https://blog.securelayer7.net/black-hat-usa-2026-parties-events-guide/ SecureLayer7 en 2026-07-20T18:33:09.000Z Black Hat USA 2026 Parties & Events: The Complete Guide (with DEF CON 34) Security News https://securelayer7.net/lab/axios-prototype-pollution-proxy-hijack-interceptor-config SecureLayer7 en 2026-07-20T22:50:27.496Z axios Node HTTP Adapter Prototype Pollution Proxy Hijack via Interceptor Config Cloning Security Research https://securelayer7.net/lab/cve-2025-67725-tornado-httpheaders-quadratic-dos-repeated-headers SecureLayer7 en 2026-07-20T19:08:39.101Z CVE-2025-67725: Tornado HTTPHeaders Quadratic DoS via Repeated Header Coalescing CVE Advisory https://securelayer7.net/lab/cve-2025-67726-tornado-multipart-parseparam-quadratic-dos SecureLayer7 en 2026-07-20T19:08:00.383Z CVE-2025-67726: Tornado Quadratic DoS via Crafted Multipart Parameters CVE Advisory https://securelayer7.net/lab/cve-2026-13311-shell-quote-quadratic-dos-parse SecureLayer7 en 2026-07-20T22:10:33.827Z CVE-2026-13311: shell-quote Quadratic Complexity DoS in parse() CVE Advisory https://securelayer7.net/lab/cve-2026-47302-encryptedxml-nested-dos SecureLayer7 en 2026-07-20T22:49:13.083Z CVE-2026-47302: System.Security.Cryptography.Xml EncryptedXml Denial of Service CVE Advisory https://securelayer7.net/lab/cve-2026-50524-dotnet-tls-handshake-dos SecureLayer7 en 2026-07-20T23:10:52.413Z CVE-2026-50524: .NET TLS Handshake Denial of Service CVE Advisory https://securelayer7.net/lab/cve-2026-50525-dotnet-encryptedxml-cipherreference-dos SecureLayer7 en 2026-07-20T23:09:01.007Z CVE-2026-50525: System.Security.Cryptography.Xml EncryptedXml Denial of Service CVE Advisory https://securelayer7.net/lab/cve-2026-50528-dotnet-sslstream-tls-authorization-bypass SecureLayer7 en 2026-07-20T23:09:29.070Z CVE-2026-50528: .NET SslStream TLS Authorization Bypass CVE Advisory https://securelayer7.net/lab/cve-2026-50648-encryptedxml-nested-dos-resource-exhaustion SecureLayer7 en 2026-07-20T23:10:15.322Z CVE-2026-50648: System.Security.Cryptography.Xml EncryptedXml Denial of Service CVE Advisory https://securelayer7.net/lab/cve-2026-53515-better-auth-sso-bola-register-provider SecureLayer7 en 2026-07-20T21:08:02.302Z CVE-2026-53515: @better-auth/sso Broken Object-Level Authorization on SSO Provider Registration CVE Advisory https://securelayer7.net/lab/cve-2026-54058-pillow-mcidas-oob-read-mmap-stride SecureLayer7 en 2026-07-20T23:48:47.857Z CVE-2026-54058: Pillow Out-of-Bounds Read via Undersized McIdas AREA Row Stride CVE Advisory https://securelayer7.net/lab/cve-2026-54059-pillow-pcffontfile-decompression-bomb-bypass SecureLayer7 en 2026-07-20T22:51:15.511Z CVE-2026-54059: Pillow PcfFontFile Decompression Bomb Protection Bypass CVE Advisory https://securelayer7.net/lab/cve-2026-54060-pillow-fontfile-compile-decompression-bomb-bypass SecureLayer7 en 2026-07-20T22:30:37.778Z CVE-2026-54060: Pillow FontFile.compile() Decompression Bomb Bypass CVE Advisory https://securelayer7.net/lab/cve-2026-54560-cloudreve-oauth-scope-bypass SecureLayer7 en 2026-07-20T21:29:48.976Z CVE-2026-54560: Cloudreve OAuth Access Token Scope Bypass CVE Advisory https://securelayer7.net/lab/cve-2026-55379-pillow-bdffontfile-decompression-bomb-bypass SecureLayer7 en 2026-07-20T22:29:50.106Z CVE-2026-55379: Pillow BdfFontFile Decompression Bomb Protection Bypass CVE Advisory https://securelayer7.net/lab/cve-2026-55380-pillow-gdimagefile-decompression-bomb-dos SecureLayer7 en 2026-07-20T21:51:06.544Z CVE-2026-55380: Pillow GdImageFile Decompression Bomb (DoS) CVE Advisory https://securelayer7.net/lab/cve-2026-55514-vllm-mrope-prompt-embeds-dos SecureLayer7 en 2026-07-20T19:28:51.145Z CVE-2026-55514: vLLM Denial of Service via Prompt