https://blog.securelayer7.net/openai-hugging-face-exploitgym-incident-analysis/ SecureLayer7 en 2026-07-28T15:35:52.000Z How OpenAI’s AI Agent Broke Into Hugging Face Security News https://blog.securelayer7.net/ai-assisted-penetration-testing/ SecureLayer7 en 2026-07-28T07:04:32.000Z AI-Assisted Penetration Testing: Guide & Tools Security News https://securelayer7.net/lab/cve-2026-43910-appium-java-client-directconnect-ssrf-network-pivot SecureLayer7 en 2026-07-28T14:28:48.099Z CVE-2026-43910: appium/java-client SSRF via Unvalidated directConnect Redirect CVE Advisory https://securelayer7.net/lab/cve-2026-43983-pocket-id-oidc-refresh-token-authorization-bypass SecureLayer7 en 2026-07-28T14:30:12.261Z CVE-2026-43983: Pocket ID OIDC Refresh Token Authorization Bypass CVE Advisory https://securelayer7.net/lab/cve-2026-45293-wpcs-eval-injection-enqueued-resource-parameters SecureLayer7 en 2026-07-28T14:56:07.367Z CVE-2026-45293: WordPress Coding Standards (WPCS) Eval Injection via EnqueuedResourceParameters Sniff CVE Advisory https://securelayer7.net/lab/cve-2026-46428-lettre-boring-tls-hostname-verification-disabled SecureLayer7 en 2026-07-28T14:51:31.443Z CVE-2026-46428: lettre Inverted Boolean Disables TLS Hostname Verification (boring-tls) CVE Advisory https://securelayer7.net/lab/cve-2026-47427-github-mcp-server-nil-pointer-dereference-dos SecureLayer7 en 2026-07-28T14:50:08.053Z CVE-2026-47427: github-mcp-server Nil Pointer Dereference DoS in completion/complete Handler CVE Advisory https://securelayer7.net/lab/cve-2026-50570-fission-capability-denylist-bypass-sys-time SecureLayer7 en 2026-07-28T20:29:29.632Z CVE-2026-50570: Fission Incomplete Capability Denylist Allows CAP_SYS_TIME Privilege Escalation CVE Advisory https://securelayer7.net/lab/cve-2026-54545-wakaru-cli-path-traversal-arbitrary-file-write SecureLayer7 en 2026-07-28T14:48:54.542Z CVE-2026-54545: @wakaru/cli Arbitrary File Write via Path Traversal in --unpack CVE Advisory https://securelayer7.net/lab/cve-2026-54588-poweradmin-host-header-injection-oidc-redirect-uri SecureLayer7 en 2026-07-28T16:48:45.893Z CVE-2026-54588: Poweradmin Host Header Injection in OIDC / SAML / Logout Redirect CVE Advisory https://securelayer7.net/lab/cve-2026-54593-pterodactyl-panel-jwt-scope-bypass-file-upload SecureLayer7 en 2026-07-28T15:48:46.096Z CVE-2026-54593: Pterodactyl Panel Improper JWT Scope Allows Unauthorized File Upload CVE Advisory https://securelayer7.net/lab/cve-2026-54603-oauth2-protocol-relative-redirect-bearer-token-leak SecureLayer7 en 2026-07-28T16:51:05.868Z CVE-2026-54603: oauth2 Protocol-Relative Redirect Bearer Token Leak CVE Advisory https://securelayer7.net/lab/cve-2026-54605-ruby-oauth-cross-origin-token-redirect-ssrf SecureLayer7 en 2026-07-28T16:28:59.760Z CVE-2026-54605: oauth gem Cross-Origin Token Redirect SSRF and Signed-Request Disclosure CVE Advisory https://securelayer7.net/lab/cve-2026-54609-qtineon-neonrelay-reconnect-amplification-dos SecureLayer7 en 2026-07-28T16:49:53.869Z CVE-2026-54609: QTINeon NeonRelay Unauthenticated Amplification via Unbounded RECONNECT_REQUEST Forwarding CVE Advisory https://securelayer7.net/lab/cve-2026-54632-sipsorcery-rtp-ice-udp-dos SecureLayer7 en 2026-07-28T17:08:57.683Z CVE-2026-54632: SIPSorcery Remote DoS via Malformed UDP Packet on RTP/ICE Socket CVE Advisory https://securelayer7.net/lab/cve-2026-54635-pytonapi-webhook-auth-bypass SecureLayer7 en 2026-07-28T17:28:44.203Z CVE-2026-54635: pytonapi Webhook Custom Path Authentication Bypass CVE Advisory https://securelayer7.net/lab/cve-2026-55771-cedarjava-entityidentifier-equals-inverted-logic SecureLayer7 en 2026-07-28T14:54:38.130Z CVE-2026-55771: CedarJava EntityIdentifier Incorrect Equality Comparison CVE Advisory https://securelayer7.net/lab/cve-2026-61609-pterodactyl-panel-global-auth-ratelimit-dos SecureLayer7 en 2026-07-28T15:08:50.730Z CVE-2026-61609: Pterodactyl Panel Global Authentication Rate-Limit DoS CVE Advisory