[pwn2dd]

[HEADING=1]

Group LunarisSec uncovered a critical vulnerability affecting http://bienvenue-hautemarne.fr.

[/HEADING]
[HEADING=1]

The flaw may allow access to sensitive data (≈5.7GB SQL database + 130MB access logs).

[/HEADING]
[HEADING=1]

Their French-style protection system is just wow!

[/HEADING]
[HEADING=1]

We expose all logs for all users, up to and including Admins ,and all the tables and columns, SQL Backend

[/HEADING]
[HEADING=2]

AUTHOR : Pwned,M0rphyne

[/HEADING]
[HEADING=2]CONTACT TELEGRAM @LastNodem,@Couzoua[/HEADING]
[HEADING=2]

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

[/HEADING]
[HEADING=1]I'm not saying all tables are included; all tables provide access to sensitive data. This is just one example as proof.[/HEADING]
CREATE DATABASE /*!32312 IF NOT EXISTS*/ `------` /*!40100 DEFAULT CHARACTER SET utf8mb4 COLLATE utf8mb4_0900_ai_ci */ /*!80016 DEFAULT ENCRYPTION='N' */;
USE `matomo`;
--
-- Table structure for table `matomo_access`
--
DROP TABLE IF EXISTS --------_access`;
/*!40101 SET @saved_cs_client = @@character_set_client */;
/*!50503 SET character_set_client = utf8mb4 */;
CREATE TABLE `------_access` (
`idaccess` int unsigned NOT NULL AUTO_INCREMENT,
`login` varchar(100) NOT NULL,
`idsite` int unsigned NOT NULL,
`access` varchar(50) DEFAULT NULL,
PRIMARY KEY (`idaccess`),
KEY `index_loginidsite` (`login`,`idsite`)
) ENGINE=InnoDB AUTO_INCREMENT=6 DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_0900_ai_ci;
/*!40101 SET character_set_client = @saved_cs_client */;
--
-- Dumping data for table `------_access`
--
LOCK TABLES `-------_access` WRITE;
/*!40000 ALTER TABLE `------_access` DISABLE KEYS */;
INSERT INTO `------_access` VALUES (1,'TUserHeadProject',1,'view'),(5,'[email protected]',1,'write');
/*!40000 ALTER TABLE `------_access` ENABLE KEYS */;
UNLOCK TABLES;


