https://securelayer7.net/lab/cve-2026-52887-nocobase-in-app-message-sqli-rce SecureLayer7 en 2026-07-31T19:48:55.944Z CVE-2026-52887: NocoBase plugin-notification-in-app-message SQL Injection to RCE CVE Advisory https://securelayer7.net/lab/cve-2026-53501-thumbor-hmac-signature-bypass-replace SecureLayer7 en 2026-07-31T19:30:06.179Z CVE-2026-53501: thumbor HMAC Signature Validation Bypass via Repeated URL Segments CVE Advisory https://securelayer7.net/lab/cve-2026-53502-thumbor-file-loader-path-traversal-unquote-bypass SecureLayer7 en 2026-07-31T19:08:37.984Z CVE-2026-53502: thumbor Path Traversal via Post-Validation URL Decode in file_loader CVE Advisory https://securelayer7.net/lab/cve-2026-53503-thumbor-convolution-divide-by-zero-dos SecureLayer7 en 2026-07-31T19:12:10.260Z CVE-2026-53503: thumbor convolution filter remote divide-by-zero DoS CVE Advisory https://securelayer7.net/lab/cve-2026-53504-thumbor-redos-convolution-filter SecureLayer7 en 2026-07-31T19:11:02.892Z CVE-2026-53504: thumbor ReDoS in convolution Filter CVE Advisory https://securelayer7.net/lab/cve-2026-53505-thumbor-proportion-filter-dos SecureLayer7 en 2026-07-31T19:09:48.256Z CVE-2026-53505: thumbor proportion filter Remote Denial of Service CVE Advisory https://securelayer7.net/lab/cve-2026-53599-redaxo-mediapool-double-extension-bypass-rce SecureLayer7 en 2026-07-31T19:50:17.949Z CVE-2026-53599: REDAXO Mediapool Multi-Segment Filename Extension Bypass RCE CVE Advisory https://securelayer7.net/lab/cve-2026-53608-apostrophecms-seo-stored-xss-google-analytics-id SecureLayer7 en 2026-07-31T22:08:50.307Z CVE-2026-53608: @apostrophecms/seo Stored XSS via Unsanitized Google Analytics ID CVE Advisory https://securelayer7.net/lab/cve-2026-53609-apostrophecms-prototype-pollution-auth-bypass SecureLayer7 en 2026-07-31T22:09:57.142Z CVE-2026-53609: ApostropheCMS Server-Side Prototype Pollution via $pullAll Leading to Authorization Bypass CVE Advisory https://securelayer7.net/lab/cve-2026-54910-filebrowser-quantum-subtitle-path-traversal SecureLayer7 en 2026-07-31T22:48:47.661Z CVE-2026-54910: FileBrowser Quantum Path Traversal in Subtitle Handler CVE Advisory https://securelayer7.net/lab/cve-2026-58263-jodit-mathml-mutation-xss-clean-html-bypass SecureLayer7 en 2026-07-31T19:28:59.566Z CVE-2026-58263: Jodit Editor Mutation XSS via MathML/style Rawtext Carrier CVE Advisory