https://blog.securelayer7.net/penetration-testing-report/ SecureLayer7 en 2026-07-31T16:55:57.000Z Penetration Testing Report: Key Sections And How to Use Security News https://blog.securelayer7.net/penetration-testing-execution-standard/ SecureLayer7 en 2026-07-31T11:13:18.000Z Penetration Testing Execution Standard (PTES): A Complete Guide Security News https://blog.securelayer7.net/huggingface-ai-agent-intrusion-technical-anatomy/ SecureLayer7 en 2026-07-30T15:03:53.000Z Inside the HuggingFace AI Agent Intrusion (Part 2) Security News https://securelayer7.net/lab/cve-2025-4318-aws-amplify-codegen-ui-react-eval-injection-rce SecureLayer7 en 2026-07-30T21:08:48.783Z CVE-2025-4318: @aws-amplify/codegen-ui-react Eval Injection (RCE) CVE Advisory https://securelayer7.net/lab/cve-2026-12061-nltk-reviews-corpus-reader-redos-features-regex SecureLayer7 en 2026-07-31T17:16:55.415Z CVE-2026-12061: NLTK ReviewsCorpusReader Quadratic ReDoS CVE Advisory https://securelayer7.net/lab/cve-2026-12072-nltk-nkjpcorpusreader-path-traversal-arbitrary-file-read SecureLayer7 en 2026-07-31T17:18:13.909Z CVE-2026-12072: NLTK NKJPCorpusReader Path Traversal Arbitrary File Read CVE Advisory https://securelayer7.net/lab/cve-2026-12075-nltk-dns-rebinding-ssrf-bypass SecureLayer7 en 2026-07-31T17:15:45.623Z CVE-2026-12075: nltk DNS-Rebinding SSRF Filter Bypass CVE Advisory https://securelayer7.net/lab/cve-2026-41695-spring-data-commons-property-path-cache-dos SecureLayer7 en 2026-07-31T16:48:44.938Z CVE-2026-41695: Spring Data Commons Unbounded Property-Path Cache DoS CVE Advisory https://securelayer7.net/lab/cve-2026-53500-thumbor-allowed-sources-ssrf-bypass SecureLayer7 en 2026-07-31T18:48:45.898Z CVE-2026-53500: thumbor ALLOWED_SOURCES Regex Wildcard SSRF Bypass CVE Advisory https://securelayer7.net/lab/cve-2026-53501-thumbor-hmac-signature-bypass-replace SecureLayer7 en 2026-07-31T19:30:06.179Z CVE-2026-53501: thumbor HMAC Signature Validation Bypass via Repeated URL Segments CVE Advisory https://securelayer7.net/lab/cve-2026-53502-thumbor-file-loader-path-traversal-unquote-bypass SecureLayer7 en 2026-07-31T19:08:37.984Z CVE-2026-53502: thumbor Path Traversal via Post-Validation URL Decode in file_loader CVE Advisory https://securelayer7.net/lab/cve-2026-53503-thumbor-convolution-divide-by-zero-dos SecureLayer7 en 2026-07-31T19:12:10.260Z CVE-2026-53503: thumbor convolution filter remote divide-by-zero DoS CVE Advisory https://securelayer7.net/lab/cve-2026-53504-thumbor-redos-convolution-filter SecureLayer7 en 2026-07-31T19:11:02.892Z CVE-2026-53504: thumbor ReDoS in convolution Filter CVE Advisory https://securelayer7.net/lab/cve-2026-53505-thumbor-proportion-filter-dos SecureLayer7 en 2026-07-31T19:09:48.256Z CVE-2026-53505: thumbor proportion filter Remote Denial of Service CVE Advisory https://securelayer7.net/lab/cve-2026-54722-dssrf-ssrf-userinfo-bypass SecureLayer7 en 2026-07-30T16:28:51.243Z CVE-2026-54722: dssrf SSRF Bypass via Userinfo Stripping CVE Advisory