能があります。 インストール root@kitploit: Requires ruby, ruby-dev, gem, libwww-perl...

pwn-vbulletin

Mass-Pwn-vBulletin Обнаружение уязвимых RCE экземпляров vBulletin 5.0.0 - 5.5.4 с помощью Shodan CVE-2019-16759 Бюллетень Демонстрация Требования: Python = 3.5.3 asyncio = 3.4.3 aiohttp = 3.6.1 ipaddress termcolor = 1.1.0 tqdm = 4.36 pyfiglet click = 7.0 IPy = 1.0 Сбор хостов: Этот инструмент...

CVE-2019-16759

CVE-2019-16759 Script di rilevamento batch per RCE non autenticata su vBulletin 5.x Questa vulnerabilità è piuttosto deludente: ho provato più di 200 siti a caso e solo 5 presentavano questa falla. Per il resto arrangiatevi: avete già l'accesso a PHP, e non sapete ancora fare una reverse shell?...

CVE-2025-48827

Descrizione: RCE per versioni di Vbullettin tra 5.0.0 - 5.7.5 e 6.0.0 - 6.0.3 con PHP 8.1 Caratteristiche: Multithread Legge più target da file Rileva siti web Vbullettin Controlla la vulnerabilità e, in caso di successo, carica una webshell PHP Dettaglio di utilizzo: usage: CVE-2025-48827.py -h...

vbulletin-exploits

vbulletin-exploits Exploit che prendono di mira vBulletin. CVE-2023-25135: RCE pre-autenticazione Vedi: https://www.ambionics.io/blog/vbulletin-unserializable-but-unreachable root@kitploit: ./vbulletin-rce-cve-2023-25135.py --help Usage: vbulletin-rce-cve-2023-25135.py -h -p PROXY url command...

CVE-2019-16759-Vbulletin-rce-exploit

Este repositorio nao tem um README...

CVE-2019-16759

CVE-2019-16759 vBulletin 5.0 5.5.4 - 'widgetphp ' Execução Remota de Código Não Autenticada Console de linha de comando interativo para CVE-2019-16759 Uso: root@kitploit: python3 exploit.py Insira o site com Http/Https e obtenha o Shell :p...