https://blog.securelayer7.net/cve-2026-16723-fastjson-1x-rce-analysis/ SecureLayer7 en 2026-08-04T14:18:11.000Z CVE-2026-16723: The Class-Loader-as-Primitive Bug Pattern Returns — Fastison 1.x Pre-Auth RCE via @JSONType + jar:http CVE Advisory https://blog.securelayer7.net/owasp-web-security-testing-guide-wstg/ SecureLayer7 en 2026-08-04T10:08:23.000Z OWASP Web Security Testing Guide (WSTG) Explained Security News https://blog.securelayer7.net/server-side-template-injection/ SecureLayer7 en 2026-08-04T06:41:25.000Z Server-Side Template Injection: Attacks & Prevention Security News https://blog.securelayer7.net/life-at-securelayer7-rohit-hatagale/ SecureLayer7 en 2026-08-03T14:19:58.000Z Life at SecureLayer7: An Honest Review From the AI Team Security News https://blog.securelayer7.net/remote-file-inclusion/ SecureLayer7 en 2026-08-03T11:11:55.000Z Remote File Inclusion Explained: Attacks and Prevention Security News https://securelayer7.net/lab/cve-2026-18446-fast-uri-backslash-authority-host-confusion SecureLayer7 en 2026-08-03T19:29:41.455Z CVE-2026-18446: fast-uri Host Confusion via Backslash Authority Introducer CVE Advisory https://securelayer7.net/lab/cve-2026-67354-guzzle-uri-fragment-referer-disclosure SecureLayer7 en 2026-08-04T13:10:09.235Z CVE-2026-67354: guzzlehttp/guzzle URI Fragment Disclosure via Referer Header Security Research https://securelayer7.net/lab/cve-2026-67355-guzzle-host-only-cookie-scope-bypass SecureLayer7 en 2026-08-04T13:08:56.649Z CVE-2026-67355: guzzlehttp/guzzle Host-Only Cookie Scope Bypass Security Research https://securelayer7.net/lab/cve-2026-68945-angular-httptransfercache-cache-key-ambiguity-state-poisoning SecureLayer7 en 2026-08-03T16:08:51.025Z CVE-2026-68945: @angular/common HttpTransferCache Cache-Key Ambiguity Leads to State Poisoning CVE Advisory https://securelayer7.net/lab/cve-2026-69149-angular-platform-server-ssr-fallback-rawcontent-xss SecureLayer7 en 2026-08-03T16:30:07.397Z CVE-2026-69149: @angular/platform-server SSR Fallback Raw-Content XSS CVE Advisory https://securelayer7.net/lab/cve-2026-69151-angular-compiler-i18n-event-handler-xss SecureLayer7 en 2026-08-03T16:28:52.266Z CVE-2026-69151: @angular/compiler i18n Event-Handler Attribute XSS CVE Advisory https://securelayer7.net/lab/cve-2026-69152-brace-expansion-dos-intermediate-arrays SecureLayer7 en 2026-08-03T16:48:48.747Z CVE-2026-69152: brace-expansion DoS via unbounded intermediate arrays CVE Advisory https://securelayer7.net/lab/cve-2026-69192-ip-address-address4-leading-zero-octal-ssrf SecureLayer7 en 2026-08-03T20:08:58.234Z CVE-2026-69192: ip-address Address4 Leading-Zero Octet SSRF Bypass CVE Advisory https://securelayer7.net/lab/cve-2026-69240-sequelize-oracle-sql-injection-to-date-bypass SecureLayer7 en 2026-08-03T20:48:40.393Z CVE-2026-69240: Sequelize SQL Injection via Oracle TO_DATE/TO_TIMESTAMP Bypass CVE Advisory https://securelayer7.net/lab/cve-2026-69244-aiohttp-oob-heap-read-c-response-parser SecureLayer7 en 2026-08-03T21:08:53.543Z CVE-2026-69244: aiohttp Out-of-Bounds Heap Read in C HTTP Response Parser CVE Advisory https://securelayer7.net/lab/cve-2026-69246-guzzle-noncanonical-host-ssrf-bypass SecureLayer7 en 2026-08-03T21:31:36.499Z CVE-2026-69246: Guzzle Noncanonical Host SSRF Bypass CVE Advisory https://securelayer7.net/lab/cve-2026-69247-cryptography-pkcs7-envelopeddata-bleichenbacher-oracle SecureLayer7 en 2026-08-03T21:30:19.205Z CVE-2026-69247: cryptography PKCS#7 EnvelopedData Bleichenbacher Oracle CVE Advisory https://securelayer7.net/lab/cve-2026-69249-cryptography-exponential-chain-dos SecureLayer7 en 2026-08-03T21:28:56.965Z CVE-2026-69249: cryptography Exponential Certificate Chain DoS CVE Advisory https://securelayer7.net/lab/cve-2026-69250-flowise-oauth2-refresh-ssrf-secret-exfiltration SecureLayer7 en 2026-08-04T14:28:58.827Z CVE-2026-69250: Flowise Unauthenticated OAuth2 Refresh SSRF and Secret Exfiltration CVE Advisory https://securelayer7.net/lab/cve-2026-69252-flowise-missing-authorization-files-api-workspace-isolation SecureLayer7 en 2026-08-04T15:08:45.051Z CVE-2026-69252: Flowise Missing Authorization on File Management API CVE Advisory https://securelayer7.net/lab/cve-2026-69253-flowise-vm2-sandbox-escape-rce-moment-locale SecureLayer7 en 2026-08-04T15:29:06.962Z CVE-2026-69253: Flowise vm2 Sandbox Escape to RCE via moment locale Injection CVE Advisory https://securelayer7.net/lab/cve-2026-69254-flowise-nodevm-sandbox-escape-rce SecureLayer7 en 2026-08-04T15:50:45.696Z CVE-2026-69254: Flowise RCE via NodeVM Sandbox Escape in executeJavaScriptCode() CVE Advisory https://securelayer7.net/lab/cve-2026-69256-flowise-csvagent-pickle-deserialization-rce SecureLayer7 en 2026-08-04T15:48:52.160Z CVE-2026-69256: flowise-components CSVAgent Pickle Deserialization Remote Code Execution CVE Advisory https://securelayer7.net/lab/cve-2026-69257-flowise-ssrf-ipv4-mapped-ipv6-bypass SecureLayer7 en 2026-08-04T16:11:21.950Z CVE-2026-69257: Flowise SSRF Protection Bypass via IPv4-Mapped IPv6 Addresses CVE Advisory https://securelayer7.net/lab/cve-2026-69258-flowise-overrideconfig-property-injection-prediction-api SecureLayer7 en 2026-08-04T16:10:00.766Z CVE-2026-69258: Flowise Unauthenticated Property Injection via Ungated overrideConfig Spread CVE Advisory https://securelayer7.net/lab/cve-2026-69259-flowise-sqlite-record-manager-rce-arbitrary-file-write SecureLayer7 en 2026-08-04T16:08:50.356Z CVE-2026-69259: Flowise SQLite Record Manager Authenticated RCE via Arbitrary File Write CVE Advisory