Unauthenticated API Access in vBulletin:
vBulletin 5.0.0 through 5.7.5 and 6.0.0 through 6.0.3 allows unauthenticated users to invoke protected API controllers' methods when running on PHP 8.1 or later, as demonstrated by the /api.php?method=protectedMethod pattern, as exploited in the wild in May 2025.

Recursive mutex misuse occurs when a thread incorrectly attempts to acquire a recursive mutex multiple times from the same thread without first unlocking it, leading to a deadlock or unexpected behavior.

• A recursive mutex (also known as a reentrant mutex) allows a thread to acquire the same mutex multiple times from the same thread without causing a deadlock.
• Each time the mutex is locked, an internal counter is incremented. The mutex is only released when the counter reaches zero, which happens when the thread unlocks the mutex the same number of times it locked it.

#include <mutex>
#include <iostream>

std::recursive_mutex rmutex;

void unsafe_function() {
    // This function doesn't properly handle the mutex
    // Maybe it was written by another team or uses a C library
    
    // It tries to lock the mutex but doesn't unlock it properly
    rmutex.lock();
    
    // Maybe it throws an exception or returns early
    throw std::runtime_error("Something went wrong!");
    
    // The unlock never happens!
    rmutex.unlock();
}

void normal_function() {
    // Lock the recursive mutex
    rmutex.lock();
    
    std::cout << "Doing some work with the lock held" << std::endl;
    
    try {
        // Call the unsafe function while holding the lock
        unsafe_function();
    } catch (const std::exception& e) {
        std::cout << "Caught exception: " << e.what() << std::endl;
    }
    
    // We think we only need to unlock once, but the unsafe function
    // has left the mutex in an inconsistent state
    rmutex.unlock();
}

The program name.exe version 1.0.0.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.

evil-winrm-py is a python-based tool for executing commands on remote Windows machines using the WinRM (Windows Remote Management) protocol. It provides an interactive shell with enhanced features like file upload/download, command history, and colorized output. It supports various authentication methods including NTLM, Pass-the-Hash, Certificate, and Kerberos.