https://blog.securelayer7.net/api-security-testing/ SecureLayer7 en 2026-08-20T11:54:25.000Z Security Testing For API: Types, Best Tools, And Checklist Security News https://blog.securelayer7.net/ai-powered-pentest-vs-ai-native-pentest/ SecureLayer7 en 2026-08-20T06:05:42.000Z AI-Powered Pentest vs AI-Native Pentest: Key Differences Security News https://securelayer7.net/lab/cve-2026-54061-dgraph-streamextsnapshot-unauthenticated-store-wipe SecureLayer7 en 2026-08-20T17:49:44.806Z CVE-2026-54061: Dgraph Alpha Unauthenticated Remote Group Store Wipe via StreamExtSnapshot CVE Advisory https://securelayer7.net/lab/cve-2026-54167-pipelines-as-code-github-app-jwt-exfiltration-enterprise-host-hea SecureLayer7 en 2026-08-20T19:31:01.063Z CVE-2026-54167: Pipelines-as-Code GitHub App JWT Exfiltration via Untrusted X-GitHub-Enterprise-Host Header CVE Advisory https://securelayer7.net/lab/cve-2026-54175-backpack-crud-unverified-password-change-mass-assignment SecureLayer7 en 2026-08-20T19:28:48.686Z CVE-2026-54175: Laravel Backpack CRUD Unverified Password Change via Mass Assignment CVE Advisory https://securelayer7.net/lab/cve-2026-54178-backpack-crud-arbitrary-file-deletion-upload-multiple SecureLayer7 en 2026-08-20T19:24:38.258Z CVE-2026-54178: Backpack CRUD Arbitrary File Deletion via Unvalidated clear_<attr>[] Input CVE Advisory https://securelayer7.net/lab/cve-2026-54180-laravel-backpack-crud-idor-write-operations SecureLayer7 en 2026-08-20T19:23:21.216Z CVE-2026-54180: Laravel Backpack CRUD Cross-Tenant IDOR on Write Operations CVE Advisory https://securelayer7.net/lab/cve-2026-54182-backpack-crud-os-command-injection-host-header SecureLayer7 en 2026-08-20T19:15:46.249Z CVE-2026-54182: backpack/crud OS Command Injection via Host Header CVE Advisory https://securelayer7.net/lab/cve-2026-54245-fleetdm-okta-conditional-access-sql-injection SecureLayer7 en 2026-08-20T19:04:54.111Z CVE-2026-54245: Fleet SQL Injection in Okta Conditional Access Endpoint CVE Advisory https://securelayer7.net/lab/cve-2026-54251-netty-ohttp-direct-memory-leak-aead-dos SecureLayer7 en 2026-08-20T19:03:38.781Z CVE-2026-54251: netty-incubator-codec-ohttp Native Direct-Memory Leak on AEAD Decryption Failure CVE Advisory https://securelayer7.net/lab/cve-2026-54263-wagtail-reflected-xss-image-url-generator SecureLayer7 en 2026-08-20T19:21:57.257Z CVE-2026-54263: Wagtail Reflected XSS in Dynamic Image URL Generator CVE Advisory https://securelayer7.net/lab/cve-2026-55149-vouch-proxy-multipart-cookie-dos SecureLayer7 en 2026-08-20T17:28:44.276Z CVE-2026-55149: vouch-proxy Unbounded Multipart Cookie Allocation DoS CVE Advisory https://securelayer7.net/lab/cve-2026-59989-phalcon-volt-join-filter-code-injection-rce SecureLayer7 en 2026-08-21T21:28:49.288Z CVE-2026-59989: Phalcon Volt Compiler join Filter PHP Code Injection (RCE) CVE Advisory https://securelayer7.net/lab/cve-2026-61539-xinference-eval-injection-llama3-tool-parser-rce SecureLayer7 en 2026-08-21T21:21:36.323Z CVE-2026-61539: Xinference Remote Code Execution via Unsafe eval() in Llama3 Tool-Call Parser CVE Advisory https://securelayer7.net/lab/cve-2026-61798-netty-ohttp-hpke-private-key-tostring-exposure SecureLayer7 en 2026-08-20T18:56:05.986Z CVE-2026-61798: netty-incubator-codec-ohttp BoringSSL HPKE Private Key Exposure via toString() CVE Advisory https://securelayer7.net/lab/cve-2026-61827-netty-bhttp-parser-oom-variable-length SecureLayer7 en 2026-08-20T18:51:38.823Z