https://blog.securelayer7.net/penetration-testing-execution-standard/ SecureLayer7 en 2026-07-31T11:13:18.000Z Penetration Testing Execution Standard (PTES): A Complete Guide Security News https://blog.securelayer7.net/huggingface-ai-agent-intrusion-technical-anatomy/ SecureLayer7 en 2026-07-30T15:03:53.000Z Inside the HuggingFace AI Agent Intrusion (Part 2) Security News https://securelayer7.net/lab/cve-2025-4318-aws-amplify-codegen-ui-react-eval-injection-rce SecureLayer7 en 2026-07-30T21:08:48.783Z CVE-2025-4318: @aws-amplify/codegen-ui-react Eval Injection (RCE) CVE Advisory https://securelayer7.net/lab/cve-2026-11393-agentcore-cli-triple-quote-code-injection SecureLayer7 en 2026-07-29T16:29:35.546Z CVE-2026-11393: @aws/agentcore Code Injection via Triple-Quote Escape Bypass CVE Advisory https://securelayer7.net/lab/cve-2026-54574-proot-distro-symlink-escape-tar-arbitrary-write SecureLayer7 en 2026-07-29T16:50:04.239Z CVE-2026-54574: proot-distro Symlink Escape via Malicious Tar Archive CVE Advisory https://securelayer7.net/lab/cve-2026-54680-kube-logging-operator-fluentd-config-injection-rce SecureLayer7 en 2026-07-29T17:10:14.173Z CVE-2026-54680: kube-logging/logging-operator Fluentd Configuration Injection RCE CVE Advisory https://securelayer7.net/lab/cve-2026-54722-dssrf-ssrf-userinfo-bypass SecureLayer7 en 2026-07-30T16:28:51.243Z CVE-2026-54722: dssrf SSRF Bypass via Userinfo Stripping CVE Advisory https://securelayer7.net/lab/cve-2026-54727-proot-distro-hardlink-cross-container-isolation-bypass SecureLayer7 en 2026-07-29T16:48:49.110Z CVE-2026-54727: proot-distro Container Isolation Bypass via Crafted Restore Archive CVE Advisory https://securelayer7.net/lab/cve-2026-54735-prebid-server-bidder-adapter-ssrf SecureLayer7 en 2026-07-29T16:08:56.283Z CVE-2026-54735: prebid-server Bidder Adapter Server-Side Request Forgery CVE Advisory https://securelayer7.net/lab/cve-2026-66066-activestorage-libvips-unfuzzed-arbitrary-file-read SecureLayer7 en 2026-07-30T18:29:11.090Z CVE-2026-66066: Active Storage Arbitrary File Read via libvips Unfuzzed Loaders CVE Advisory https://securelayer7.net/lab/cve-2026-67424-flyto-core-ssrf-redirect-bypass SecureLayer7 en 2026-07-30T15:08:45.660Z CVE-2026-67424: flyto-core SSRF via Unvalidated HTTP Redirect CVE Advisory https://securelayer7.net/lab/cve-2026-67425-flyto-core-llm-api-key-exfiltration-base-url SecureLayer7 en 2026-07-30T15:14:58.158Z CVE-2026-67425: flyto-core LLM API Key Exfiltration via Caller-Controlled base_url CVE Advisory https://securelayer7.net/lab/cve-2026-67426-flyto-core-unauthenticated-ssrf-runner-secret SecureLayer7 en 2026-07-30T15:11:27.665Z CVE-2026-67426: flyto-core Unauthenticated SSRF and Runner Secret Exfiltration CVE Advisory https://securelayer7.net/lab/cve-2026-67428-flyto-core-ssrf-unguarded-http-modules SecureLayer7 en 2026-07-30T15:09:57.996Z CVE-2026-67428: flyto-core Missing SSRF Guard on HTTP Modules CVE Advisory https://securelayer7.net/lab/cve-2026-67429-flyto-core-arbitrary-file-write-image-download SecureLayer7 en 2026-07-30T14:49:47.052Z CVE-2026-67429: flyto-core Arbitrary File Write via image.download CVE Advisory https://securelayer7.net/lab/cve-2026-67432-mcp-ruby-sdk-unbounded-body-dos SecureLayer7 en 2026-07-30T14:51:48.356Z CVE-2026-67432: mcp (Ruby SDK) Unbounded Request Body Memory Exhaustion CVE Advisory https://securelayer7.net/lab/netfoil-block-response-0000-localhost-traffic SecureLayer7 en 2026-07-29T17:08:53.037Z netfoil: Incorrect Block Response Sends Traffic to Localhost Security Research