https://blog.securelayer7.net/application-penetration-testing/ SecureLayer7 en 2026-07-14T11:22:39.000Z Application Penetration Testing: Complete Guide Security News https://blog.securelayer7.net/continuous-threat-exposure-management-ctem/ SecureLayer7 en 2026-07-14T06:37:53.000Z Continuous Threat Exposure Management (CTEM) Explained Security News https://blog.securelayer7.net/cve-2026-20230-cisco-unified-cm-rce/ SecureLayer7 en 2026-07-13T04:25:43.000Z Cisco Unified CM Pre-Auth RCE — When the Phone System Becomes the Attacker’s Foothold CVE Advisory https://securelayer7.net/lab/cve-2026-44300-opencost-unauthenticated-servicekey-file-write SecureLayer7 en 2026-07-14T17:30:03.933Z CVE-2026-44300: OpenCost Unauthenticated GCP Service Key Overwrite CVE Advisory https://securelayer7.net/lab/cve-2026-44891-netty-stomp-unbounded-headers-dos SecureLayer7 en 2026-07-14T20:29:15.948Z CVE-2026-44891: netty-codec-stomp Unbounded Header Count DoS CVE Advisory https://securelayer7.net/lab/cve-2026-45262-facturascripts-api-sqli-parenthesis-bypass SecureLayer7 en 2026-07-14T17:29:30.374Z CVE-2026-45262: FacturaScripts REST API SQL Injection via Parenthesis Bypass in Where::sqlColumn CVE Advisory https://securelayer7.net/lab/cve-2026-45263-facturascripts-csv-formula-injection-csvexport SecureLayer7 en 2026-07-14T17:28:05.717Z CVE-2026-45263: FacturaScripts CSV Formula Injection in CSVExport CVE Advisory https://securelayer7.net/lab/cve-2026-45378-decidim-verifications-unauthenticated-signed-storage-url SecureLayer7 en 2026-07-13T17:30:23.414Z CVE-2026-45378: decidim-verifications Unauthenticated Access to Signed Identity Document URLs CVE Advisory https://securelayer7.net/lab/cve-2026-45414-decidim-jwt-cross-organization-auth-bypass SecureLayer7 en 2026-07-13T17:29:50.140Z CVE-2026-45414: Decidim JWT Cross-Organization Authentication Bypass CVE Advisory https://securelayer7.net/lab/cve-2026-45693-facturascripts-path-traversal-myfiles-private SecureLayer7 en 2026-07-14T17:28:42.592Z CVE-2026-45693: FacturaScripts Unauthenticated Path Traversal in Static File Controllers CVE Advisory https://securelayer7.net/lab/cve-2026-47677-facturascripts-2fa-bypass-account-takeover SecureLayer7 en 2026-07-13T23:48:40.218Z CVE-2026-47677: FacturaScripts 2FA Endpoint Authentication Bypass and Account Takeover CVE Advisory https://securelayer7.net/lab/cve-2026-48118-nukeviet-reflected-xss-comment-status-base64 SecureLayer7 en 2026-07-13T17:28:39.550Z CVE-2026-48118: NukeViet Unauthenticated Reflected XSS via Base64-Encoded Comment Status Parameter CVE Advisory https://securelayer7.net/lab/cve-2026-49259-nukeviet-stored-xss-comment-reply SecureLayer7 en 2026-07-13T17:28:01.128Z CVE-2026-49259: NukeViet CMS Stored XSS via Comment Reply Handler CVE Advisory https://securelayer7.net/lab/cve-2026-50006-anyquery-attach-database-arbitrary-file-write-rce SecureLayer7 en 2026-07-14T18:48:08.425Z CVE-2026-50006: Anyquery Arbitrary File Write via Unrestricted ATTACH DATABASE in Server Mode CVE Advisory https://securelayer7.net/lab/cve-2026-50013-hoverfly-diff-mode-concurrent-map-race-condition-dos SecureLayer7 en 2026-07-14T18:08:04.382Z CVE-2026-50013: Hoverfly Concurrent Map Write DoS in Diff Mode CVE Advisory https://securelayer7.net/lab/cve-2026-50125-mkp-pod-log-memory-exhaustion SecureLayer7 en 2026-07-14T18:28:41.500Z CVE-2026-50125: MKP Unbounded Pod Log Read Memory Exhaustion CVE Advisory https://securelayer7.net/lab/cve-2026-50131-fedify-ssrf-ipv4-bypass-special-use-ranges SecureLayer7 en 2026-07-14T18:28:11.172Z CVE-2026-50131: @fedify/fedify SSRF Mitigation Bypass via Incomplete IPv4 Validation CVE Advisory https://securelayer7.net/lab/cve-2026-50158-yutu-mcp-caption-download-arbitrary-file-write SecureLayer7 en 2026-07-14T19:48:43.824Z CVE-2026-50158: yutu Arbitrary File Write via MCP caption-download CVE Advisory https://securelayer7.net/lab/cve-2026-52824-kimai-docker-default-app-secret-cookie-forgery SecureLayer7 en 2026-07-14T00:28:04.225Z CVE-2026-52824: Kimai Docker Default APP_SECRET Enables Cookie Forgery and Account Takeover CVE Advisory