https://blog.securelayer7.net/exploit-validated-pentesting/ SecureLayer7 en 2026-08-18T19:24:52.000Z Exploit-Validated Pentesting: Stop Paying for CVE Lists Security News https://securelayer7.net/lab/claude-faf-mcp-path-traversal-arbitrary-file-read-write SecureLayer7 en 2026-08-19T20:17:35.837Z claude-faf-mcp Arbitrary File Read/Write via Unconfined Path Argument Security Research https://securelayer7.net/lab/cve-2026-17106-moby-go-archive-symlink-tar-path-traversal SecureLayer7 en 2026-08-18T21:22:07.463Z CVE-2026-17106: moby/go-archive Symlink-Following Path Traversal in Tar Extraction CVE Advisory https://securelayer7.net/lab/cve-2026-53951-copier-trust-prefix-path-traversal-rce SecureLayer7 en 2026-08-19T20:16:21.297Z CVE-2026-53951: copier Trust-Prefix Bypass via Path Traversal Leads to Arbitrary Command Execution CVE Advisory https://securelayer7.net/lab/cve-2026-53957-contentful-mcp-server-ssrf-host-proxy-pat-exfiltration SecureLayer7 en 2026-08-19T20:04:50.783Z CVE-2026-53957: @contentful/mcp-server SSRF via LLM-Controlled host/proxy Parameters CVE Advisory https://securelayer7.net/lab/cve-2026-53964-document-merge-service-xlsx-ssti-rce SecureLayer7 en 2026-08-19T20:11:48.937Z CVE-2026-53964: document-merge-service Remote Code Execution via SSTI in XLSX Templates CVE Advisory https://securelayer7.net/lab/cve-2026-53965-mcp-sdk-httptransport-sse-buffer-memory-exhaustion SecureLayer7 en 2026-08-19T19:30:42.092Z CVE-2026-53965: mcp/sdk HttpTransport Unbounded SSE Buffer Memory Exhaustion CVE Advisory https://securelayer7.net/lab/cve-2026-53966-xwiki-livedata-livetable-missing-authorization-privilege-escalati SecureLayer7 en 2026-08-19T19:37:41.404Z CVE-2026-53966: XWiki Platform Live Data Live Table Connector Missing Authorization Privilege Escalation CVE Advisory https://securelayer7.net/lab/cve-2026-54133-jmespath-php-compiler-runtime-code-injection SecureLayer7 en 2026-08-18T20:36:17.844Z CVE-2026-54133: jmespath.php CompilerRuntime Code Injection via Unescaped Function Names CVE Advisory https://securelayer7.net/lab/cve-2026-54347-froxlor-stored-xss-dns-txt-admin-takeover SecureLayer7 en 2026-08-18T21:30:08.023Z CVE-2026-54347: Froxlor Stored XSS in DNS TXT Record Leads to Admin Account Takeover CVE Advisory https://securelayer7.net/lab/cve-2026-54348-froxlor-second-order-sql-injection-admins-ipaddress SecureLayer7 en 2026-08-18T21:28:49.148Z CVE-2026-54348: Froxlor Second-Order SQL Injection via Admins.add ipaddress Parameter CVE Advisory https://securelayer7.net/lab/cve-2026-55107-kobako-sandbox-escape-public-send-rce SecureLayer7 en 2026-08-18T20:42:46.316Z CVE-2026-55107: kobako Sandbox Escape via Unguarded public_send Dispatcher CVE Advisory https://securelayer7.net/lab/cve-2026-55178-geolens-cross-dataset-authorization-bypass SecureLayer7 en 2026-08-18T18:09:16.825Z CVE-2026-55178: GeoLens Cross-Dataset Authorization Bypass CVE Advisory https://securelayer7.net/lab/cve-2026-55211-surfio-irap-out-of-bounds-read SecureLayer7 en 2026-08-18T20:37:43.246Z CVE-2026-55211: surfio Out-of-Bounds Read in IRAP Binary Parser CVE Advisory https://securelayer7.net/lab/cve-2026-55224-mineadmin-plugin-path-traversal SecureLayer7 en 2026-08-18T20:48:48.168Z CVE-2026-55224: MineAdmin Path Traversal in Plugin Install/Uninstall CVE Advisory https://securelayer7.net/lab/cve-2026-55839-kestra-stored-xss-markdown-link-attribute-injection SecureLayer7 en 2026-08-18T16:56:32.599Z CVE-2026-55839: Kestra Stored XSS via Custom Markdown [[link]] Attribute Injection CVE Advisory https://securelayer7.net/lab/cve-2026-62673-grav-htaccess-case-sensitivity-bypass SecureLayer7 en 2026-08-19T19:42:07.303Z CVE-2026-62673: Grav .htaccess File Extension Filter Case-Sensitivity Bypass CVE Advisory https://securelayer7.net/lab/cve-2026-62988-froxlor-api-credential-2fa-disclosure