vBulletin 5.x.x exploit

[scytalevsbijaz]

1337day Inj3ct0r Exploit Database : vulnerability : 0day : shellcode by Inj3ct0r Team

[pXp.n0LimiT]

Uuuufff era de asteptat , is real ?

[Nytro]

De unde stiti ca nu e Fake?

Mai multe "detalii":

[neox]

Se poate sa fie posibil nu zic ca nu dar sa fim seriosi facut de 1337Day Team cred ca numai reclama la 1337day si cand mai vad si in spatele titlului 0day si pretul .

Este ca exploitul lui ala The Black Devils 1337day Inj3ct0r Exploit Database : vulnerability : 0day : shellcode by Inj3ct0r Team , firefox Crash Exploit nu e problema pretul dar ca membru din Inj3ct0r team si vinde asa ceva, daca era un user normal nu era problema dar ca membru din Inj3ct0r team, parerea mea este sau a fiecaruia care este pasionat de exploit development si cunoaste materie este simplu sa provoci un firefox Crash problema este sa controlezi exploitul pina la capat nu numai sa provoci Crash.

Concluzie:Toti aproape din Inj3ct0r team castiga bani de pe incepatori surse copiate si modificate si cum am scris mai sus daca permite la un membru din team sa vinda firefox Crash Exploit sint niste jigodi.

[Versus71]

Little information. Need video demonstration use this vuln.

[Versus71]

New details

According to Brian Krebs, MacRumors representatives have told him that the attacker hacked a moderator’s account which he used to embed JavaScript code in an announcement. When an administrator loaded the announcement page, a plugin was installed in the background allowing the attackers to execute PHP code.

Arnold Kim, the owner of MacRumors, has noted that the moderator whose account has been compromised had used the same username and password on vBulletin.com as well.

It remains to be seen if the zero-day is real or not. Krebs says some users have already purchased the exploit sold by Inject0r so we’ll probably find out soon enough.

In the meantime, DEF CON, OVH, and Garage4Hackers have disabled their forums as a precaution.

this vuln at the price of $200 in Bitcoins

krebsonsecurity.com/wp-content/uploads/2013/11/2btcVbseller.png

[B3st]

E cam fake, uite aici leak ul.

[OCAK]

Interesant.

[kumudam]

puteti posta si aici codul,detalii .... va rog

[kempactick]

^ Ce cod ma? Tu te-ai uitat putin mai sus sa vezi despre ce e vorba?

E pe bani "codul" asta de care zici tu.

[Tumbler]

E public si pe leak.sx ..

[kumudam]

chiar de aia rog pe cineva sa posteze si aici, multumesc