https://securelayer7.net/lab/cve-2026-52827-kimai-2fa-totp-bypass-session-cookie SecureLayer7 en 2026-07-14T00:48:03.845Z CVE-2026-52827: Kimai 2FA TOTP Bypass via Pre-Verification Session Cookie CVE Advisory https://securelayer7.net/lab/cve-2026-54064-nukeviet-stored-xss-filter-bypass SecureLayer7 en 2026-07-13T18:09:01.585Z CVE-2026-54064: NukeViet CMS Multiple Anti-XSS Filter Bypasses Leading to Stored XSS CVE Advisory https://securelayer7.net/lab/cve-2026-54065-nukeviet-path-traversal-arbitrary-file-deletion SecureLayer7 en 2026-07-13T18:08:25.121Z CVE-2026-54065: NukeViet Path Traversal to Arbitrary File Deletion CVE Advisory https://securelayer7.net/lab/cve-2026-54087-easyadmin-stored-xss-filefield-imagefield-upload SecureLayer7 en 2026-07-14T20:29:56.881Z CVE-2026-54087: EasyAdmin Bundle Stored XSS via FileField and ImageField Upload CVE Advisory https://securelayer7.net/lab/cve-2026-54446-netlicensing-mcp-missing-auth-http-mode SecureLayer7 en 2026-07-14T21:08:34.920Z CVE-2026-54446: netlicensing-mcp Unauthenticated API Key Exposure in HTTP Mode CVE Advisory https://securelayer7.net/lab/cve-2026-54448-trivy-helm-tar-bomb-oom SecureLayer7 en 2026-07-14T20:10:40.486Z CVE-2026-54448: Trivy Helm Chart Tar Bomb OOM via Unbounded io.ReadAll CVE Advisory https://securelayer7.net/lab/cve-2026-54628-anyquery-ssrf-sqlite-virtual-table-server-mode SecureLayer7 en 2026-07-14T20:08:44.113Z CVE-2026-54628: Anyquery SSRF via Unrestricted SQLite Virtual Table Modules in Server Mode CVE Advisory https://securelayer7.net/lab/cve-2026-54629-anyquery-local-file-read-csv-reader-server-mode SecureLayer7 en 2026-07-14T20:27:59.291Z CVE-2026-54629: Anyquery Local File Read via Unrestricted SQLite Virtual Table Modules CVE Advisory https://securelayer7.net/lab/cve-2026-55372-nukeviet-preauth-ssrf-x-forwarded-host SecureLayer7 en 2026-07-13T18:07:58.923Z CVE-2026-55372: NukeViet Pre-auth SSRF via X-Forwarded-Host CVE Advisory https://securelayer7.net/lab/cve-2026-59954-apollo-configservice-accesskey-appid-bypass SecureLayer7 en 2026-07-13T18:28:02.445Z CVE-2026-59954: Apollo ConfigService AccessKey Authentication Bypass via Non-Canonical appId CVE Advisory https://securelayer7.net/lab/cve-2026-61549-woodpecker-ci-kubernetes-serviceaccountname-privilege-escalation SecureLayer7 en 2026-07-14T20:48:05.230Z CVE-2026-61549: Woodpecker CI Kubernetes Backend Privilege Escalation via serviceAccountName CVE Advisory https://securelayer7.net/lab/cve-2026-61668-dirac-pilotwrapper-tls-certificate-validation-mitm SecureLayer7 en 2026-07-13T18:48:48.428Z CVE-2026-61668: DIRAC PilotWrapper Disabled TLS Certificate Validation CVE Advisory https://securelayer7.net/lab/cve-2026-61699-nebula-mesh-blocklist-never-enforced SecureLayer7 en 2026-07-14T20:49:16.605Z CVE-2026-61699: nebula-mesh Certificate Blocklist Never Enforced on Mesh Peers CVE Advisory https://securelayer7.net/lab/ech0-accept-language-underscore-bypass-dos-amplification SecureLayer7 en 2026-07-14T20:09:19.681Z Ech0: Accept-Language `_` Separator Bypass Causes ~70x CPU Amplification DoS Security Research https://securelayer7.net/lab/facturascripts-uploadedfile-path-traversal-rce SecureLayer7 en 2026-07-14T21:07:59.830Z FacturaScripts Path Traversal to Remote Code Execution via UploadedFile::move() Security Research https://securelayer7.net/lab/json-repair-circular-ref-infinite-loop-dos SecureLayer7 en 2026-07-13T23:47:53.793Z json-repair Circular JSON Schema $ref Infinite Loop DoS Security Research https://securelayer7.net/lab/nebula-mesh-allow-private-ssrf-missing-authorization SecureLayer7 en 2026-07-14T20:48:38.759Z nebula-mesh: Non-Admin SSRF via Unguarded allow_private Webhook Flag Security Research https://securelayer7.net/lab/tidgi-desktop-rce-tiddlywiki-startup-module-import SecureLayer7 en 2026-07-14T20:09:55.785Z TidGi Desktop Remote Code Execution via Malicious TiddlyWiki Repository Import Security Research https://securelayer7.net/lab/tsdproxy-x-forwarded-for-ip-spoofing-injection SecureLayer7 en 2026-07-14T19:48:03.192Z TsDProxy X-Forwarded-For Header Injection Allows IP Spoofing Security Research