https://blog.securelayer7.net/application-penetration-testing/ SecureLayer7 en 2026-07-14T11:22:39.000Z Application Penetration Testing: Complete Guide Security News https://blog.securelayer7.net/continuous-threat-exposure-management-ctem/ SecureLayer7 en 2026-07-14T06:37:53.000Z Continuous Threat Exposure Management (CTEM) Explained Security News https://blog.securelayer7.net/cve-2026-20230-cisco-unified-cm-rce/ SecureLayer7 en 2026-07-13T04:25:43.000Z Cisco Unified CM Pre-Auth RCE — When the Phone System Becomes the Attacker’s Foothold CVE Advisory https://securelayer7.net/lab/cve-2026-45378-decidim-verifications-unauthenticated-signed-storage-url SecureLayer7 en 2026-07-13T17:30:23.414Z CVE-2026-45378: decidim-verifications Unauthenticated Access to Signed Identity Document URLs CVE Advisory https://securelayer7.net/lab/cve-2026-45414-decidim-jwt-cross-organization-auth-bypass SecureLayer7 en 2026-07-13T17:29:50.140Z CVE-2026-45414: Decidim JWT Cross-Organization Authentication Bypass CVE Advisory https://securelayer7.net/lab/cve-2026-47677-facturascripts-2fa-bypass-account-takeover SecureLayer7 en 2026-07-13T23:48:40.218Z CVE-2026-47677: FacturaScripts 2FA Endpoint Authentication Bypass and Account Takeover CVE Advisory https://securelayer7.net/lab/cve-2026-48118-nukeviet-reflected-xss-comment-status-base64 SecureLayer7 en 2026-07-13T17:28:39.550Z CVE-2026-48118: NukeViet Unauthenticated Reflected XSS via Base64-Encoded Comment Status Parameter CVE Advisory https://securelayer7.net/lab/cve-2026-49259-nukeviet-stored-xss-comment-reply SecureLayer7 en 2026-07-13T17:28:01.128Z CVE-2026-49259: NukeViet CMS Stored XSS via Comment Reply Handler CVE Advisory https://securelayer7.net/lab/cve-2026-52824-kimai-docker-default-app-secret-cookie-forgery SecureLayer7 en 2026-07-14T00:28:04.225Z CVE-2026-52824: Kimai Docker Default APP_SECRET Enables Cookie Forgery and Account Takeover CVE Advisory https://securelayer7.net/lab/cve-2026-52827-kimai-2fa-totp-bypass-session-cookie SecureLayer7 en 2026-07-14T00:48:03.845Z CVE-2026-52827: Kimai 2FA TOTP Bypass via Pre-Verification Session Cookie CVE Advisory https://securelayer7.net/lab/cve-2026-54064-nukeviet-stored-xss-filter-bypass SecureLayer7 en 2026-07-13T18:09:01.585Z CVE-2026-54064: NukeViet CMS Multiple Anti-XSS Filter Bypasses Leading to Stored XSS CVE Advisory https://securelayer7.net/lab/cve-2026-54065-nukeviet-path-traversal-arbitrary-file-deletion SecureLayer7 en 2026-07-13T18:08:25.121Z CVE-2026-54065: NukeViet Path Traversal to Arbitrary File Deletion CVE Advisory https://securelayer7.net/lab/cve-2026-55372-nukeviet-preauth-ssrf-x-forwarded-host SecureLayer7 en 2026-07-13T18:07:58.923Z CVE-2026-55372: NukeViet Pre-auth SSRF via X-Forwarded-Host CVE Advisory https://securelayer7.net/lab/cve-2026-59954-apollo-configservice-accesskey-appid-bypass SecureLayer7 en 2026-07-13T18:28:02.445Z CVE-2026-59954: Apollo ConfigService AccessKey Authentication Bypass via Non-Canonical appId CVE Advisory https://securelayer7.net/lab/cve-2026-61668-dirac-pilotwrapper-tls-certificate-validation-mitm SecureLayer7 en 2026-07-13T18:48:48.428Z CVE-2026-61668: DIRAC PilotWrapper Disabled TLS Certificate Validation CVE Advisory https://securelayer7.net/lab/json-repair-circular-ref-infinite-loop-dos SecureLayer7 en 2026-07-13T23:47:53.793Z json-repair Circular JSON Schema $ref Infinite Loop DoS Security Research