https://securelayer7.net/lab/blaze-server-chunked-trailer-header-injection SecureLayer7 en 2026-07-24T22:28:38.450Z blaze-server HTTP/1.1 Chunked Trailer Header Injection Security Research https://securelayer7.net/lab/budibase-app-scoped-builder-privilege-escalation-roles-assign SecureLayer7 en 2026-07-24T22:30:45.779Z Budibase: App-Scoped Builder Privilege Escalation via Public Role Assignment API Security Research https://securelayer7.net/lab/budibase-email-change-idor-account-takeover-accountid-not-validated SecureLayer7 en 2026-07-24T22:24:03.637Z Budibase Email Change IDOR Allows Full Account Takeover via POST /api/v2/email Security Research https://securelayer7.net/lab/budibase-mongodb-nosql-operator-injection-filter-bypass SecureLayer7 en 2026-07-24T22:23:01.235Z Budibase MongoDB Integration NoSQL Operator Injection Security Research https://securelayer7.net/lab/budibase-rest-datasource-ssrf-dns-rebinding-undici-dispatcher SecureLayer7 en 2026-07-24T22:21:52.854Z Budibase REST Datasource SSRF via DNS Rebinding (undici dispatcher bypasses IP pin) Security Research https://securelayer7.net/lab/cve-2026-16584-aws-api-mcp-server-policy-bypass-init-failure SecureLayer7 en 2026-07-24T23:12:09.454Z CVE-2026-16584: AWS API MCP Server Security Policy Bypass via Startup Initialization Failure CVE Advisory https://securelayer7.net/lab/cve-2026-16756-aws-smithy-http-server-slowloris-dos SecureLayer7 en 2026-07-24T22:52:16.432Z CVE-2026-16756: aws-smithy-http-server Slowloris Denial of Service CVE Advisory https://securelayer7.net/lab/cve-2026-16796-bedrock-agentcore-install-packages-argument-injection SecureLayer7 en 2026-07-24T22:50:03.750Z CVE-2026-16796: bedrock-agentcore Argument Injection in install_packages() CVE Advisory https://securelayer7.net/lab/cve-2026-33413-etcd-watch-withfromkey-rbac-bypass SecureLayer7 en 2026-07-24T23:21:57.727Z CVE-2026-33413: etcd Watch API RBAC Authorization Bypass via Open-Ended Range Security Research https://securelayer7.net/lab/cve-2026-44907-react-server-dom-webpack-dos-server-functions SecureLayer7 en 2026-07-24T22:31:55.794Z CVE-2026-44907: react-server-dom-webpack Denial of Service in Server Functions CVE Advisory https://securelayer7.net/lab/cve-2026-62263-openam-webauthn-objectinputfilter-depth-bypass-rce SecureLayer7 en 2026-07-24T23:24:32.600Z CVE-2026-62263: OpenAM WebAuthn ObjectInputFilter depth>1 Deserialization RCE CVE Advisory https://securelayer7.net/lab/cve-2026-62379-openam-authxmlutils-unsafe-reflection-rce SecureLayer7 en 2026-07-24T23:17:52.339Z CVE-2026-62379: OpenAM Unauthenticated Remote Code Execution via Unsafe Reflection in AuthXMLUtils CVE Advisory https://securelayer7.net/lab/etcd-tls-listener-unbounded-handshake-goroutine-dos SecureLayer7 en 2026-07-24T22:48:52.955Z etcd tlsListener Unbounded TLS Handshake Goroutine DoS Security Research https://securelayer7.net/lab/http4s-blaze-server-http1-request-smuggling-parser-laxities SecureLayer7 en 2026-07-24T22:29:28.398Z http4s-blaze-server HTTP/1.1 Request Smuggling (Multiple Parser Laxities) Security Research https://securelayer7.net/lab/http4s-blaze-server-websocket-unbounded-aggregation-dos SecureLayer7 en 2026-07-24T23:16:36.022Z http4s-blaze-server Unbounded WebSocket Message Aggregation DoS Security Research https://securelayer7.net/lab/oh-my-posh-template-injection-path-rce SecureLayer7 en 2026-07-24T23:09:34.401Z Oh My Posh: Arbitrary Command Execution via Template Injection in Path Segment Security Research https://securelayer7.net/lab/omnifaces-forged-resource-id-xss-push-replay SecureLayer7 en 2026-07-24T23:10:54.777Z OmniFaces: Forged Resource IDs, XSS via o:hashParam, and Push-Channel Replay Security Research https://securelayer7.net/lab/openlist-batch-rename-src-name-path-traversal SecureLayer7 en 2026-07-24T23:23:02.663Z OpenList Authenticated Path Traversal in Batch Rename src_name Security Research https://securelayer7.net/lab/py-libp2p-yamux-oversized-data-frame-dos SecureLayer7 en 2026-07-24T22:55:23.169Z py-libp2p yamux connection DoS via oversized DATA frame Security Research https://securelayer7.net/lab/shescape-quadratic-dos-flag-protection-redos SecureLayer7 en 2026-07-24T22:58:13.970Z Shescape: Quadratic-Time Denial of Service in Flag Protection Security Research https://securelayer7.net/lab/shescape-shell-injection-windows-cmd-parentheses SecureLayer7 en 2026-07-24T23:04:38.011Z shescape: Shell Injection via Unescaped Parentheses on Windows CMD Security Research