Critical Alert

CVE-2026-50751 - Critical Check Point VPN Exploit Discovered Active in the Wild. View Threat Details →

Powered by CVE WATCHTOWER

×

Synacktiv

Critical Flaw in Livewire Exposes Laravel Apps to Stealthy RCE, PoC Releases CVE-2025-54068, Livewire RCE

CVE-2025-54068, Livewire RCE

Critical Flaw in Livewire Exposes Laravel Apps to Stealthy RCE, PoC Releases

Do Son December 26, 2025

Developers relying on Livewire, a cornerstone framework for building dynamic interfaces in Laravel, are facing a severe...

Snipe-IT Flaw Chained: XSS (CVE-2025-59712) to RCE (CVE-2025-59713) Achieves Full Server Compromise, PoC Released Snipe-IT RCE Chain, Deserialization

Snipe-IT RCE Chain, Deserialization

Snipe-IT Flaw Chained: XSS (CVE-2025-59712) to RCE (CVE-2025-59713) Achieves Full Server Compromise, PoC Released

Do Son October 7, 2025

Cybersecurity researchers at Synacktiv have uncovered two critical vulnerabilities in Snipe-IT, an open-source IT asset management system,...

Laravel Flaw: Leaked APP_KEY Turns Into Remote Code Execution Laravel APP_KEY, Deserialization Attack

Laravel APP_KEY, Deserialization Attack

Laravel Flaw: Leaked APP_KEY Turns Into Remote Code Execution

Do Son July 11, 2025

A recent technical deep-dive by Synacktiv has exposed a serious yet often overlooked risk in Laravel—the popular...

ScriptCase Flaws (CVE-2025-47227/47228): Pre-Auth RCE & Admin Takeover Risk for Web Servers, PoC Published ScriptCase RCE, Pre-Auth Vulnerability

ScriptCase RCE, Pre-Auth Vulnerability

ScriptCase Flaws (CVE-2025-47227/47228): Pre-Auth RCE & Admin Takeover Risk for Web Servers, PoC Published

Do Son July 7, 2025

In a recent security advisory, researchers from Synacktiv revealed two chained vulnerabilities in ScriptCase’s Production Environment module—known...

CVE-2025-23016: Critical FastCGI Heap Overflow Threatens Embedded Devices, PoC Releases FastCGI vulnerability, CVE-2025-23016

FastCGI vulnerability, CVE-2025-23016

CVE-2025-23016: Critical FastCGI Heap Overflow Threatens Embedded Devices, PoC Releases

Do Son April 28, 2025

Security researcher Baptiste Mayaud from Synacktiv has detailed a critical vulnerability in the FastCGI library, tracked as...