For you guys out there using forums on vbulletin... Unsecured exploit released

[TG1]

https://thehackernews.com/2019/09/vbulletin-zero-day-exploit.html

List to exact code needed to execute and get access

Full Disclosure: vBulletin 5.x 0day pre-auth RCE exploit

seclists.org

Researcher examines and explains why. Poor logic.

2019_vbulletin_0day_info.txt

GitHub Gist: instantly share code, notes, and snippets.

gist.github.com

A lot of hackers will be on lookout for any sites using this tool someone threw up fast.

https://github.com/Frint0/mass-pwn-vbulletin

So if your a member at forums that use VB there could be a lot more hacks released soon and private data exposed. Keep in mind this affects the current versions of VB.

There’s plenty other exploits from past versions but now you must trust your forum has a good admin that keeps up and patches the issues with the software. I hate any forum based on PHP honestly. This issue for now is unpatched so any forum using this software versions is vulnerable to the hack.

@members

 

[Bigmurph6]

All V bulletin boards which is alot of other forums are all completely vulnerable and will be exploited.

Be safe brothers and sisters

Thanks @TG this is a huge hole

 

[Swest]

On top of things as ever. Nice one @TG