https://blog.securelayer7.net/runtime-application-self-protection-rasp/ SecureLayer7 en 2026-07-29T08:56:31.000Z Runtime Application Self-Protection (RASP) Explained Security News https://blog.securelayer7.net/openai-hugging-face-exploitgym-incident-analysis/ SecureLayer7 en 2026-07-28T15:35:52.000Z How OpenAI’s AI Agent Broke Into Hugging Face Security News https://blog.securelayer7.net/ai-assisted-penetration-testing/ SecureLayer7 en 2026-07-28T07:04:32.000Z AI-Assisted Penetration Testing: Guide & Tools Security News https://securelayer7.net/lab/cve-2026-32203-encryptedxml-nested-xml-stack-overflow-dos SecureLayer7 en 2026-07-28T21:08:55.611Z CVE-2026-32203: System.Security.Cryptography.Xml EncryptedXml Stack Overflow via Deeply Nested XML CVE Advisory https://securelayer7.net/lab/cve-2026-43910-appium-java-client-directconnect-ssrf-network-pivot SecureLayer7 en 2026-07-28T14:28:48.099Z CVE-2026-43910: appium/java-client SSRF via Unvalidated directConnect Redirect CVE Advisory https://securelayer7.net/lab/cve-2026-43983-pocket-id-oidc-refresh-token-authorization-bypass SecureLayer7 en 2026-07-28T14:30:12.261Z CVE-2026-43983: Pocket ID OIDC Refresh Token Authorization Bypass CVE Advisory https://securelayer7.net/lab/cve-2026-45293-wpcs-eval-injection-enqueued-resource-parameters SecureLayer7 en 2026-07-28T14:56:07.367Z CVE-2026-45293: WordPress Coding Standards (WPCS) Eval Injection via EnqueuedResourceParameters Sniff CVE Advisory https://securelayer7.net/lab/cve-2026-46428-lettre-boring-tls-hostname-verification-disabled SecureLayer7 en 2026-07-28T14:51:31.443Z CVE-2026-46428: lettre Inverted Boolean Disables TLS Hostname Verification (boring-tls) CVE Advisory https://securelayer7.net/lab/cve-2026-47427-github-mcp-server-nil-pointer-dereference-dos SecureLayer7 en 2026-07-28T14:50:08.053Z CVE-2026-47427: github-mcp-server Nil Pointer Dereference DoS in completion/complete Handler CVE Advisory https://securelayer7.net/lab/cve-2026-50570-fission-capability-denylist-bypass-sys-time SecureLayer7 en 2026-07-28T20:29:29.632Z CVE-2026-50570: Fission Incomplete Capability Denylist Allows CAP_SYS_TIME Privilege Escalation CVE Advisory https://securelayer7.net/lab/cve-2026-54545-wakaru-cli-path-traversal-arbitrary-file-write SecureLayer7 en 2026-07-28T14:48:54.542Z CVE-2026-54545: @wakaru/cli Arbitrary File Write via Path Traversal in --unpack CVE Advisory https://securelayer7.net/lab/cve-2026-54588-poweradmin-host-header-injection-oidc-redirect-uri SecureLayer7 en 2026-07-28T16:48:45.893Z CVE-2026-54588: Poweradmin Host Header Injection in OIDC / SAML / Logout Redirect CVE Advisory https://securelayer7.net/lab/cve-2026-54593-pterodactyl-panel-jwt-scope-bypass-file-upload SecureLayer7 en 2026-07-28T15:48:46.096Z CVE-2026-54593: Pterodactyl Panel Improper JWT Scope Allows Unauthorized File Upload CVE Advisory https://securelayer7.net/lab/cve-2026-54603-oauth2-protocol-relative-redirect-bearer-token-leak SecureLayer7 en 2026-07-28T16:51:05.868Z CVE-2026-54603: oauth2 Protocol-Relative Redirect Bearer Token Leak CVE Advisory https://securelayer7.net/lab/cve-2026-54605-ruby-oauth-cross-origin-token-redirect-ssrf SecureLayer7 en 2026-07-28T16:28:59.760Z CVE-2026-54605: oauth gem Cross-Origin Token Redirect SSRF and Signed-Request Disclosure CVE Advisory https://securelayer7.net/lab/cve-2026-54609-qtineon-neonrelay-reconnect-amplification-dos SecureLayer7 en 2026-07-28T16:49:53.869Z CVE-2026-54609: QTINeon NeonRelay Unauthenticated Amplification via Unbounded RECONNECT_REQUEST Forwarding CVE Advisory https://securelayer7.net/lab/cve-2026-54632-sipsorcery-rtp-ice-udp-dos SecureLayer7 en 2026-07-28T17:08:57.683Z CVE-2026-54632: SIPSorcery Remote DoS via Malformed UDP Packet on RTP/ICE Socket CVE Advisory https://securelayer7.net/lab/cve-2026-54635-pytonapi-webhook-auth-bypass SecureLayer7 en 2026-07-28T17:28:44.203Z