SecureLayer7 en 2026-08-18T21:24:36.348Z CVE-2026-62988: Froxlor API Credential and 2FA Secret Disclosure CVE Advisory https://securelayer7.net/lab/cve-2026-63188-logto-tunnel-path-traversal-static-file SecureLayer7 en 2026-08-19T20:28:46.777Z CVE-2026-63188: @logto/tunnel Path Traversal via Unsanitized request.url CVE Advisory https://securelayer7.net/lab/cve-2026-63337-rabbitmq-amqp-client-unsafe-reflection-jsonrpc SecureLayer7 en 2026-08-18T16:49:07.442Z CVE-2026-63337: RabbitMQ amqp-client Unsafe Reflection via JSON-RPC javaReturnType CVE Advisory https://securelayer7.net/lab/cve-2026-69219-rabbitmq-java-client-longstring-oom-dos SecureLayer7 en 2026-08-18T16:50:29.820Z CVE-2026-69219: RabbitMQ Java Client Unchecked LongString Allocation DoS CVE Advisory https://securelayer7.net/lab/cve-2026-69220-rabbitmq-java-client-valuereader-uncontrolled-recursion-dos SecureLayer7 en 2026-08-18T16:55:23.024Z CVE-2026-69220: RabbitMQ Java Client Uncontrolled Recursion DoS via Nested AMQP Tables CVE Advisory https://securelayer7.net/lab/cve-2026-70666-lemur-acme-ssrf-server-controlled-urls SecureLayer7 en 2026-08-18T21:16:21.692Z CVE-2026-70666: Lemur ACME Client Server-Side Request Forgery via Server-Controlled URLs CVE Advisory https://securelayer7.net/lab/cve-2026-71303-lemur-acme-authority-update-ssrf SecureLayer7 en 2026-08-18T21:14:51.232Z CVE-2026-71303: Lemur ACME Authority Update SSRF (Incomplete Fix) CVE Advisory https://securelayer7.net/lab/cve-2026-71307-lemur-destination-credentials-missing-authorization SecureLayer7 en 2026-08-18T21:11:40.379Z CVE-2026-71307: Lemur Authenticated Plaintext Destination Credential Exposure CVE Advisory https://securelayer7.net/lab/cve-2026-71308-lemur-replaces-authorization-bypass-certificate-hijack SecureLayer7 en 2026-08-18T21:10:22.677Z CVE-2026-71308: Lemur Unauthorized Certificate Hijack via Unchecked replaces Field CVE Advisory https://securelayer7.net/lab/cve-2026-71417-lemur-authorization-bypass-arbitrary-certificate-revocation SecureLayer7 en 2026-08-18T21:08:53.742Z CVE-2026-71417: Lemur Authorization Bypass via Duplicate Certificate Upload Enables Arbitrary CA Revocation CVE Advisory https://securelayer7.net/lab/faf-mcp-path-traversal-arbitrary-file-read-write SecureLayer7 en 2026-08-19T20:23:29.592Z faf-mcp Arbitrary File Read/Write via Unconfined Path Argument Security Research https://securelayer7.net/lab/geolens-authorization-bypass-private-dataset-disclosure SecureLayer7 en 2026-08-19T20:10:28.571Z GeoLens Authorization and Cache-Scope Flaws Disclose Private Dataset Data Security Research https://securelayer7.net/lab/grok-faf-mcp-arbitrary-file-read-unconfined-path SecureLayer7 en 2026-08-19T20:24:52.568Z grok-faf-mcp: Arbitrary File Read via Unconfined Path in FAF Tools Security Research https://securelayer7.net/lab/librenms-oxidized-ssrf-stored-xss-showconfig SecureLayer7 en 2026-08-18T21:23:21.211Z LibreNMS SSRF-Driven Stored XSS via Oxidized API Response Fields Security Research https://securelayer7.net/lab/meshcentral-stored-xss-agent-osdesc-injection SecureLayer7 en 2026-08-18T20:43:58.849Z MeshCentral Stored XSS via Unsanitized Agent Fields Security Research https://securelayer7.net/lab/monai-algo-from-pickle-pickle-deserialization-rce-incomplete-fix SecureLayer7 en 2026-08-18T20:31:08.298Z MONAI algo_from_pickle() Unsafe Pickle Deserialization RCE (Incomplete Fix) Security Research https://securelayer7.net/lab/monai-nnunetv2runner-os-command-injection-dataset-name SecureLayer7 en 2026-08-18T20:34:51.710Z MONAI nnUNetV2Runner OS Command Injection via dataset_name_or_id Security Research https://securelayer7.net/lab/monai-numpyreader-unsafe-deserialization-allow-pickle-rce SecureLayer7 en 2026-08-18T20:28:55.373Z MONAI NumpyReader Unsafe Deserialization via allow_pickle=True Security Research