SmarterMail: Email Server Software with Critical RCE Vulnerability (CVE-2025-52691)
SmarterMail is an email server product affected by CVE-2025-52691, a remote code execution vulnerability exploited by MuddyWater.
Tag: remote code execution
Laravel Livewire: Full-Stack Framework with RCE Vulnerability (CVE-2025-54068)
Laravel Livewire is a full-stack framework for Laravel affected by CVE-2025-54068, a remote code execution vulnerability exploited by MuddyWater.
CVE-2025-52691: SmarterMail Remote Code Execution Vulnerability
CVE-2025-52691 is a critical remote code execution vulnerability in SmarterMail exploited by MuddyWater in reconnaissance campaigns.
CVE-2025-54068: Laravel Livewire Remote Code Execution Vulnerability
CVE-2025-54068 is a critical remote code execution vulnerability in Laravel Livewire exploited by MuddyWater.
CVE-2025-9491: Windows Shortcut Vulnerability Exploited by Armored Likho
CVE-2025-9491 is a now-patched Windows shortcut vulnerability (ZDI-CAN-25373) that allows remote code execution. Addressed by Microsoft in November 2025 Patch Tuesday, it…
AI Agent JADEPUFFER Exploits Langflow RCE to Automate Database Ransomware Attack
Security firm Sysdig has identified what it believes is the first ransomware attack fully orchestrated by an AI agent, dubbed JADEPUFFER. The…
SharePoint RCE CVE-2026-45659 Added to CISA KEV After Active Exploitation
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity remote code execution vulnerability, CVE-2026-45659 (CVSS 8.8), affecting Microsoft SharePoint…
Progress Kemp LoadMaster CVE-2026-8037 Under Active Exploitation
A critical pre-authentication remote code execution vulnerability in Progress Kemp LoadMaster, tracked as CVE-2026-8037 (CVSS 9.6), is now facing active exploitation attempts.…
Langflow RCE Exploited to Deploy Monero Miner on Exposed AI App Endpoints
Threat actors are actively exploiting CVE-2026-33017, a critical unauthenticated remote code execution vulnerability in Langflow (CVSS 9.3), to deploy a Monero cryptocurrency…
CVE-2024-1212: Progress Kemp LoadMaster Critical RCE
A critical OS command injection vulnerability in Progress Kemp LoadMaster, with a CVSS score of 10.0, allows unauthenticated attackers to execute arbitrary…