CVE-2026-54635: pytonapi Webhook Custom Path Authentication Bypass CVE Advisory https://securelayer7.net/lab/cve-2026-54638-gotd-td-unencrypted-message-dos-memory-allocation SecureLayer7 en 2026-07-28T22:22:42.969Z CVE-2026-54638: gotd/td Pre-Auth Denial of Service via Unbounded Memory Allocation CVE Advisory https://securelayer7.net/lab/cve-2026-54650-openhole-server-path-traversal-percent-encoded SecureLayer7 en 2026-07-28T22:29:09.347Z CVE-2026-54650: openhole-server Path Traversal via Percent-Encoded URL Segments CVE Advisory https://securelayer7.net/lab/cve-2026-54653-datamodel-code-generator-default-factory-code-injection SecureLayer7 en 2026-07-28T22:04:38.664Z CVE-2026-54653: datamodel-code-generator Code Injection via default_factory Schema Field CVE Advisory https://securelayer7.net/lab/cve-2026-54654-datamodel-code-generator-extra-template-data-comment-code-injecti SecureLayer7 en 2026-07-28T22:30:27.178Z CVE-2026-54654: datamodel-code-generator Code Injection via Carriage Return in --extra-template-data comment CVE Advisory https://securelayer7.net/lab/cve-2026-54655-datamodel-code-generator-x-python-type-code-injection SecureLayer7 en 2026-07-28T22:17:36.306Z CVE-2026-54655: datamodel-code-generator Code Injection via x-python-type CVE Advisory https://securelayer7.net/lab/cve-2026-54658-hypequery-clickhouse-sql-injection-backslash-escape-bypass SecureLayer7 en 2026-07-28T22:21:34.046Z CVE-2026-54658: @hypequery/clickhouse SQL Injection via Backslash Escape Bypass CVE Advisory https://securelayer7.net/lab/cve-2026-54690-datamodel-code-generator-ssrf-json-schema-ref SecureLayer7 en 2026-07-28T21:50:42.222Z CVE-2026-54690: datamodel-code-generator SSRF via JSON Schema $ref HTTP URL CVE Advisory https://securelayer7.net/lab/cve-2026-54691-datamodel-code-generator-ssrf-url SecureLayer7 en 2026-07-28T22:36:56.996Z CVE-2026-54691: datamodel-code-generator SSRF via --url CVE Advisory https://securelayer7.net/lab/cve-2026-54719-goshs-bulk-download-acl-bypass SecureLayer7 en 2026-07-28T22:01:34.532Z CVE-2026-54719: goshs .goshs ACL Bypass via ?bulk Zip-Download Route CVE Advisory https://securelayer7.net/lab/cve-2026-55389-datamodel-code-generator-file-ref-path-traversal SecureLayer7 en 2026-07-28T21:55:33.059Z CVE-2026-55389: datamodel-code-generator Arbitrary File Read via JSON-Schema $ref CVE Advisory https://securelayer7.net/lab/cve-2026-55390-datamodel-code-generator-xsd-schemalocation-path-traversal SecureLayer7 en 2026-07-28T21:28:37.918Z CVE-2026-55390: datamodel-code-generator XSD schemaLocation Path Traversal CVE Advisory https://securelayer7.net/lab/cve-2026-55391-datamodel-code-generator-ssrf-dns-rebinding SecureLayer7 en 2026-07-28T22:10:20.897Z CVE-2026-55391: datamodel-code-generator SSRF Protection Bypass via DNS Rebinding CVE Advisory https://securelayer7.net/lab/cve-2026-55415-datamodel-code-generator-import-code-injection SecureLayer7 en 2026-07-28T21:52:08.418Z CVE-2026-55415: datamodel-code-generator Code Injection via x-python-import and customTypePath CVE Advisory https://securelayer7.net/lab/cve-2026-55771-cedarjava-entityidentifier-equals-inverted-logic SecureLayer7 en 2026-07-28T14:54:38.130Z CVE-2026-55771: CedarJava EntityIdentifier Incorrect Equality Comparison CVE Advisory https://securelayer7.net/lab/cve-2026-61609-pterodactyl-panel-global-auth-ratelimit-dos SecureLayer7 en 2026-07-28T15:08:50.730Z CVE-2026-61609: Pterodactyl Panel Global Authentication Rate-Limit DoS CVE Advisory https://securelayer7.net/lab/cve-2026-62325-goshs-sftp-empty-password-auth-bypass SecureLayer7 en 2026-07-28T22:02:39.974Z CVE-2026-62325: goshs SFTP Authentication Bypass via Empty Password CVE Advisory https://securelayer7.net/lab/cve-2026-64863-goshs-webdav-move-no-delete-bypass SecureLayer7 en 2026-07-28T22:23:57.335Z CVE-2026-64863: goshs WebDAV MOVE Bypasses --no-delete CVE Advisory