Security News > 2019 > September > This vBulletin vBug is vBad: Zero-day exploit lets miscreants hijack vulnerable web forums

2019-09-24 22:02
Hackers can inject system commands via version 5 of software, no patch available It's a good day to be running an ancient version of vBulletin, as researchers have disclosed a zero-day flaw that makes taking over new versions of the forum software pretty much trivial.…
News URL
http://go.theregister.com/feed/www.theregister.co.uk/2019/09/24/vbulletin_vbug_zeroday/
Related news
- XE Hacker Group Exploits VeraCore Zero-Day to Deploy Persistent Web Shells (source)
- ⚡ THN Weekly Recap: Alerts on Zero-Day Exploits, AI Breaches, and Crypto Heists (source)
- APTs have been using zero-day Windows shortcut exploit for eight years (ZDI-CAN-25373) (source)
- Zero-Day Alert: Google Releases Chrome Patch for Exploit Used in Russian Espionage Attacks (source)
- EncryptHub Exploits Windows Zero-Day to Deploy Rhadamanthys and StealC Malware (source)
- RESURGE Malware Exploits Ivanti Flaw with Rootkit and Web Shell Features (source)