https://blog.securelayer7.net/januscape-linux-kvm-vulnerability/ SecureLayer7 en 2026-07-24T07:42:24.000Z Januscape: A 16-Year-Old Field-Comparison Bug in the Linux KVM Shadow MMU CVE Advisory https://securelayer7.net/lab/authjs-email-homoglyph-unicode-at-bypass-account-takeover SecureLayer7 en 2026-07-23T14:48:57.279Z Auth.js (@auth/core): Email Magic-Link Homoglyph Bypass Leading to Account Takeover Security Research https://securelayer7.net/lab/cve-2024-7708-eclipse-jetty-100-continue-buffer-leak-dos SecureLayer7 en 2026-07-22T23:10:34.755Z CVE-2024-7708: Eclipse Jetty jetty-server Buffer Leak DoS via 100-Continue Requests CVE Advisory https://securelayer7.net/lab/cve-2025-65964-n8n-git-node-hooks-rce SecureLayer7 en 2026-07-22T22:24:08.424Z CVE-2025-65964: n8n Git Node Remote Code Execution via core.hooksPath Security Research https://securelayer7.net/lab/cve-2026-10050-jetty-digest-auth-iso8859-bypass SecureLayer7 en 2026-07-22T23:11:20.401Z CVE-2026-10050: Eclipse Jetty Digest Authentication Bypass via ISO-8859-1 Encoding Collision CVE Advisory https://securelayer7.net/lab/cve-2026-25800-quinn-proto-assembler-memory-exhaustion SecureLayer7 en 2026-07-24T14:15:06.684Z CVE-2026-25800: quinn-proto Unbounded Stream Reassembly Memory Exhaustion Security Research https://securelayer7.net/lab/cve-2026-45623-postcss-sourcemappingurl-arbitrary-file-read SecureLayer7 en 2026-07-23T15:08:12.038Z CVE-2026-45623: PostCSS Arbitrary File Read via sourceMappingURL Path Traversal CVE Advisory https://securelayer7.net/lab/cve-2026-47219-find-my-way-http2-prototype-dos SecureLayer7 en 2026-07-23T19:48:58.909Z CVE-2026-47219: find-my-way Prototype Property Lookup DoS via HTTP/2 Method CVE Advisory https://securelayer7.net/lab/cve-2026-54673-builder-util-runtime-redirect-credential-leak SecureLayer7 en 2026-07-24T14:11:32.726Z CVE-2026-54673: builder-util-runtime Cross-Origin Redirect Credential Leak CVE Advisory https://securelayer7.net/lab/cve-2026-55575-liquidjs-pop-filter-memorylimit-bypass SecureLayer7 en 2026-07-24T14:10:07.235Z CVE-2026-55575: LiquidJS pop Filter memoryLimit Accounting Bypass CVE Advisory https://securelayer7.net/lab/cve-2026-55685-react-router-manifest-dos-route-matching SecureLayer7 en 2026-07-24T14:09:01.865Z CVE-2026-55685: react-router Unauthenticated DoS via Inefficient Route Matching on Manifest Endpoint CVE Advisory https://securelayer7.net/lab/cve-2026-55831-netty-spdy-settings-unbounded-map-dos SecureLayer7 en 2026-07-22T21:29:57.115Z CVE-2026-55831: netty-codec-http SPDY SETTINGS Frame Unbounded Entry Count DoS CVE Advisory https://securelayer7.net/lab/cve-2026-55833-netty-spdy-zlib-decompression-bomb-dos SecureLayer7 en 2026-07-22T21:29:10.937Z CVE-2026-55833: netty-codec-http SPDY zlib Decompression Bomb (DoS) CVE Advisory https://securelayer7.net/lab/cve-2026-56745-netty-spdy-bytebuf-reference-leak-memory-exhaustion SecureLayer7 en 2026-07-22T22:50:18.138Z CVE-2026-56745: netty-codec-http SpdyHttpDecoder ByteBuf Reference Leak CVE Advisory https://securelayer7.net/lab/cve-2026-56816-netty-codec-http3-reserved-frame-memory-exhaustion SecureLayer7 en 2026-07-22T21:49:54.870Z CVE-2026-56816: netty-codec-http3 Memory Exhaustion via Reserved Frame Types CVE Advisory https://securelayer7.net/lab/cve-2026-56817-netty-codec-xml-xxe-xmldecoder SecureLayer7 en 2026-07-22T21:49:22.841Z CVE-2026-56817: netty-codec-xml XmlDecoder XML External Entity Injection CVE