Software
vBulletin quietly fixed a site-takeover bug a month ago. the exploit just went public
A researcher found a way to turn a page number into a working PHP shell — no login required. vBulletin patched it in July. A lot of self-hosted forums haven't.
Priya Nair · 2h ago · 7 min