CVE-2024-25600criticalexplotación observadaCWE-94

CVE-2024-25600: fallo crítico en Codeer Limited Bricks Builder

WordPress Bricks Theme <= 1.9.6 - Unauthenticated Remote Code Execution (RCE) vulnerability

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Bricks Builder

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

100Vexday Risk Score

Corrige ahora. Ella explotación observada por VulnCheck y tiene exploit funcional público.

ssvc Actcvss 10epss 91%
de la publicación al armael mismo día
Publicada en NVD4 jun
1ª PoC20 feb
metasploit19 feb
VulnCheck19 feb
Improper Control of Generation of Code ('Code Injection') vulnerability in Codeer Limited Bricks Builder allows Code Injection.This issue affects Bricks Builder: from n/a through 1.9.6.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Productos afectados
Codeer Limited · Bricks Builder
PoCs públicas encontradas — 53
exploitdbwww.exploit-db.com/exploits/52619no verificadocve_referencegithub.com/Chocapikk/CVE-2024-25600★ 182githubgithub.com/Christbowel/CVE-2024-25600_Nuclei-Template★ 31githubgithub.com/so1icitx/CVE-2024-25600★ 13githubgithub.com/Tornad0007/CVE-2024-25600-Bricks-Builder-plugin-for-WordPress★ 8githubgithub.com/hy011121/CVE-2024-25600-wordpress-Exploit-RCE★ 3githubgithub.com/CerberusMrXi/WP-Bricks-Exploit-CVE-2024-25600★ 2githubgithub.com/estebanzarate/CVE-2024-25600-WordPress-Bricks-Builder-RCE-PoC★ 1githubgithub.com/X-Projetion/WORDPRESS-CVE-2024-25600-EXPLOIT-RCE★ 1githubgithub.com/K52-ai/CVE-2024-25600★ 0githubgithub.com/meli0dasH4ck3r/cve-2024-25600★ 0githubgithub.com/ivanbg2004/ODH-BricksBuilder-CVE-2024-25600-THM★ 0githubgithub.com/DedsecTeam-BlackHat/Poleposph★ 0githubgithub.com/r0otk3r/CVE-2024-25600★ 0githubgithub.com/Anjai7/TryHack3M-Bricks-Heist★ 0githubgithub.com/NanoWraith/CVE-2024-25600★ 0githubgithub.com/WanLiChangChengWanLiChang/CVE-2024-25600★ 0githubgithub.com/Sibul-Dan-Glokta/test-task-CVE-2024-25600★ 0githubgithub.com/zxc2009/TryHack3M-Bricks-Heist★ 0githubgithub.com/eunbyulaakash/CVE-2024-25600-FOR-PYTHON-3.8-AND-ABOVE★ 0githubgithub.com/svchostmm/CVE-2024-25600-mass★ 0githubgithub.com/ranjithxploit/CVE-2024-25600★ 0githubgithub.com/h0w1tzxr/TryHack3M-Bricks-Heist★ 0githubgithub.com/diamorphine666/CVE-2024-25600★ 0githubgithub.com/KaSooMi0228/CVE-2024-25600-Bricks-Builder-WordPress★ 0vulncheckvulncheck.com/xdb/75346e4543bdno verificadovulncheckvulncheck.com/xdb/18041a4481d0no verificadovulncheckvulncheck.com/xdb/67245ca97adano verificadovulncheckvulncheck.com/xdb/c94aaa256b55no verificadocve_referencegithub.com/K3ysTr0K3R/CVE-2024-25600-EXPLOITno verificadovulncheckvulncheck.com/xdb/d3698d177fbbno verificadovulncheckvulncheck.com/xdb/e335c6f6e316no verificadovulncheckvulncheck.com/xdb/f8c55bc3fe8eno verificadovulncheckvulncheck.com/xdb/16b1ebadf0c8no verificadovulncheckvulncheck.com/xdb/bd8997f902e9no verificadovulncheckvulncheck.com/xdb/fe8e65815213no verificadovulncheckvulncheck.com/xdb/b88a09ceb847no verificadovulncheckvulncheck.com/xdb/d461f5e95852no verificadovulncheckvulncheck.com/xdb/bb8a84b010c0no verificadovulncheckvulncheck.com/xdb/430d73cc78f5no verificadovulncheckvulncheck.com/xdb/b362ec702b49no verificadovulncheckvulncheck.com/xdb/274dd56fb1c4no verificadovulncheckvulncheck.com/xdb/6803eccccfebno verificadovulncheckvulncheck.com/xdb/63d17c42b9efno verificadovulncheckvulncheck.com/xdb/f6f84a1a36f9no verificadovulncheckvulncheck.com/xdb/48053e503ee2no verificadovulncheckvulncheck.com/xdb/9297a3e1bb69no verificadovulncheckvulncheck.com/xdb/0ba4217465ecno verificadovulncheckvulncheck.com/xdb/9c0b1ef40266no verificadovulncheckvulncheck.com/xdb/bf44325d9dd1no verificadovulncheckvulncheck.com/xdb/035d38d2ed34no verificadovulncheckvulncheck.com/xdb/f3a02f4301fano verificadovulncheckvulncheck.com/xdb/93afbea08380no verificado
⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.