89.205.145.123 - - [04/Jun/2026:14:52:38 +0200] 200 85798 "GET /wp-content/uploads/2026/06/reportage-thermes-17-09-25-013-agence-dattractivite-de-la-haute-marne-380x240.jpg HTTP/1.1" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36"
89.205.145.123 - - [04/Jun/2026:14:52:38 +0200] 200 134536 "GET /wp-content/uploads/2023/06/reportage-vanessa-martin-2022-06-15-094-leblogcashpistache-364x212.jpg HTTP/1.1" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36"
89.205.145.123 - - [04/Jun/2026:14:52:38 +0200] 200 - "GET /wp-admin/admin-ajax.php?action=pll_xdata_check&redirect=https%3A%2F%2Fwww.bienvenue-hautemarne.fr%2Fvisites-activites%2Fthermalisme%2F&nonce=5af669cbd8 HTTP/1.1" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36"
213.186.61.37 - - [04/Jun/2026:14:52:38 +0200] 200 24758 "GET /sit/langres-pneu-52-coentcha052v500215/ HTTP/1.1" "WP Rocket/Preload"
57.141.0.41 - - [04/Jun/2026:14:52:38 +0200] 301 - "GET /feestkalender/visite-guidee-du-chateau-de-lafauche-fmacha052v5001tu-2/ HTTP/1.1" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sha...rs/crawler)"
5.183.254.92 - - [04/Jun/2026:14:52:39 +0200] 200 3278 "GET /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
89.91.202.26 - - [04/Jun/2026:14:52:38 +0200] 404 20134 "GET /apple-touch-icon.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Safari"
168.138.197.172 - - [04/Jun/2026:14:52:39 +0200] 200 3278 "GET /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0"
57.141.0.25 - - [04/Jun/2026:14:52:38 +0200] 200 30928 "GET /vrijetijdsroutes/villegusien-le-lac-du-canal-au-badin-iticha052v5002co/ HTTP/1.1" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sha...rs/crawler)"
220.181.51.118 - - [04/Jun/2026:14:52:38 +0200] 200 46470 "GET /visites-activites/randos-balades/toutes-les-balades-et-randonnees-a-pied/?distance-iti-5km=816 HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36"
5.183.254.92 - - [04/Jun/2026:14:52:40 +0200] 200 3410 "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
90.21.195.4 - - [04/Jun/2026:14:52:40 +0200] 200 110626 "GET /wp-content/uploads/sit/a56849117f500cde2266914eb9363a4b-Rizaucourt-1-335x220.jpg HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36"
168.138.197.172 - - [04/Jun/2026:14:52:40 +0200] 200 3419 "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0"
213.186.61.37 - - [04/Jun/2026:14:52:40 +0200] 200 23696 "GET /sit/longeau-centre-auto-de-villegusien-renault-coentcha052v500216/ HTTP/1.1" "WP Rocket/Preload"
122.8.44.192 - - [04/Jun/2026:14:52:41 +0200] 200 3278 "GET /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
57.141.0.60 - - [04/Jun/2026:14:52:41 +0200] 404 20199 "GET /nl/sit/pelouse-seche-du-creux-janin-pnacha052v5003r1-3/ HTTP/1.1" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sha...rs/crawler)"
20.153.140.50 - - [04/Jun/2026:14:52:43 +0200] 401 120 "GET /wp-json/wp/v2/users/me HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
213.186.61.37 - - [04/Jun/2026:14:52:42 +0200] 200 23391 "GET /sit/fayl-billot-rachel-coiffure-coentcha052v5001zo/ HTTP/1.1" "WP Rocket/Preload"
57.141.0.38 - - [04/Jun/2026:14:52:41 +0200] 200 28188 "GET /sit/la-source-bleue-hotcha052v5007rp/ HTTP/1.1" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sha...rs/crawler)"
57.141.0.12 - - [04/Jun/2026:14:52:42 +0200] 200 24924 "GET /sit/lantre-de-livres-coentcha052v500221/ HTTP/1.1" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sha...rs/crawler)"
144.16.144.93 - - [04/Jun/2026:14:52:44 +0200] 401 120 "GET /wp-json/wp/v2/users/me HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
57.141.0.26 - - [04/Jun/2026:14:52:43 +0200] 200 22512 "GET /sit/aire-de-pique-nique-de-maatz-apncha052v5001gu/ HTTP/1.1" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sha...rs/crawler)"
57.141.0.20 - - [04/Jun/2026:14:52:44 +0200] 404 20223 "GET /en/sit/aire-de-jeux-terrain-de-petanque-a-troischamps-apncha052v500amw-2/ HTTP/1.1" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sha...rs/crawler)"
213.186.61.37 - - [04/Jun/2026:14:52:44 +0200] 200 24758 "GET /sit/fayl-billot-imaginhair-coiffure-coentcha052v5001zp/ HTTP/1.1" "WP Rocket/Preload"