Advisory https://securelayer7.net/lab/cve-2026-56820-netty-ocsp-certid-replay-bypass SecureLayer7 en 2026-07-22T21:48:50.974Z CVE-2026-56820: Netty OcspClient OCSP Response Replay Attack CVE Advisory https://securelayer7.net/lab/cve-2026-56821-netty-ocsp-revocation-bypass-stale-response SecureLayer7 en 2026-07-22T21:48:09.376Z CVE-2026-56821: netty-handler-ssl-ocsp Stale OCSP Response Accepted as Valid CVE Advisory https://securelayer7.net/lab/cve-2026-56822-netty-ocsp-toctou-race-condition SecureLayer7 en 2026-07-22T22:49:29.532Z CVE-2026-56822: netty-handler-ssl-ocsp TOCTOU Race in OcspServerCertificateValidator CVE Advisory https://securelayer7.net/lab/cve-2026-59206-n8n-prototype-pollution-workflow-credentials SecureLayer7 en 2026-07-22T22:30:23.208Z CVE-2026-59206: n8n Prototype Pollution via Workflow Credentials CVE Advisory https://securelayer7.net/lab/cve-2026-59207-n8n-agents-mcp-domain-restriction-bypass SecureLayer7 en 2026-07-22T22:29:40.928Z CVE-2026-59207: n8n AI Agents MCP Connector Allowed HTTP Request Domains Bypass CVE Advisory https://securelayer7.net/lab/cve-2026-59208-n8n-cross-issuer-jwt-account-takeover SecureLayer7 en 2026-07-22T22:29:02.518Z CVE-2026-59208: n8n Cross-Issuer JWT Token Exchange Account Takeover CVE Advisory https://securelayer7.net/lab/cve-2026-59209-n8n-credential-header-leak-pagination-expression SecureLayer7 en 2026-07-22T22:31:04.835Z CVE-2026-59209: n8n Shared Credential Header Leak via HTTP Request Pagination Expression CVE Advisory https://securelayer7.net/lab/cve-2026-59901-netty-bzip2decoder-infinite-loop-dos SecureLayer7 en 2026-07-22T22:48:52.326Z CVE-2026-59901: Netty Bzip2Decoder Infinite Loop DoS CVE Advisory https://securelayer7.net/lab/cve-2026-59931-phpspreadsheet-webservice-ssrf-redirect-bypass SecureLayer7 en 2026-07-23T15:10:14.158Z CVE-2026-59931: PHPSpreadsheet SSRF Whitelist Bypass via HTTP Redirect in WEBSERVICE() CVE Advisory https://securelayer7.net/lab/cve-2026-59932-phpspreadsheet-gnumeric-gzip-bomb-dos SecureLayer7 en 2026-07-23T15:09:39.960Z CVE-2026-59932: PHPSpreadsheet Gnumeric Reader Gzip Bomb (DoS) CVE Advisory https://securelayer7.net/lab/cve-2026-59933-phpspreadsheet-ole-sector-chain-infinite-loop-dos SecureLayer7 en 2026-07-23T15:08:55.657Z CVE-2026-59933: PHPSpreadsheet OLE Sector-Chain Infinite Loop (DoS) CVE Advisory https://securelayer7.net/lab/cve-2026-59935-pypdf-infinite-loop-ascii85-asciihex-inline-image SecureLayer7 en 2026-07-23T16:48:07.924Z CVE-2026-59935: pypdf Infinite Loop via Unterminated ASCII85/ASCIIHex Inline Image CVE Advisory https://securelayer7.net/lab/cve-2026-59936-pypdf-infinite-loop-inline-image SecureLayer7 en 2026-07-23T16:48:46.288Z CVE-2026-59936: pypdf Infinite Loop via Unterminated Inline Image CVE Advisory https://securelayer7.net/lab/cve-2026-64642-nextjs-turbopack-i18n-middleware-bypass SecureLayer7 en 2026-07-22T23:14:59.347Z CVE-2026-64642: Next.js Middleware Bypass via Turbopack Single-Locale i18n CVE Advisory https://securelayer7.net/lab/cve-2026-64645-nextjs-ssrf-rewrite-destination-hostname SecureLayer7 en 2026-07-22T23:08:15.228Z CVE-2026-64645: Next.js Server-Side Request Forgery via Rewrite Destination Hostname CVE Advisory https://securelayer7.net/lab/cve-2026-65015-n8n-ai-agent-project-viewer-privilege-escalation-run-node-tool SecureLayer7 en 2026-07-22T18:10:09.705Z CVE-2026-65015: n8n AI Agent Project Viewer Privilege Escalation via run_node_tool CVE