POC-CVE-2026-65971

CVE-2026-65971 — Injeção de SQL no Livewire PowerGrid via sortDirection Prova de conceito e descrição técnica completa para CVE-2026-65971 / GHSA-7fgc-3h6c-698r , uma injeção de SQL em power-components/livewire-powergrid acessível por meio da propriedade pública do Livewire sortDirection...

CVE-2026-34167 Coolify: Cross-tenant activity log disclosure via unlocked Livewire property in ActivityMonitor

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, the ActivityMonitor Livewire component exposes a public $activityId property without Livewire's Locked attribute. It loads activities via Activity::find$this-activityId wit...