https://securelayer7.net/lab/clauster-missing-auth-dashboard-bypass SecureLayer7 en 2026-07-10T20:47:58.064Z Clauster: Missing Authentication Bypass on Non-Loopback Dashboard Security Research https://securelayer7.net/lab/cve-2026-48594-tesla-decompression-bomb-dos SecureLayer7 en 2026-07-10T00:09:21.479Z CVE-2026-48594: Tesla Middleware Decompression Bomb (DoS) CVE Advisory https://securelayer7.net/lab/cve-2026-48597-tesla-mint-adapter-atom-exhaustion-url-scheme SecureLayer7 en 2026-07-10T00:08:08.052Z CVE-2026-48597: Tesla Mint Adapter BEAM Atom Table Exhaustion via Untrusted URL Scheme CVE Advisory https://securelayer7.net/lab/cve-2026-48862-mint-http2-push-promise-memory-exhaustion SecureLayer7 en 2026-07-09T23:28:19.577Z CVE-2026-48862: Mint HTTP/2 Client Memory Exhaustion via PUSH_PROMISE Flood CVE Advisory https://securelayer7.net/lab/cve-2026-49476-soupsieve-memory-exhaustion-selector-list SecureLayer7 en 2026-07-09T14:08:28.197Z CVE-2026-49476: soupsieve Memory Exhaustion via Unbounded Selector List CVE Advisory https://securelayer7.net/lab/cve-2026-49477-soupsieve-redos-selector-parser SecureLayer7 en 2026-07-09T14:07:58.260Z CVE-2026-49477: soupsieve Regular Expression Denial of Service (ReDoS) CVE Advisory https://securelayer7.net/lab/cve-2026-49485-hl7-fhir-dstu2-redos-fhirpath-matches SecureLayer7 en 2026-07-09T13:49:29.535Z CVE-2026-49485: org.hl7.fhir.dstu2 FHIRPathEngine ReDoS via Unprotected matches() CVE Advisory https://securelayer7.net/lab/cve-2026-49754-mint-http2-continuation-flood-memory-exhaustion SecureLayer7 en 2026-07-09T23:28:55.842Z CVE-2026-49754: Mint HTTP/2 CONTINUATION Flood Memory Exhaustion CVE Advisory https://securelayer7.net/lab/cve-2026-49851-mistune-quadratic-dos-parse-link-text SecureLayer7 en 2026-07-10T00:09:50.192Z CVE-2026-49851: mistune Quadratic-Time DoS in parse_link_text CVE Advisory https://securelayer7.net/lab/cve-2026-49866-libp2p-gossipsub-ihave-iwant-cpu-dos SecureLayer7 en 2026-07-10T16:08:12.122Z CVE-2026-49866: @libp2p/gossipsub CPU DoS via Oversized IHAVE and IWANT Control Messages CVE Advisory https://securelayer7.net/lab/cve-2026-50551-siyuan-stored-xss-rce-attribute-view-asset-cell SecureLayer7 en 2026-07-10T20:48:34.331Z CVE-2026-50551: SiYuan Stored XSS to RCE via Attribute View Asset Cell CVE Advisory https://securelayer7.net/lab/cve-2026-50553-note-mark-path-traversal-slug-migrate-export SecureLayer7 en 2026-07-09T13:50:17.845Z CVE-2026-50553: Note Mark Path Traversal via Unsanitized Book/Note Slug in Migrate Export CVE Advisory https://securelayer7.net/lab/cve-2026-52766-yeswiki-unauthenticated-arbitrary-page-deletion SecureLayer7 en 2026-07-09T21:28:45.419Z CVE-2026-52766: YesWiki Unauthenticated Arbitrary Page Deletion CVE Advisory https://securelayer7.net/lab/cve-2026-52767-yeswiki-activitypub-signature-bypass SecureLayer7 en 2026-07-09T21:28:12.151Z CVE-2026-52767: YesWiki ActivityPub Signature-Verification Bypass CVE Advisory https://securelayer7.net/lab/cve-2026-52769-yeswiki-activitypub-ssrf-keyid SecureLayer7 en 2026-07-09T21:11:20.877Z CVE-2026-52769: YesWiki Unauthenticated SSRF via ActivityPub Signature keyId CVE Advisory https://securelayer7.net/lab/cve-2026-52770-yeswiki-bazar-api-sql-injection SecureLayer7 en 2026-07-09T21:10:47.245Z CVE-2026-52770: YesWiki Bazar API Unauthenticated Boolean-Based SQL Injection CVE Advisory https://securelayer7.net/lab/cve-2026-52771-yeswiki-second-order-sql-injection-delete-page SecureLayer7 en 2026-07-09T21:10:18.889Z CVE-2026-52771: YesWiki Second-Order SQL Injection in Page Delete API CVE Advisory https://securelayer7.net/lab/cve-2026-52778-yeswiki-calcfield-eval-rce-redos SecureLayer7 en 2026-07-09T21:08:01.240Z CVE-2026-52778: YesWiki CalcField Unsafe eval() Remote Code Execution and ReDoS CVE Advisory https://securelayer7.net/lab/cve-2026-53727-css-parser-ssrf-local-file-disclosure-import SecureLayer7 en 2026-07-09T13:48:54.144Z CVE-2026-53727: css_parser SSRF and Local File Disclosure via @import CVE Advisory https://securelayer7.net/lab/cve-2026-54063-excelize-checksheet-oom-panic-dos SecureLayer7 en 