CVE-2024-25600criticalexploração observadaCWE-94

CVE-2024-25600: falha crítica em Codeer Limited Bricks Builder

WordPress Bricks Theme <= 1.9.6 - Unauthenticated Remote Code Execution (RCE) vulnerability

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Bricks Builder

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

100Vexday Risk Score

Corrija agora. Ela exploração observada pelo VulnCheck e tem exploit funcional público.

ssvc Actcvss 10epss 91%
da publicação à armano mesmo dia
Publicada no NVD4 de jun.
1ª PoC20 de fev.
metasploit19 de fev.
VulnCheck19 de fev.
Improper Control of Generation of Code ('Code Injection') vulnerability in Codeer Limited Bricks Builder allows Code Injection.This issue affects Bricks Builder: from n/a through 1.9.6.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
Codeer Limited · Bricks Builder
PoCs públicas encontradas — 53
exploitdbwww.exploit-db.com/exploits/52619não verificadocve_referencegithub.com/Chocapikk/CVE-2024-25600★ 182githubgithub.com/Christbowel/CVE-2024-25600_Nuclei-Template★ 31githubgithub.com/so1icitx/CVE-2024-25600★ 13githubgithub.com/Tornad0007/CVE-2024-25600-Bricks-Builder-plugin-for-WordPress★ 8githubgithub.com/hy011121/CVE-2024-25600-wordpress-Exploit-RCE★ 3githubgithub.com/CerberusMrXi/WP-Bricks-Exploit-CVE-2024-25600★ 2githubgithub.com/estebanzarate/CVE-2024-25600-WordPress-Bricks-Builder-RCE-PoC★ 1githubgithub.com/X-Projetion/WORDPRESS-CVE-2024-25600-EXPLOIT-RCE★ 1githubgithub.com/K52-ai/CVE-2024-25600★ 0githubgithub.com/meli0dasH4ck3r/cve-2024-25600★ 0githubgithub.com/ivanbg2004/ODH-BricksBuilder-CVE-2024-25600-THM★ 0githubgithub.com/DedsecTeam-BlackHat/Poleposph★ 0githubgithub.com/r0otk3r/CVE-2024-25600★ 0githubgithub.com/Anjai7/TryHack3M-Bricks-Heist★ 0githubgithub.com/NanoWraith/CVE-2024-25600★ 0githubgithub.com/WanLiChangChengWanLiChang/CVE-2024-25600★ 0githubgithub.com/Sibul-Dan-Glokta/test-task-CVE-2024-25600★ 0githubgithub.com/zxc2009/TryHack3M-Bricks-Heist★ 0githubgithub.com/eunbyulaakash/CVE-2024-25600-FOR-PYTHON-3.8-AND-ABOVE★ 0githubgithub.com/svchostmm/CVE-2024-25600-mass★ 0githubgithub.com/ranjithxploit/CVE-2024-25600★ 0githubgithub.com/h0w1tzxr/TryHack3M-Bricks-Heist★ 0githubgithub.com/diamorphine666/CVE-2024-25600★ 0githubgithub.com/KaSooMi0228/CVE-2024-25600-Bricks-Builder-WordPress★ 0vulncheckvulncheck.com/xdb/75346e4543bdnão verificadovulncheckvulncheck.com/xdb/18041a4481d0não verificadovulncheckvulncheck.com/xdb/67245ca97adanão verificadovulncheckvulncheck.com/xdb/c94aaa256b55não verificadocve_referencegithub.com/K3ysTr0K3R/CVE-2024-25600-EXPLOITnão verificadovulncheckvulncheck.com/xdb/d3698d177fbbnão verificadovulncheckvulncheck.com/xdb/e335c6f6e316não verificadovulncheckvulncheck.com/xdb/f8c55bc3fe8enão verificadovulncheckvulncheck.com/xdb/16b1ebadf0c8não verificadovulncheckvulncheck.com/xdb/bd8997f902e9não verificadovulncheckvulncheck.com/xdb/fe8e65815213não verificadovulncheckvulncheck.com/xdb/b88a09ceb847não verificadovulncheckvulncheck.com/xdb/d461f5e95852não verificadovulncheckvulncheck.com/xdb/bb8a84b010c0não verificadovulncheckvulncheck.com/xdb/430d73cc78f5não verificadovulncheckvulncheck.com/xdb/b362ec702b49não verificadovulncheckvulncheck.com/xdb/274dd56fb1c4não verificadovulncheckvulncheck.com/xdb/6803eccccfebnão verificadovulncheckvulncheck.com/xdb/63d17c42b9efnão verificadovulncheckvulncheck.com/xdb/f6f84a1a36f9não verificadovulncheckvulncheck.com/xdb/48053e503ee2não verificadovulncheckvulncheck.com/xdb/9297a3e1bb69não verificadovulncheckvulncheck.com/xdb/0ba4217465ecnão verificadovulncheckvulncheck.com/xdb/9c0b1ef40266não verificadovulncheckvulncheck.com/xdb/bf44325d9dd1não verificadovulncheckvulncheck.com/xdb/035d38d2ed34não verificadovulncheckvulncheck.com/xdb/f3a02f4301fanão verificadovulncheckvulncheck.com/xdb/93afbea08380não verificado
⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.