https://securelayer7.net/lab/cve-2026-54725-vault-secrets-webhook-annotation-ssrf-sa-token-theft SecureLayer7 en 2026-07-31T17:48:54.314Z CVE-2026-54725: vault-secrets-webhook Annotation SSRF and ServiceAccount Token Theft CVE Advisory https://securelayer7.net/lab/cve-2026-54729-dssrf-ssrf-dns-nxdomain-bypass SecureLayer7 en 2026-07-31T17:10:06.172Z CVE-2026-54729: dssrf SSRF Bypass via DNS NXDOMAIN on 1.1.1.1 CVE Advisory https://securelayer7.net/lab/cve-2026-54737-phun-ky-defaults-deep-prototype-pollution SecureLayer7 en 2026-07-31T18:08:40.162Z CVE-2026-54737: @phun-ky/defaults-deep Prototype Pollution via Unsafe Recursive Merge CVE Advisory https://securelayer7.net/lab/cve-2026-55100-hashi-vault-js-path-traversal-query-injection SecureLayer7 en 2026-07-31T17:08:45.015Z CVE-2026-55100: hashi-vault-js Path Traversal and Query Parameter Injection CVE Advisory https://securelayer7.net/lab/cve-2026-56819-netty-http2-decompression-bytebuf-refcount-leak-oom-dos SecureLayer7 en 2026-07-31T17:12:02.386Z CVE-2026-56819: netty-codec-http2 HTTP/2 Decompression ByteBuf Reference-Count Leak (OOM DoS) CVE Advisory https://securelayer7.net/lab/cve-2026-58263-jodit-mathml-mutation-xss-clean-html-bypass SecureLayer7 en 2026-07-31T19:28:59.566Z CVE-2026-58263: Jodit Editor Mutation XSS via MathML/style Rawtext Carrier CVE Advisory https://securelayer7.net/lab/cve-2026-66066-activestorage-libvips-unfuzzed-arbitrary-file-read SecureLayer7 en 2026-07-30T18:29:11.090Z CVE-2026-66066: Active Storage Arbitrary File Read via libvips Unfuzzed Loaders CVE Advisory https://securelayer7.net/lab/cve-2026-67424-flyto-core-ssrf-redirect-bypass SecureLayer7 en 2026-07-30T15:08:45.660Z CVE-2026-67424: flyto-core SSRF via Unvalidated HTTP Redirect CVE Advisory https://securelayer7.net/lab/cve-2026-67425-flyto-core-llm-api-key-exfiltration-base-url SecureLayer7 en 2026-07-30T15:14:58.158Z CVE-2026-67425: flyto-core LLM API Key Exfiltration via Caller-Controlled base_url CVE Advisory https://securelayer7.net/lab/cve-2026-67426-flyto-core-unauthenticated-ssrf-runner-secret SecureLayer7 en 2026-07-30T15:11:27.665Z CVE-2026-67426: flyto-core Unauthenticated SSRF and Runner Secret Exfiltration CVE Advisory https://securelayer7.net/lab/cve-2026-67428-flyto-core-ssrf-unguarded-http-modules SecureLayer7 en 2026-07-30T15:09:57.996Z CVE-2026-67428: flyto-core Missing SSRF Guard on HTTP Modules CVE Advisory https://securelayer7.net/lab/cve-2026-67429-flyto-core-arbitrary-file-write-image-download SecureLayer7 en 2026-07-30T14:49:47.052Z CVE-2026-67429: flyto-core Arbitrary File Write via image.download CVE Advisory https://securelayer7.net/lab/cve-2026-67432-mcp-ruby-sdk-unbounded-body-dos SecureLayer7 en 2026-07-30T14:51:48.356Z CVE-2026-67432: mcp (Ruby SDK) Unbounded Request Body Memory Exhaustion CVE Advisory https://securelayer7.net/lab/dynatrace-mcp-server-unauthenticated-http-mcp-tool-invocation SecureLayer7 en 2026-07-31T16:08:41.298Z dynatrace-mcp-server Unauthenticated HTTP MCP Tool Invocation Security Research