Livepyre

Livepyre Ein Tool, das entwickelt wurde, um CVE-2025-54068 und Remote Command Execution auszunutzen, wenn der APPKEY des Livewire-Projekts bekannt ist. Autoren des Tools: @remsio @Worty. Hilfe root@kitploit: $ ./Livepyre.py -h usage: Livepyre.py -h -u URL -f FUNCTION -p PARAM -H HEADERS -P PROXY ...

Laravel Livewire v3 - Remote Command Execution

Livewire v3 Laravel contains a vulnerability in its component hydration/update mechanism that can be exploited to reach remote command execution RCE without authentication under certain conditions. id: CVE-2025-54068 info: name: Laravel Livewire v3 - Remote Command Execution author: flame-11...

CVE-2025-54068

CVE-2025-54068 Uma ferramenta projetada para explorar CVE-2025-54068 e Execução Remota de Comandos se a APPKEY do projeto Livewire for conhecida. Esta ferramenta é uma versão recodificada do projeto original da Synacktiv : Livepyre — https://github.com/synacktiv/Livepyre O conceito central e a...

CVE-2025-54068-livewire

CVE-2025-54068 - Laboratorio Vulnerabile Livewire v3.6.3 Questa cartella crea un'applicazione minima Laravel + Livewire v3 bloccata alla versione Livewire 3.6.3 vulnerabile per riprodurre CVE-2025-54068. Il componente montato è scritto intenzionalmente per essere compatibile con la catena di...

recon-test-livewire

Informazioni su Laravel Laravel è un framework per applicazioni web con una sintassi espressiva ed elegante. Crediamo che lo sviluppo debba essere un'esperienza piacevole e creativa per essere davvero appagante. Laravel elimina il dolore dallo sviluppo semplificando le attività comuni utilizzate ...

livewire-vuln-scanner

Scanner Passivo di Vulnerabilità Livewire Livewire Passive Vulnerability Scanner è uno strumento Python 2.7 progettato per rilevare passivamente le versioni di Livewire utilizzate dai siti web e identificare potenziali vulnerabilità basate sul confronto delle versioni. Questo scanner non sfrutta...

livewire-honeypot

Livewire Honeypot Un honeypot ad alta interazione che si maschera da applicazione Laravel/Livewire vulnerabile. Cattura i tentativi di exploit che mirano a CVE note di Livewire, archivia file malevoli caricati webshell e payload di remote code execution RCE con deduplicazione SHA-256 e,...

Livewire2025CVE

Livewire2025CVE Scanner Livewire CVE-2025-54068 Scanner automatizado de vulnerabilidades para detectar a CVE-2025-54068 em aplicações Laravel que usam Livewire v3.0.0-beta.1 até v3.6.3. Visão Geral Esta ferramenta escaneia uma lista de sites em busca de indicadores da vulnerabilidade crítica de...

POC-CVE-2026-65971

CVE-2026-65971 — Iniezione SQL in Livewire PowerGrid tramite sortDirection Prova di concetto e descrizione tecnica completa per CVE-2026-65971 / GHSA-7fgc-3h6c-698r , un'iniezione SQL in power-components/livewire-powergrid raggiungibile tramite la proprietà pubblica di Livewire sortDirection...

CVE-2026-47743

Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, three related defects on admin Livewire components allowed data tampering, sensitive data disclosure, and stored XSS. First, several Livewire components in the admin panel exposed Eloquent model identifiers as public properties without...

CVE-2026-47743 Shopper: Multiple data integrity and disclosure issues in admin Livewire components

Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, three related defects on admin Livewire components allowed data tampering, sensitive data disclosure, and stored XSS. First, several Livewire components in the admin panel exposed Eloquent model identifiers as public properties without...

CVE-2026-47743

The CVE-2026-47743 issue affects Shopper’s admin Livewire components prior to v2.8.0. The root causes are: (1) IDOR-like vulnerability where public Eloquent identifiers could be rewritten in the wire payload due to missing #[Locked], enabling targeting of arbitrary records; (2) leakage of plainte...

CVE-2026-47743

Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, three related defects on admin Livewire components allowed data tampering, sensitive data disclosure, and stored XSS. First, several Livewire components in the admin panel exposed Eloquent model identifiers as public properties without...

CVE-2026-47743 Shopper: Multiple data integrity and disclosure issues in admin Livewire components

Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, three related defects on admin Livewire components allowed data tampering, sensitive data disclosure, and stored XSS. First, several Livewire components in the admin panel exposed Eloquent model identifiers as public properties without...

CVE-2026-34037

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.464, the cloneTo Livewire action in ResourceOperations.php authorizes the source resource but resolves destination resources with unscoped Eloquent lookups, allowing an...

CVE-2026-34037

Coolify prior to v4.0.0-beta.464 is affected by a broken object-level authorization in cloneTo() within ResourceOperations.php. The action authenticates the source resource but resolves destination resources with unscoped Eloquent lookups, enabling cross-tenant cloning where an authenticated user...

EUVD-2026-41994

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, the database import Livewire component app/Livewire/Project/Database/Import.php allows client-controlled container and server properties to reach shell commands without...

CVE-2026-34058

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, the Livewire component Server\Resources exposes public methods startUnmanaged, stopUnmanaged, restartUnmanaged that accept a container ID parameter directly from the browse...

EUVD-2026-41983

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, the Livewire component Server\Resources exposes public methods startUnmanaged, stopUnmanaged, restartUnmanaged that accept a container ID parameter directly from the browse...

CVE-2026-34599

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, there is an authenticated command injection vulnerability in the GetLogs Livewire component which allows users with team membership lowest privilege member role to execute...