122.8.44.192 - - [04/Jun/2026:14:52:45 +0200] 200 3410 "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
31.24.155.180 - - [04/Jun/2026:14:52:46 +0200] 200 3278 "GET /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
213.186.61.37 - - [04/Jun/2026:14:52:46 +0200] 200 23383 "GET /sit/langres-a-femina-coentcha052v5001zq/ HTTP/1.1" "WP Rocket/Preload"
31.24.155.180 - - [04/Jun/2026:14:52:47 +0200] 200 3456 "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
130.49.112.212 - - [04/Jun/2026:14:52:47 +0200] 200 3278 "GET /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
217.113.194.98 - - [04/Jun/2026:14:52:48 +0200] 200 26728 "GET /sit/villiers-le-sec-villiers-le-sec-villecha052v500c7o/ HTTP/1.1" "Mozilla/5.0 (compatible; Barkrowler/0.9; +https://babbar.tech/crawler)"
213.186.61.37 - - [04/Jun/2026:14:52:48 +0200] 200 23320 "GET /sit/langres-anabella-coentcha052v5001zr/ HTTP/1.1" "WP Rocket/Preload"
129.121.96.121 - - [04/Jun/2026:14:52:49 +0200] 200 3278 "GET /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
213.186.61.37 - - [04/Jun/2026:14:52:49 +0200] 200 23397 "GET /sit/langres-atelier-belhair-coentcha052v5001zs/ HTTP/1.1" "WP Rocket/Preload"
89.91.202.26 - - [04/Jun/2026:14:52:50 +0200] 404 20135 "GET /apple-touch-icon.png HTTP/1.1" "NetworkingExtension/8624.2.5.10.4 Network/5812.122.1 iOS/26.5"
213.186.61.37 - - [04/Jun/2026:14:52:51 +0200] 200 - "POST /wp-cron.php?doing_wp_cron=1780577571.0236229896545410156250 HTTP/1.1" "WordPress/6.2.2; https://www.bienvenue-hautemarne.fr"
89.91.202.26 - - [04/Jun/2026:14:52:50 +0200] 404 20150 "GET /apple-touch-icon-precomposed.png HTTP/1.1" "NetworkingExtension/8624.2.5.10.4 Network/5812.122.1 iOS/26.5"
119.195.102.159 - - [04/Jun/2026:14:52:50 +0200] 200 3278 "GET /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
89.91.202.26 - - [04/Jun/2026:14:52:50 +0200] 404 20133 "GET /apple-touch-icon.png HTTP/1.1" "NetworkingExtension/8624.2.5.10.4 Network/5812.122.1 iOS/26.5"
130.49.112.212 - - [04/Jun/2026:14:52:51 +0200] 200 3410 "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
89.91.202.26 - - [04/Jun/2026:14:52:50 +0200] 404 20150 "GET /apple-touch-icon-precomposed.png HTTP/1.1" "NetworkingExtension/8624.2.5.10.4 Network/5812.122.1 iOS/26.5"
89.91.202.26 - - [04/Jun/2026:14:52:51 +0200] 404 20135 "GET /apple-touch-icon.png HTTP/1.1" "NetworkingExtension/8624.2.5.10.4 Network/5812.122.1 iOS/26.5"
119.195.102.159 - - [04/Jun/2026:14:52:51 +0200] 200 3456 "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
89.91.202.26 - - [04/Jun/2026:14:52:51 +0200] 404 20150 "GET /apple-touch-icon-precomposed.png HTTP/1.1" "NetworkingExtension/8624.2.5.10.4 Network/5812.122.1 iOS/26.5"
129.121.96.121 - - [04/Jun/2026:14:52:52 +0200] 200 3419 "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
193.186.4.124 - - [04/Jun/2026:14:52:52 +0200] 200 31725 "GET /sit/langres-les-remparts-de-langres-pcucha052v5006wi/ HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36"
45.66.209.35 - - [04/Jun/2026:14:52:52 +0200] 200 3278 "GET /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
213.186.61.37 - - [04/Jun/2026:14:52:51 +0200] 200 23488 "GET /sit/langres-coiffure-veronique-coentcha052v5001zt/ HTTP/1.1" "WP Rocket/Preload"
45.66.209.35 - - [04/Jun/2026:14:52:53 +0200] 200 3410 "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
213.232.121.77 - - [04/Jun/2026:14:52:54 +0200] 200 3278 "GET /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
213.186.61.37 - - [04/Jun/2026:14:52:53 +0200] 200 23458 "GET /sit/langres-le-salon-des-remparts-coentcha052v5001zv/ HTTP/1.1" "WP Rocket/Preload"
[HEADING=2]90.48.16.130 - - [04/Jun/2026:14:52:54 +0200] 200 - "GET /wp-admin/admin-ajax.php?action=pll_xdata_check&redirect=https%3A%2F%2Fwww.bienvenue-hautemarne.fr%2Fsit%2Fla[/HEADING]

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Selling in Games section. If you feel this is incorrect: http://breached4wtyw5fb45zj7sggnoazgv3aohme2zftkrndhvo76d5q5uad.onion/Forum-Ban-Appeals

[Crumpled2415]

Dude Why don't you share link to download it ?

[h4n]

the download link?