CVE-2024-25600_Nuclei-Template

CVE-2024-25600Nuclei-Template CVE-2024-25600에 대한 Nuclei 템플릿 및 PoC 정보 설명 📝 Bricks 테마WordPress용는 버전 1.9.6 이하의 모든 버전에서 원격 코드 실행Remote Code Execution에 취약합니다. 이로 인해 인증되지 않은 공격자가 서버에서 코드를 실행할 수 있습니다. 이 템플릿 🛠️은 nuclei를 사용하여 WordPress용 Bricks Builder 플러그인에서 발견된 CVE-2024-25600 취약점 🕳️을 탐지하도록 설계되었습니다. 이 취약점을...

TryHack3M-Bricks-Heist

target:10.201.6.98 열거 nmap -A 10.201.6.98 "brick by brick"이라는 이름의 WordPress가 있고 이 방의 이름이 brick이므로, 거기서 취약점을 찾을 수 있을 것입니다. 그러니 WordPress를 열거해 봅시다. wpscan --url https://bricks.thm --disable-tls-checks tls-checks를 활성화하면 작동하지 않습니다. 여기 brick에 대한 또 다른 참조가 있습니다. 이 테마에 취약점이 있는지 확인해 봅시다. bricks 1.9.5 취약점을...

CVE-2024-2297

The Bricks theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.9.6.1. This is due to insufficient validation checks placed on the createautosave AJAX function. This makes it possible for authenticated attackers, with contributor-level access and above...

EUVD-2023-44076

Malicious code in bioql PyPI...

EUVD-2022-42777

Malicious code in bioql PyPI...

EUVD-2023-44075

Malicious code in bioql PyPI...

EUVD-2023-44077

Malicious code in bioql PyPI...

EUVD-2025-22967

Malicious code in bioql PyPI...

EUVD-2024-27252

Malicious code in bioql PyPI...

CVE-2025-6495

The Bricks theme for WordPress is vulnerable to blind SQL Injection via the ‘p’ parameter in all versions up to, and including, 1.12.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticat...

CVE-2025-6495

The Bricks theme for WordPress is vulnerable to blind SQL Injection via the ‘p’ parameter in all versions up to, and including, 1.12.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticat...

CVE-2025-6495

CVE-2025-6495 affects the Bricks theme for WordPress (prior to 1.12.5; versions up to 1.12.4) with a blind SQL Injection via the p parameter caused by insufficient escaping and inadequate SQL query preparation. Exploitation is unauthenticated and can lead to leakage of sensitive data. Remediation...

CVE-2025-6495: Improper Neutralization of Special Elements used in an SQL Command

The Bricks theme for WordPress is vulnerable to blind SQL Injection via the ‘p’ parameter in all versions up to, and including, 1.12.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticat...

PT-2025-31168 · WordPress · Bricks Theme For Wordpress

Name of the Vulnerable Software and Affected Versions: Bricks theme for WordPress versions prior to 1.12.5 Description: The Bricks theme for WordPress is susceptible to a blind SQL Injection issue via the p parameter. Insufficient escaping of user-supplied input and inadequate preparation of...

VulnCheck KEV: CVE-2025-6495

The Bricks theme for WordPress is vulnerable to blind SQL Injection via the ‘p’ parameter in all versions up to, and including, 1.12.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticat...

CVE-2023-3408

The Bricks theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.8.1. This is due to missing or incorrect nonce validation on the 'savesettings' function. This makes it possible for unauthenticated attackers to modify the theme's settings, including...

CVE-2023-3410

The Bricks theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘customTag' attribute in versions up to, and including, 1.10.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with access to the Bricks Builder...

CVE-2023-3409

The Bricks theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.8.1. This is due to missing or incorrect nonce validation on the 'resetsettings' function. This makes it possible for unauthenticated attackers to reset the theme's settings via a forged...

CVE-2022-3400

The Bricks theme for WordPress is vulnerable to authorization bypass due to a missing capability check on the brickssavepost AJAX action in versions 1.0 to 1.5.3. This makes it possible for authenticated attackers with minimal permissions, such as a subscriber, to edit any page, post, or template...

CVE-2024-2297

The Bricks theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.9.6.1. This is due to insufficient validation checks placed on the createautosave AJAX function. This makes it possible for authenticated attackers, with contributor-level access and above...