cve-lfi-lab

🧠 Laboratorio CVE: Simulazione Analista SOC Livello 1 CVE-2025-39507 | Local File Inclusion nel Plugin Nasa Core di WordPress 📝 Scenario: Una Giornata nel SOC È un normale lunedì. Sono connesso al dashboard del SOC, esaminando gli avvisi come al solito. Ne arriva uno che attira la mia attenzione:...

CVE-2025-39507

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in NasaTheme Nasa Core nasa-core allows PHP Local File Inclusion.This issue affects Nasa Core: from n/a through 6.4.4...

CVE-2025-39507 WordPress Nasa Core Plugin <= 6.4.4 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in NasaTheme Nasa Core nasa-core allows PHP Local File Inclusion.This issue affects Nasa Core: from n/a through 6.4.4...

CVE-2025-39507 WordPress Nasa Core Plugin <= 6.3.2 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in NasaTheme Nasa Core allows PHP Local File Inclusion. This issue affects Nasa Core: from n/a through 6.3.2...

CVE-2025-39507

The CVE-2025-39507 entry concerns WordPress Nasa Core plugin (versions through 6.3.2) vulnerable to Local File Inclusion via improper filename control in PHP include/require. Affected software: Nasa Core

WordPress Nasa Core Plugin <= 6.4.4 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Bonds in WordPress Plugin Nasa Core versions 6.4.4...