Bricks 漏洞列表

Fofa: body="/wp-content/themes/bricks/"

Bricks Builder is a popular WordPress development theme with approximately 25,000 active installations. It provides an intuitive drag-and-drop interface for designing and building WordPress websites. Bricks <= 1.9.6 is vulnerable to unauthenticated remote code execution (RCE) which means that anybody can run arbitrary commands and take over the site/server. This can lead to various malicious activities

Bricks Builder is a popular WordPress development theme with approximately 25,000 active installations. It provides an intuitive drag-and-drop interface for designing and building WordPress websites. Bricks <= 1.9.6 is vulnerable to unauthenticated remote code execution (RCE) which means that anybody can run arbitrary commands and take over the site/server. This can lead to various malicious activities

WordPres 默认配置安装的 Brick Builder 主题在低于<= 1.9.6版本中存在远程代码执行漏洞，是由"prepare_query_vars_from_settings "函数中的一个 eval 函数错误调用导致的，未经身份验证的威胁攻击者可利用该函数执行任意PHP 代码，写入后门文件获取服务器权限。

【漏洞对象】FLIR Brickstream 3D+传感器 【漏洞描述】 FLIR Brickstream3D+传感器存在未授权访问，导致任何人都能未授权访问后台配置页面，查看传感器配置信息，ip地址等敏感信息，甚至可以重置设置，恢复出厂设置。