Mastodawn

"Web Hosting Talk", a forum, running on a very old version of #vbulletin from 2015(!) has been compromised, and the details are on HIBP. #websites #forum #pwned

I'm shocked....that it didn't happen sooner.

https://haveibeenpwned.com/Breach/WebHostingTalk

Have I Been Pwned: Web Hosting Talk Data Breach

In July 2016, the Web Hosting Talk forum suffered a data breach that was subsequently listed for sale. The breach of the vBulletin based forum exposed 515k user records including usernames, email addresses, IP addresses and salted MD5 password hashes.

Have I Been Pwned

sekurak News Jun 5, 2025

Jak źli hakerzy atakują internetowe fora? Groźne podatności vBulletin i polski wątek

Fora internetowe, chociaż lata świetności mają już za sobą, wciąż stanowią nieodłączny element krajobrazu Internetu. Mimo olbrzymiej ofensywy przeprowadzonej przez social media, na rynku można znaleźć kilka silników forumowych, znanych od lat. Utrzymanie takich platform z zachowaniem najlepszych praktyk bezpieczeństwa wymaga od administratorów tak oczywistych akcji jak np. przeprowadzanie regularnych...

#WBiegu #Nuclei #Podatność #Rce #Vbulletin #Websec

https://sekurak.pl/jak-zli-hakerzy-atakuja-internetowe-fora-grozne-podatnosci-vbulletin-i-polski-watek/

Jak źli hakerzy atakują internetowe fora? Groźne podatności vBulletin i polski wątek

Sekurak

Marcel SIneM(S)US Jun 3, 2025

Jetzt patchen! Attacken auf Webforen auf #vBulletin-Basis | Security https://www.heise.de/news/Jetzt-patchen-Attacken-auf-Webforen-auf-vBulletin-Basis-10421764.html #Patchday

Jetzt patchen! Attacken auf Webforen auf vBulletin-Basis

Derzeit nutzen Angreifer eine kritische Sicherheitslücke in vBulletin aus. Updates dämmen die Gefahr ein.

heise online

securityaffairs Jun 1, 2025

Two flaws in #vBulletin forum software are under attack
https://securityaffairs.com/178481/security/two-flaws-in-vbulletin-forum-software-are-under-attack.html
#securityaffairs #hacking

Two flaws in vBulletin forum software are under attack

Experts found two vulnerabilities in the vBulletin forum software, one of which is already being exploited in real-world attacks.

Security Affairs

RF Wave Jun 1, 2025

vBulletin Forum Software Vulnerability Alert

Vulnerability: ability to invoke protected methods in PHP Reflection API and misuse of template conditionals

Impact: allows an attacker to remotely execute code

CVE: CVE-2025-48827 (actively exploited), CVE-2025-48828

Remediation Steps: apply security updates or upgrade to latest version 6.1.1

#cybersecurity #vBulletin #vulnerabilitymanagement

https://www.bleepingcomputer.com/news/security/hackers-are-exploiting-critical-flaw-in-vbulletin-forum-software/

Hackers are exploiting critical flaw in vBulletin forum software

Two critical vulnerabilities affecting the open-source forum software vBulletin have been discovered, with one confirmed to be actively exploited in the wild.

BleepingComputer

IT Insights May 31, 2025

🚨 vBulletin HACK: Update NU om je gegevens te redden! Twee kritieke kwetsbaarheden ontdekt. Beveilig je forum direct en voorkom datalekken. 🔐 #Cybersecurity #vBulletin
https://itinsights.nl/cybersecurity/vbulletijn-hack-update-nu-of-verlies-alles/

vBulletijn HACK: Update NU of verlies ALLES!

Twee kritieke kwetsbaarheden in de populaire open-source forumsoftware vBulletin zijn ontdekt, waarvan er één actief wordt misbruikt door hackers. Dit nieuws is zorgwekkend voor de vele websites en…

IT INSIGHTS

Edwin G.

May 30, 2025

Critical vulnerabilities in vBulletin 5 and 6 are being exploited right now.

https://www.bleepingcomputer.com/news/security/hackers-are-exploiting-critical-flaw-in-vbulletin-forum-software/
- - -
Des vulnérabilités critiques dans vBulletin 5 et 6 sont en cours d’exploitation en ce moment.

// Article en anglais //

#vBulletin #InfoSec #InformationSecurity #Cybersécurité

Hackers are exploiting critical flaw in vBulletin forum software

Two critical vulnerabilities affecting the open-source forum software vBulletin have been discovered, with one confirmed to be actively exploited in the wild.

BleepingComputer

BSI WID Advisories Feed May 27, 2025

#BSI WID-SEC-2025-1148: [NEU] [kritisch] #vBulletin #Connect: Mehrere Schwachstellen ermöglichen Codeausführung

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in vBulletin Connect ausnutzen, um beliebigen Programmcode auszuführen.

https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1148

Warn- und Informationsdienst

Sam Stepanyan

🐘May 26, 2025

#vBulletin: A newly discovered vulnerability in vBulletin, one of the world’s most popular forum platforms, has exposed thousands of online communities to the risk of unauthenticated Remote Code Execution (#RCE):

https://cybersecuritynews.com/vbulletin-forum-rce-vulnerability/

B166IR Mar 23, 2025

Internet forums are disappearing because now everything is Reddit and Discord. And that's worrying.

https://www-xataka-com.translate.goog/servicios/foros-internet-estan-desapareciendo-porque-ahora-todo-reddit-discord-eso-preocupante?_x_tr_sl=auto&_x_tr_tl=en&_x_tr_hl=en&_x_tr_pto=wapp

#reddit #discord #forums #discourse #vbulletin #tech #technology

Los foros de internet están desapareciendo porque ahora todo es Reddit y Discord. Y eso es preocupante

Hubo un tiempo en que los foros de discusión eran nuestras redes sociales. Los usuarios visitaban aquellos que se ajustaban a cierta temática y eso les...