CVE-2024-25600_Nuclei-Template

CVE-2024-25600Nuclei-Template Шаблон Nuclei и информация о PoC для CVE-2024-25600 Описание 📝 Тема Bricks для WordPress уязвима к удаленному выполнению кода во всех версиях до 1.9.6 включительно. Это позволяет неаутентифицированным злоумышленникам выполнять код на сервере. Этот шаблон 🛠️...

TryHack3M-Bricks-Heist

target:10.201.6.98 التعداد root@kitploit: nmap -A 10.201.6.98 نظرًا لوجود ووردبريس باسم "brick by brick" واسم هذه الغرفة هو brick، فمن المحتمل أن نجد ثغرة هنا لذا دعنا نعدد ووردبريس root@kitploit: wpscan --url https://bricks.thm --disable-tls-checks التشغيل مع فحوصات TLS لن يعمل هنا إشارة أخرى إل...

CVE-2024-2297

The Bricks theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.9.6.1. This is due to insufficient validation checks placed on the createautosave AJAX function. This makes it possible for authenticated attackers, with contributor-level access and above...

EUVD-2022-42777

Malicious code in bioql PyPI...

EUVD-2023-44076

Malicious code in bioql PyPI...

EUVD-2023-44075

Malicious code in bioql PyPI...

EUVD-2023-44077

Malicious code in bioql PyPI...

EUVD-2024-27252

Malicious code in bioql PyPI...

EUVD-2025-22967

Malicious code in bioql PyPI...

CVE-2025-6495

The Bricks theme for WordPress is vulnerable to blind SQL Injection via the ‘p’ parameter in all versions up to, and including, 1.12.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticat...

CVE-2025-6495

The Bricks theme for WordPress is vulnerable to blind SQL Injection via the ‘p’ parameter in all versions up to, and including, 1.12.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticat...

CVE-2025-6495

CVE-2025-6495 affects the Bricks theme for WordPress (prior to 1.12.5; versions up to 1.12.4) with a blind SQL Injection via the p parameter caused by insufficient escaping and inadequate SQL query preparation. Exploitation is unauthenticated and can lead to leakage of sensitive data. Remediation...

PT-2025-31168 · WordPress · Bricks Theme For Wordpress

Name of the Vulnerable Software and Affected Versions: Bricks theme for WordPress versions prior to 1.12.5 Description: The Bricks theme for WordPress is susceptible to a blind SQL Injection issue via the p parameter. Insufficient escaping of user-supplied input and inadequate preparation of...

VulnCheck KEV: CVE-2025-6495

The Bricks theme for WordPress is vulnerable to blind SQL Injection via the ‘p’ parameter in all versions up to, and including, 1.12.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticat...

CVE-2023-3408

The Bricks theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.8.1. This is due to missing or incorrect nonce validation on the 'savesettings' function. This makes it possible for unauthenticated attackers to modify the theme's settings, including...

CVE-2023-3410

The Bricks theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘customTag' attribute in versions up to, and including, 1.10.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with access to the Bricks Builder...

CVE-2023-3409

The Bricks theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.8.1. This is due to missing or incorrect nonce validation on the 'resetsettings' function. This makes it possible for unauthenticated attackers to reset the theme's settings via a forged...

CVE-2022-3400

The Bricks theme for WordPress is vulnerable to authorization bypass due to a missing capability check on the brickssavepost AJAX action in versions 1.0 to 1.5.3. This makes it possible for authenticated attackers with minimal permissions, such as a subscriber, to edit any page, post, or template...

CVE-2024-2297

The Bricks theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.9.6.1. This is due to insufficient validation checks placed on the createautosave AJAX function. This makes it possible for authenticated attackers, with contributor-level access and above...

CVE-2024-2297

The Bricks theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.9.6.1. This is due to insufficient validation checks placed on the createautosave AJAX function. This makes it possible for authenticated attackers, with contributor-level access and above...