CVE-2026-61827: netty-incubator-codec-bhttp BinaryHttpParser Unbounded Memory Allocation (OOM) CVE Advisory https://securelayer7.net/lab/cve-2026-63124-netty-bhttp-binaryhttpparser-infinite-loop-dos SecureLayer7 en 2026-08-20T18:54:59.236Z CVE-2026-63124: netty-incubator-codec-bhttp BinaryHttpParser Infinite Loop DoS CVE Advisory https://securelayer7.net/lab/cve-2026-63135-yourls-stored-xss-referer-statistics-chart SecureLayer7 en 2026-08-21T21:14:56.252Z CVE-2026-63135: YOURLS Stored XSS via Crafted Referer Header in Statistics Chart CVE Advisory https://securelayer7.net/lab/cve-2026-63202-netty-bhttp-binaryhttpparser-infinite-loop-dos SecureLayer7 en 2026-08-20T18:49:59.829Z CVE-2026-63202: netty-incubator-codec-bhttp BinaryHttpParser Infinite Loop DoS CVE Advisory https://securelayer7.net/lab/cve-2026-63421-keystone-graphql-maxtake-negative-bypass SecureLayer7 en 2026-08-21T21:30:01.913Z CVE-2026-63421: @keystone-6/core graphql.maxTake Bypass via Negative take CVE Advisory https://securelayer7.net/lab/cve-2026-63462-unleash-server-dos-recursive-json-stringify SecureLayer7 en 2026-08-21T19:28:56.085Z CVE-2026-63462: unleash-server Unauthenticated DoS via Recursive JSON Serialization CVE Advisory https://securelayer7.net/lab/cve-2026-64679-atlantis-workspace-path-traversal SecureLayer7 en 2026-08-21T21:24:48.031Z CVE-2026-64679: Atlantis Workspace Path Traversal Allows Out-of-Bounds Directory Operations CVE Advisory https://securelayer7.net/lab/cve-2026-68508-hydra-core-instantiate-code-injection SecureLayer7 en 2026-08-21T21:11:32.435Z CVE-2026-68508: hydra-core Unsafe Instantiation Code Injection CVE Advisory https://securelayer7.net/lab/cve-2026-76904-geotools-postgis-jsonarraycontains-sql-injection SecureLayer7 en 2026-08-21T20:29:07.192Z CVE-2026-76904: GeoTools gt-jdbc-postgis Unauthenticated SQL Injection via jsonArrayContains CVE Advisory https://securelayer7.net/lab/cve-2026-76905-kin-openapi-multipart-nil-pointer-dos SecureLayer7 en 2026-08-21T21:23:42.998Z CVE-2026-76905: kin-openapi openapi3filter Nil-Pointer Panic via Malformed multipart/form-data CVE Advisory https://securelayer7.net/lab/cve-2026-77354-kin-openapi-deepobject-memory-exhaustion SecureLayer7 en 2026-08-21T21:17:17.937Z CVE-2026-77354: kin-openapi Uncontrolled Memory Allocation via deepObject Query Parameter CVE Advisory https://securelayer7.net/lab/cve-2026-77413-jsonata-arbitrary-code-execution-prototype-lookup SecureLayer7 en 2026-08-21T21:15:58.897Z CVE-2026-77413: jsonata Arbitrary Code Execution via Prototype Chain Escape CVE Advisory https://securelayer7.net/lab/cve-2026-77414-jsonata-code-injection-hasownproperty-bypass SecureLayer7 en 2026-08-21T21:10:16.473Z CVE-2026-77414: jsonata Arbitrary Code Execution via hasOwnProperty Bypass CVE Advisory https://securelayer7.net/lab/cve-2026-77415-jsonata-code-injection-rce SecureLayer7 en 2026-08-21T21:09:07.907Z CVE-2026-77415: jsonata Arbitrary Code Execution via Crafted Expression CVE Advisory https://securelayer7.net/lab/nocobase-arbitrary-file-write-lfi-rce SecureLayer7 en 2026-08-20T18:57:29.521Z NocoBase: Arbitrary File Write and Local File Inclusion leading to Remote Code Execution Security Research https://securelayer7.net/lab/winter-cms-twig-sandbox-escape-eloquent-call-forwarding-cve-2024-54149-bypass SecureLayer7 en 2026-08-20T18:48:52.120Z Winter CMS: Authenticated Twig Sandbox Escape via Eloquent __call Forwarding (Bypass of CVE-2024-54149) Security Research