The install/upgrade.php scripts in vBulletin 4.1 and 5 allow remote attackers to create administrative accounts via the customerid, htmldata[password], htmldata[confirmpassword], and htmldata[email]. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 78.2%.
PHP
Privilege Escalation
Vbulletin
NVD
Exploit-DB
CVSS 2.0
7.5
EPSS
78.2%
Threat
5.3
Stack-based buffer overflow in the RuntimeDiagnosticPing function in /bin/webs on D-Link DIR-100 routers might allow remote authenticated administrators to execute arbitrary commands via a long. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.
Buffer Overflow
D-Link
Dir 100
NVD
Exploit-DB
CVSS 2.0
8.5
EPSS
2.9%