corpus.blog
41,554 blogs · 4,830,141 posts Claim your blog
Record · corpus.blog/posts/01a08793-d899-712e-aa9b-a2e48f15e2d9

Don't Call That "Protected" Method: Dissecting an N-Day vBulletin RCE

karmainsecurity.com · published 23 May 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at karmainsecurity.com Wayback capture
1blogs citing
First cited
25 May 2025
Most recent
25 May 2025
Rank this month
not ranked
External links
15
Words captured
4,141

Cited by

Blog
In the post
Date
PentesterLab
Research Worth Reading Week 21/2025 Read at the source ↗
25 May 2025

Links from this post

Link
Host
https://www.vbulletin.com
vbulletin.com
https://en.wikipedia.org/wiki/Model%E2%80%93view%E2%80%93controller
en.wikipedia.org
https://en.wikipedia.org/wiki/Arbitrary_code_execution
en.wikipedia.org
https://forum.vbulletin.com/forum/vbulletin-announcements/vbulletin-announcements_aa/4491049-security-patch-released-for-vbulletin-6-x-and-5-7-5
forum.vbulletin.com
https://3v4l.org/IODNa
3v4l.org
https://www.vbulletin.com/docs/html/main/template_conditionals
vbulletin.com
https://3v4l.org/7EjFA
3v4l.org
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48827
cve.mitre.org
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48828
cve.mitre.org
https://gbhackers.com/severe-vbulletin-flaw/
gbhackers.com
Research Worth Reading Week 21/2025 Read at the source ↗
pentesterlab.com
https://www.redhotcyber.com/post/doppia-vulnerabilita-in-vbulletin-il-ricercatore-egidio-romano-egix-disseziona-un-pericoloso-exploit-rce/
redhotcyber.com
https://securityaffairs.com/178481/security/two-flaws-in-vbulletin-forum-software-are-under-attack.html
securityaffairs.com
https://www.bleepingcomputer.com/news/security/hackers-are-exploiting-critical-flaw-in-vbulletin-forum-software/
bleepingcomputer.com
https://www.securityweek.com/vbulletin-vulnerability-exploited-in-the-wild/
securityweek.com
Elsewhere on karmainsecurity.com (2)