oiyl/CVE-2025-46171

PoC

Writeup of a Denial of Service vulnerability in the vBulletin 3.8.7 friends list.

view exploit source poc_in_githubauthor oiylpublished 2025-06-17catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2025-46171US	—	0.31% (23rd)	Exploit	2025-07-23
vBulletin 3.8.7 is vulnerable to a denial-of-service condition via the misc.php?do=buddylist endpoint. If an authenticated user has a sufficiently large buddy list, processing the…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.