Embeds on M-RoPE Models CVE Advisory https://securelayer7.net/lab/cve-2026-55667-filebrowser-scopedfs-removeall-symlink-deletion SecureLayer7 en 2026-07-20T21:29:15.182Z CVE-2026-55667: File Browser Out-of-Scope File Deletion via Symlink-Following RemoveAll CVE Advisory https://securelayer7.net/lab/cve-2026-57108-dotnet-runtime-x509-nameinfo-dos SecureLayer7 en 2026-07-20T22:49:48.269Z CVE-2026-57108: .NET Runtime X.509 Certificate Parsing Denial of Service CVE Advisory https://securelayer7.net/lab/cve-2026-59197-pillow-rankfilter-integer-overflow-heap-oob-write SecureLayer7 en 2026-07-20T23:48:06.904Z CVE-2026-59197: Pillow Heap Out-of-Bounds Write via Integer Overflow in RankFilter CVE Advisory https://securelayer7.net/lab/cve-2026-59199-pillow-heap-oob-write-paste-crop-integer-overflow SecureLayer7 en 2026-07-20T23:30:15.960Z CVE-2026-59199: Pillow Heap Out-of-Bounds Write via Signed Coordinate Overflow CVE Advisory https://securelayer7.net/lab/cve-2026-59200-pillow-pdfparser-decompression-bomb-dos SecureLayer7 en 2026-07-20T23:29:31.412Z CVE-2026-59200: Pillow PdfParser Decompression Bomb DoS CVE Advisory https://securelayer7.net/lab/cve-2026-59204-pillow-jpeg2000-tiled-decode-memory-exhaustion SecureLayer7 en 2026-07-20T23:28:47.936Z CVE-2026-59204: Pillow JPEG2000 Tiled Decode Memory Exhaustion CVE Advisory https://securelayer7.net/lab/cve-2026-59205-pillow-imagecms-heap-oob-write-mode-mismatch SecureLayer7 en 2026-07-20T23:28:09.955Z CVE-2026-59205: Pillow Controlled Heap Out-of-Bounds Write in ImageCmsTransform.apply() CVE Advisory https://securelayer7.net/lab/cve-2026-59725-engine-io-polling-connection-exhaustion-dos SecureLayer7 en 2026-07-20T22:09:58.620Z CVE-2026-59725: engine.io Polling Transport Connection Exhaustion (DoS) CVE Advisory https://securelayer7.net/lab/cve-2026-59731-astro-middleware-authorization-bypass-decode-iteration SecureLayer7 en 2026-07-20T22:08:00.647Z CVE-2026-59731: Astro Middleware Authorization Bypass via URL Decode Iteration Limit CVE Advisory https://securelayer7.net/lab/cve-2026-59869-js-yaml-merge-key-quadratic-dos SecureLayer7 en 2026-07-20T21:28:34.464Z CVE-2026-59869: js-yaml Merge-Key Chain Quadratic CPU DoS CVE Advisory https://securelayer7.net/lab/cve-2026-59874-node-tar-infinite-loop-negative-entry-size SecureLayer7 en 2026-07-20T22:09:17.085Z CVE-2026-59874: node-tar Infinite Loop via Negative Base-256 Entry Size CVE Advisory https://securelayer7.net/lab/cve-2026-59922-mistune-quadratic-dos-formatting-plugins SecureLayer7 en 2026-07-20T21:49:33.963Z CVE-2026-59922: mistune Quadratic Parsing DoS in Formatting Plugins CVE Advisory https://securelayer7.net/lab/cve-2026-59928-mistune-quadratic-reflink-dos SecureLayer7 en 2026-07-20T21:28:01.632Z CVE-2026-59928: mistune Quadratic-Time ReDoS via Reference-Link Definitions CVE Advisory https://securelayer7.net/lab/cve-2026-61736-lightrag-cors-wildcard-credentials SecureLayer7 en 2026-07-20T21:48:51.361Z CVE-2026-61736: lightrag-hku CORS Wildcard + Credentials Any-Origin Takeover CVE Advisory https://securelayer7.net/lab/cve-2026-61740-lightrag-hardcoded-jwt-secret-auth-bypass SecureLayer7 en 2026-07-20T21:48:13.747Z CVE-2026-61740: LightRAG Authentication Bypass via Hardcoded JWT Secret and Guest Token Short-Circuit CVE Advisory https://securelayer7.net/lab/cve-2026-61835-directus-ssrf-0000-bypass-file-import SecureLayer7 en 2026-07-20T22:29:17.137Z CVE-2026-61835: Directus SSRF Protection Bypass via 0.0.0.0 in File Import CVE Advisory https://securelayer7.net/lab/cve-2026-62685-filebrowser-username-normalization-home-directory-collision SecureLayer7 en 2026-07-20T22:28:04.043Z CVE-2026-62685: File Browser Username Normalization Home Directory Collision CVE Advisory