https://blog.securelayer7.net/best-ptaas-platforms/ SecureLayer7 en 2026-09-09T14:28:31.000Z 10 Best PTaaS Platforms for Penetration Testing in 2026 Security News https://securelayer7.net/lab/cve-2026-55416-pimcore-custom-reports-sql-injection SecureLayer7 en 2026-09-10T19:28:53.283Z CVE-2026-55416: Pimcore Custom Reports SQL Injection via Report Configuration Fields CVE Advisory https://securelayer7.net/lab/cve-2026-55864-geonetwork-sld-unauthenticated-ssrf SecureLayer7 en 2026-09-09T23:48:50.813Z CVE-2026-55864: GeoNetwork Unauthenticated SSRF in SLD Tool CVE Advisory https://securelayer7.net/lab/cve-2026-59158-nuxt-ollama-api-key-ssr-exposure SecureLayer7 en 2026-09-10T00:22:43.196Z CVE-2026-59158: nuxt-ollama API Key Exposed in SSR HTML Payload CVE Advisory https://securelayer7.net/lab/cve-2026-59160-turbo-graph-unauthenticated-task-execution SecureLayer7 en 2026-09-10T00:21:50.099Z CVE-2026-59160: @yeger/turbo-graph Unauthenticated Remote Task Execution CVE Advisory https://securelayer7.net/lab/cve-2026-59161-excelize-getrows-streaming-row-bound-bypass SecureLayer7 en 2026-09-10T15:49:48.816Z CVE-2026-59161: Excelize GetRows Streaming Row-Bound Bypass Leads to Attacker-Controlled Memory Allocation CVE Advisory https://securelayer7.net/lab/cve-2026-59172-joker-linter-local-code-execution SecureLayer7 en 2026-09-10T00:16:11.122Z CVE-2026-59172: Joker Linter Project-Local Code Execution CVE Advisory https://securelayer7.net/lab/cve-2026-59176-functype-mcp-server-set-functype-version-package-alias-rce SecureLayer7 en 2026-09-10T00:11:45.194Z CVE-2026-59176: functype-mcp-server set_functype_version Package Alias RCE CVE Advisory https://securelayer7.net/lab/cve-2026-59177-esphome-device-builder-unauthenticated-ingress-lan-access SecureLayer7 en 2026-09-10T00:10:37.328Z CVE-2026-59177: esphome-device-builder Unauthenticated Dashboard Access via Unrestricted Ingress Bind CVE Advisory https://securelayer7.net/lab/cve-2026-59179-openhop-server-path-traversal-flow-id SecureLayer7 en 2026-09-10T00:09:24.252Z CVE-2026-59179: @openhop/server Path Traversal in Flow ID File Operations CVE Advisory https://securelayer7.net/lab/cve-2026-59185-identrail-cross-tenant-idor-github-installation-id SecureLayer7 en 2026-09-10T00:15:05.162Z CVE-2026-59185: Identrail Cross-Tenant IDOR via Unverified GitHub App installation_id CVE Advisory https://securelayer7.net/lab/cve-2026-69439-diasymreader-native-heap-buffer-overflow-portable-pdb SecureLayer7 en 2026-09-09T16:10:18.050Z CVE-2026-69439: Microsoft.DiaSymReader.Native Heap-Based Buffer Overflow CVE Advisory https://securelayer7.net/lab/cve-2026-69439-diasymreader-native-heap-buffer-overflow-portable-pdb-1 SecureLayer7 en 2026-09-09T16:16:02.596Z CVE-2026-69439: Microsoft.DiaSymReader.Native Heap-Based Buffer Overflow (EoP) Security Research https://securelayer7.net/lab/cve-2026-69522-diasymreader-native-pdb-heap-buffer-overflow-rce SecureLayer7 en 2026-09-09T16:08:52.161Z CVE-2026-69522: Microsoft.DiaSymReader.Native Heap-based Buffer Overflow RCE CVE Advisory https://securelayer7.net/lab/cve-2026-71328-diasymreader-native-msfz-pdb-heap-buffer-overflow SecureLayer7 en 2026-09-09T16:11:31.488Z CVE-2026-71328: Microsoft.DiaSymReader.Native Heap Buffer Overflow via Malformed MSFZ PDB CVE Advisory https://securelayer7.net/lab/cve-2026-71328-diasymreader-native-pdb-heap-buffer-overflow SecureLayer7 en 2026-09-09T16:14:55.584Z CVE-2026-71328: Microsoft.DiaSymReader.Native Heap-Based Buffer Overflow via Malformed Portable PDB Security Research https://securelayer7.net/lab/cve-2026-85730-smol-toml-infinite-loop-dos SecureLayer7 en 2026-09-09T18:08:59.786Z CVE-2026-85730: smol-toml Denial of Service via Infinite Loop in Parser CVE Advisory https://securelayer7.net/lab/cve-2026-86075-n8n-oauth-registration-storage-exhaustion SecureLayer7 en 2026-09-10T15:31:13.334Z CVE-2026-86075: n8n Unauthenticated Persistent Storage Exhaustion via OAuth Dynamic Client Registration CVE Advisory https://securelayer7.net/lab/cve-2026-86076-n8n-expression-sandbox-escape-sanitizer-rebinding SecureLayer7 en 2026-09-10T15:36:07.995Z CVE-2026-86076: n8n Expression Sandbox Escape via Class-Field Sanitizer Rebinding CVE Advisory https://securelayer7.net/lab/cve-2026-86081-n8n-redos-git-node-clone-path SecureLayer7 en 2026-09-10T15:29:55.133Z CVE-2026-86081: n8n Regular Expression Denial of Service via Git Node Clone Path CVE Advisory https://securelayer7.net/lab/cve-2026-86082-n8n-openai-model-search-ssrf-domain-bypass SecureLayer7 en 2026-09-10T15:41:55.218Z CVE-2026-86082: n8n OpenAI Chat Model Node SSRF via Unguarded Model-Search Endpoint CVE Advisory https://securelayer7.net/lab/cve-2026-86083-n8n-json-stringify-code-injection-sandbox-escape SecureLayer7 en 2026-09-10T20:49:11.403Z CVE-2026-86083: n8n Expression Sandbox Escape via JSON.stringify Hijacking CVE Advisory https://securelayer7.net/lab/cve-2026-87016-open-webui-oauth-subject-wildcard-auth-bypass SecureLayer7 en 2026-09-10T21:29:01.615Z CVE-2026-87016: Open WebUI OAuth Subject Wildcard Authentication Bypass CVE Advisory https://securelayer7.net/lab/cve-2026-87995-open-webui-port-preview-same-origin-xss-account-takeover SecureLayer7 en 2026-09-10T15:37:25.814Z CVE-2026-87995: Open WebUI Same-Origin XSS to Account Takeover via Terminal Port-Preview iframe CVE Advisory https://securelayer7.net/lab/cve-2026-87996-open-webui-playwright-dns-rebinding-ssrf SecureLayer7 en 2026-09-10T15:43:14.791Z CVE-2026-87996: open-webui DNS Rebinding SSRF in Playwright Web Loader CVE Advisory https://securelayer7.net/lab/cve-2026-87999-open-webui-ssrf-azure-platform-channel SecureLayer7 en 2026-09-10T15:44:57.022Z CVE-2026-87999: Open WebUI SSRF via Azure Platform Channel Address Bypass CVE Advisory https://securelayer7.net/lab/cve-2026-88017-rclone-ftp-auth-proxy-cross-session-credential-overwrite SecureLayer7 en 2026-09-10T22:49:51.854Z CVE-2026-88017: rclone FTP Auth-Proxy Cross-Session Credential Overwrite CVE Advisory https://securelayer7.net/lab/cve-2026-88056-angular-platform-server-ssrf-unicode-whitespace SecureLayer7 en 2026-09-10T20:30:30.824Z CVE-2026-88056: @angular/platform-server SSRF via Unicode Whitespace Trim Bypass CVE Advisory https://securelayer7.net/lab/cve-2026-88060-angular-platform-server-ssr-template-documentfragment-xss SecureLayer7 en 2026-09-10T20:29:10.394Z CVE-2026-88060: @angular/platform-server SSR XSS via Unescaped Template Content Across DocumentFragment Boundaries CVE Advisory https://securelayer7.net/lab/cve-2026-88062-omniroute-acp-agent-unauthenticated-rce SecureLayer7 en 2026-09-10T21:30:22.248Z CVE-2026-88062: omniroute Unauthenticated Remote Code Execution via Custom ACP Agent CVE Advisory https://securelayer7.net/lab/eigenpal-docx-editor-core-css-injection-print-xss-font-family SecureLayer7 en 2026-09-10T15:09:05.723Z @eigenpal/docx-editor-core: CSS Injection and Print-Time XSS via Unescaped Font Name Security Research https://securelayer7.net/lab/komari-csrf-admin-rce-cookie-samesite SecureLayer7 en 2026-09-10T00:17:18.547Z Komari: Management Interface CSRF Leading to Remote Code Execution Security Research https://securelayer7.net/lab/mistralrs-server-core-unbounded-media-fetch-dos SecureLayer7 en 2026-09-10T22:08:56.939Z mistral.rs: Unbounded Remote Media Fetch and Video Frame Expansion DoS Security Research