Advisory https://securelayer7.net/lab/cve-2026-65015-n8n-ai-agent-viewer-privilege-escalation-run-node-tool SecureLayer7 en 2026-07-22T18:30:14.719Z CVE-2026-65015: n8n AI Agent Project Viewer Privilege Escalation via run_node_tool Security Research https://securelayer7.net/lab/cve-2026-65016-n8n-sso-instance-role-privilege-escalation SecureLayer7 en 2026-07-22T22:25:28.552Z CVE-2026-65016: n8n SSO Instance-Role Provisioning Privilege Escalation to Owner CVE Advisory https://securelayer7.net/lab/cve-2026-65016-n8n-sso-instance-role-privilege-escalation-1 SecureLayer7 en 2026-07-22T22:50:53.489Z CVE-2026-65016: n8n SSO Instance-Role Provisioning Privilege Escalation to Instance Owner Security Research https://securelayer7.net/lab/cve-2026-65592-n8n-stored-dom-xss-cachedresulturl SecureLayer7 en 2026-07-22T18:08:02.792Z CVE-2026-65592: n8n Stored DOM XSS via Resource Locator cachedResultUrl CVE Advisory https://securelayer7.net/lab/cve-2026-65595-n8n-token-exchange-privilege-escalation SecureLayer7 en 2026-07-22T22:11:50.816Z CVE-2026-65595: n8n Token Exchange Privilege Escalation via Full API Scope Assignment CVE Advisory https://securelayer7.net/lab/cve-2026-65597-n8n-dom-xss-iframe-srcdoc-html-preview SecureLayer7 en 2026-07-22T18:08:40.606Z CVE-2026-65597: n8n DOM-Based XSS via Unsandboxed iframe srcdoc in HTML Preview CVE Advisory https://securelayer7.net/lab/cve-2026-65597-n8n-dom-xss-iframe-srcdoc-html-preview-1 SecureLayer7 en 2026-07-22T18:28:50.866Z CVE-2026-65597: n8n DOM-Based XSS via Unsandboxed iframe srcdoc in HTML Preview Security Research https://securelayer7.net/lab/cve-2026-65598-n8n-git-clone-toctou-race-condition-rce SecureLayer7 en 2026-07-22T18:09:33.937Z CVE-2026-65598: n8n Git Clone Node TOCTOU Race Condition RCE CVE Advisory https://securelayer7.net/lab/cve-2026-65598-n8n-git-clone-toctou-race-condition-rce-1 SecureLayer7 en 2026-07-22T18:28:16.742Z CVE-2026-65598: n8n Git Clone Node TOCTOU Race Condition RCE Security Research https://securelayer7.net/lab/jupyterlab-image-viewer-svg-xss-new-tab SecureLayer7 en 2026-07-22T23:28:52.421Z JupyterLab Image Viewer Stored XSS via Malicious SVG File Security Research https://securelayer7.net/lab/n8n-allowed-http-domains-bypass-ai-llm-nodes SecureLayer7 en 2026-07-22T22:08:58.088Z n8n: Bypass Allowed HTTP Request Domains in AI and LLM Nodes Security Research https://securelayer7.net/lab/n8n-edit-fields-set-node-prototype-pollution-dos SecureLayer7 en 2026-07-22T22:14:16.840Z n8n Edit Fields (Set) Node Prototype Pollution Denial of Service Security Research https://securelayer7.net/lab/n8n-edit-image-format-injection-arbitrary-file-write SecureLayer7 en 2026-07-22T22:14:53.181Z n8n Edit Image Node Format Injection Allows Arbitrary File Write Security Research https://securelayer7.net/lab/n8n-embed-login-unverified-email-claim-account-takeover SecureLayer7 en 2026-07-22T22:09:41.701Z n8n: Account Takeover via Unverified Email Claim in Embed Login Token Exchange Security Research https://securelayer7.net/lab/n8n-git-node-fetch-pull-pushtags-path-traversal-sandbox-bypass SecureLayer7 en 2026-07-22T22:24:51.510Z n8n Git Node fetch/pull/pushTags Operations Bypass Sandbox Path Restriction Security Research https://securelayer7.net/lab/n8n-shared-workflow-inline-subworkflow-credential-bypass SecureLayer7 en 2026-07-22T22:21:27.876Z n8n: Shared-Workflow Editor Credential Bypass via Inline Sub-Workflow JSON Security Research