https://blog.securelayer7.net/black-hat-usa-2026-parties-events-guide/ SecureLayer7 en 2026-07-20T18:33:09.000Z Black Hat USA 2026 Parties & Events: The Complete Guide (with DEF CON 34) Security News https://securelayer7.net/lab/cve-2025-67725-tornado-httpheaders-quadratic-dos-repeated-headers SecureLayer7 en 2026-07-20T19:08:39.101Z CVE-2025-67725: Tornado HTTPHeaders Quadratic DoS via Repeated Header Coalescing CVE Advisory https://securelayer7.net/lab/cve-2025-67726-tornado-multipart-parseparam-quadratic-dos SecureLayer7 en 2026-07-20T19:08:00.383Z CVE-2025-67726: Tornado Quadratic DoS via Crafted Multipart Parameters CVE Advisory https://securelayer7.net/lab/cve-2026-53515-better-auth-sso-bola-register-provider SecureLayer7 en 2026-07-20T21:08:02.302Z CVE-2026-53515: @better-auth/sso Broken Object-Level Authorization on SSO Provider Registration CVE Advisory https://securelayer7.net/lab/cve-2026-54560-cloudreve-oauth-scope-bypass SecureLayer7 en 2026-07-20T21:29:48.976Z CVE-2026-54560: Cloudreve OAuth Access Token Scope Bypass CVE Advisory https://securelayer7.net/lab/cve-2026-55380-pillow-gdimagefile-decompression-bomb-dos SecureLayer7 en 2026-07-20T21:51:06.544Z CVE-2026-55380: Pillow GdImageFile Decompression Bomb (DoS) CVE Advisory https://securelayer7.net/lab/cve-2026-55514-vllm-mrope-prompt-embeds-dos SecureLayer7 en 2026-07-20T19:28:51.145Z CVE-2026-55514: vLLM Denial of Service via Prompt Embeds on M-RoPE Models CVE Advisory https://securelayer7.net/lab/cve-2026-55667-filebrowser-scopedfs-removeall-symlink-deletion SecureLayer7 en 2026-07-20T21:29:15.182Z CVE-2026-55667: File Browser Out-of-Scope File Deletion via Symlink-Following RemoveAll CVE Advisory https://securelayer7.net/lab/cve-2026-59731-astro-middleware-authorization-bypass-decode-iteration SecureLayer7 en 2026-07-20T22:08:00.647Z CVE-2026-59731: Astro Middleware Authorization Bypass via URL Decode Iteration Limit CVE Advisory https://securelayer7.net/lab/cve-2026-59869-js-yaml-merge-key-quadratic-dos SecureLayer7 en 2026-07-20T21:28:34.464Z CVE-2026-59869: js-yaml Merge-Key Chain Quadratic CPU DoS CVE Advisory https://securelayer7.net/lab/cve-2026-59922-mistune-quadratic-dos-formatting-plugins SecureLayer7 en 2026-07-20T21:49:33.963Z CVE-2026-59922: mistune Quadratic Parsing DoS in Formatting Plugins CVE Advisory https://securelayer7.net/lab/cve-2026-59928-mistune-quadratic-reflink-dos SecureLayer7 en 2026-07-20T21:28:01.632Z CVE-2026-59928: mistune Quadratic-Time ReDoS via Reference-Link Definitions CVE Advisory https://securelayer7.net/lab/cve-2026-61736-lightrag-cors-wildcard-credentials SecureLayer7 en 2026-07-20T21:48:51.361Z CVE-2026-61736: lightrag-hku CORS Wildcard + Credentials Any-Origin Takeover CVE Advisory https://securelayer7.net/lab/cve-2026-61740-lightrag-hardcoded-jwt-secret-auth-bypass SecureLayer7 en 2026-07-20T21:48:13.747Z CVE-2026-61740: LightRAG Authentication Bypass via Hardcoded JWT Secret and Guest Token Short-Circuit CVE Advisory