2026-07-10T19:29:30.711Z CVE-2026-54063: Excelize Unbounded Row Allocation DoS in Worksheet Parser CVE Advisory https://securelayer7.net/lab/cve-2026-54066-siyuan-assets-double-url-encoding-path-traversal SecureLayer7 en 2026-07-10T20:28:06.480Z CVE-2026-54066: SiYuan Unauthenticated Path Traversal via Double URL Encoding in /assets/ (Publish Mode) CVE Advisory https://securelayer7.net/lab/cve-2026-54067-siyuan-css-snippet-xss-rce SecureLayer7 en 2026-07-10T20:10:39.377Z CVE-2026-54067: SiYuan Stored XSS to RCE via CSS Snippet Style Tag Breakout CVE Advisory https://securelayer7.net/lab/cve-2026-54069-siyuan-chrome-extension-origin-auth-bypass SecureLayer7 en 2026-07-10T19:28:46.280Z CVE-2026-54069: SiYuan Unauthenticated Admin API Access via chrome-extension:// Origin Bypass CVE Advisory https://securelayer7.net/lab/cve-2026-54070-siyuan-bazaar-readme-stored-xss-event-handler-bypass SecureLayer7 en 2026-07-10T20:10:02.440Z CVE-2026-54070: SiYuan Stored XSS via Bazaar README Event Handler Bypass CVE Advisory https://securelayer7.net/lab/cve-2026-54071-babeldoc-cmap-pickle-deserialization-rce SecureLayer7 en 2026-07-10T20:08:12.150Z CVE-2026-54071: BabelDOC Arbitrary Code Execution via CMap Pickle Deserialization CVE Advisory https://securelayer7.net/lab/cve-2026-54072-authorizer-open-redirect-oauth2-token-leak SecureLayer7 en 2026-07-10T19:30:12.069Z CVE-2026-54072: Authorizer Open Redirect Leaks OAuth2 Tokens via Unvalidated redirect_uri CVE Advisory https://securelayer7.net/lab/cve-2026-54089-filebrowser-proxy-auth-header-forgery SecureLayer7 en 2026-07-10T19:28:08.714Z CVE-2026-54089: File Browser Authentication Bypass via Proxy Header Forgery CVE Advisory https://securelayer7.net/lab/cve-2026-54158-siyuan-stored-xss-rce-attribute-view-genavvaluehtml SecureLayer7 en 2026-07-10T19:48:11.904Z CVE-2026-54158: SiYuan Stored XSS to RCE via Unescaped Attribute-View Cell Rendering CVE Advisory https://securelayer7.net/lab/cve-2026-54159-ps-facetedsearch-php-object-injection-rce SecureLayer7 en 2026-07-10T20:49:31.806Z CVE-2026-54159: prestashop/ps_facetedsearch PHP Object Injection via Slider Filter Cache CVE Advisory https://securelayer7.net/lab/cve-2026-54174-apko-data-section-hash-bypass SecureLayer7 en 2026-07-10T21:48:49.362Z CVE-2026-54174: apko Incomplete APK Data Section Integrity Verification CVE Advisory https://securelayer7.net/lab/cve-2026-56382-craftcms-fieldscontroller-yii2-event-injection-rce SecureLayer7 en 2026-07-09T13:48:02.176Z CVE-2026-56382: Craft CMS RCE via Yii2 Event Handler Injection in FieldsController Security Research https://securelayer7.net/lab/exploration-crate-malicious-remote-code-execution SecureLayer7 en 2026-07-10T20:09:18.883Z exploration: Malicious Remote Code Execution via Embedded Downloader Security Research https://securelayer7.net/lab/mcp-atlassian-file-read-attachment-upload-path-traversal SecureLayer7 en 2026-07-10T19:49:30.791Z mcp-atlassian: Arbitrary Server-Side File Read via Attachment Upload Path Traversal Security Research https://securelayer7.net/lab/micronaut-http-client-infinite-redirect-loop-dos SecureLayer7 en 2026-07-09T14:09:29.703Z micronaut-http-client Infinite Redirect Loop Denial of Service Security Research https://securelayer7.net/lab/notrinos-erp-hrm-employee-doc-file-upload-rce SecureLayer7 en 2026-07-10T19:50:42.625Z NotrinosERP: Authenticated Arbitrary File Upload to Remote Code Execution via HRM Employee Documents Security Research https://securelayer7.net/lab/phantom-audio-arbitrary-file-write-mcp-path-traversal SecureLayer7 en 2026-07-09T14:09:00.429Z phantom-audio: Arbitrary File Write and Decode-Bomb DoS via Unconfined MCP Tool Paths Security Research https://securelayer7.net/lab/safeinstall-cli-agent-guard-shell-parsing-bypass SecureLayer7 en 2026-07-10T19:50:05.438Z safeinstall-cli Agent Guard Shell Parsing Bypass Security Research https://securelayer7.net/lab/tsdproxy-auth-token-leak-management-api-escalation SecureLayer7 en 2026-07-10T21:48:02.797Z TSDProxy: Internal Auth Token Leaked to Backend Services Enables Management API Takeover Security Research