DossierENTITY

critical pre-auth RCE flaw

Coverage of critical pre-auth RCE flaw in the Nexus archive.

Earliest in view: Jul 28 · 18:08 UTCMost recent: Jul 28 · 18:08 UTC

Co-mentioned in this coverage

Recent coverage

SECURITYJul 28 · 18:08 UTCBLEEPING COMPUTER
vBulletin fixes critical pre-auth RCE flaw with public exploit
A critical vulnerability in vBulletin forum software allows unauthenticated attackers to execute arbitrary PHP code via template rendering. The flaw has a public exploit available.