https://blog.securelayer7.net/huggingface-ai-agent-intrusion-technical-anatomy/ SecureLayer7 en 2026-07-30T15:03:53.000Z Inside the HuggingFace AI Agent Intrusion (Part 2) Security News https://blog.securelayer7.net/runtime-application-self-protection-rasp/ SecureLayer7 en 2026-07-29T08:56:31.000Z Runtime Application Self-Protection (RASP) Explained Security News https://securelayer7.net/lab/cve-2025-4318-aws-amplify-codegen-ui-react-eval-injection-rce SecureLayer7 en 2026-07-30T21:08:48.783Z CVE-2025-4318: @aws-amplify/codegen-ui-react Eval Injection (RCE) CVE Advisory https://securelayer7.net/lab/cve-2026-11393-agentcore-cli-triple-quote-code-injection SecureLayer7 en 2026-07-29T16:29:35.546Z CVE-2026-11393: @aws/agentcore Code Injection via Triple-Quote Escape Bypass CVE Advisory https://securelayer7.net/lab/cve-2026-49755-req-decompression-bomb-decode-body SecureLayer7 en 2026-07-29T15:29:06.721Z CVE-2026-49755: Req Decompression Bomb via Auto-Decoded Response Bodies CVE Advisory https://securelayer7.net/lab/cve-2026-50559-quarkus-vertx-http-auth-bypass-encoded-path SecureLayer7 en 2026-07-29T15:48:59.079Z CVE-2026-50559: quarkus-vertx-http Authentication Bypass via Encoded Path Characters CVE Advisory https://securelayer7.net/lab/cve-2026-54078-verapdf-validation-model-xxe-rich-text SecureLayer7 en 2026-07-29T15:30:23.075Z CVE-2026-54078: veraPDF validation-model XXE via Rich Text CVE Advisory https://securelayer7.net/lab/cve-2026-54079-verapdf-validation-model-xxe-xfa-stream SecureLayer7 en 2026-07-29T15:31:48.078Z CVE-2026-54079: veraPDF validation-model XML External Entity Injection via XFA Stream CVE Advisory https://securelayer7.net/lab/cve-2026-54574-proot-distro-symlink-escape-tar-arbitrary-write SecureLayer7 en 2026-07-29T16:50:04.239Z CVE-2026-54574: proot-distro Symlink Escape via Malicious Tar Archive CVE Advisory https://securelayer7.net/lab/cve-2026-54660-swagger-typescript-api-auth-token-exfiltration-cross-origin-ref SecureLayer7 en 2026-07-29T14:30:18.123Z CVE-2026-54660: swagger-typescript-api Authorization Token Exfiltration via Cross-Origin $ref CVE Advisory https://securelayer7.net/lab/cve-2026-54661-swagger-typescript-api-axios-servers-url-code-injection SecureLayer7 en 2026-07-29T14:50:56.912Z CVE-2026-54661: swagger-typescript-api Axios HTTP Client Code Injection via servers[0].url CVE Advisory https://securelayer7.net/lab/cve-2026-54662-swagger-typescript-api-fetch-baseurl-code-injection SecureLayer7 en 2026-07-29T14:28:53.121Z CVE-2026-54662: swagger-typescript-api Code Injection via Unescaped servers[0].url in Fetch Client Template CVE Advisory https://securelayer7.net/lab/cve-2026-54664-swagger-typescript-api-enum-code-injection SecureLayer7 en 2026-07-29T14:49:45.154Z CVE-2026-54664: swagger-typescript-api Code Injection via Unescaped Enum Values CVE Advisory https://securelayer7.net/lab/cve-2026-54680-kube-logging-operator-fluentd-config-injection-rce SecureLayer7 en 2026-07-29T17:10:14.173Z CVE-2026-54680: kube-logging/logging-operator Fluentd Configuration Injection RCE CVE Advisory https://securelayer7.net/lab/cve-2026-54722-dssrf-ssrf-userinfo-bypass SecureLayer7 en 2026-07-30T16:28:51.243Z CVE-2026-54722: dssrf SSRF Bypass via Userinfo Stripping CVE Advisory https://securelayer7.net/lab/cve-2026-54727-proot-distro-hardlink-cross-container-isolation-bypass SecureLayer7 en 2026-07-29T16:48:49.110Z CVE-2026-54727: proot-distro Container Isolation Bypass via Crafted Restore Archive CVE Advisory https://securelayer7.net/lab/cve-2026-54735-prebid-server-bidder-adapter-ssrf SecureLayer7 en 2026-07-29T16:08:56.283Z CVE-2026-54735: prebid-server Bidder Adapter Server-Side Request Forgery CVE Advisory https://securelayer7.net/lab/cve-2026-66066-activestorage-libvips-unfuzzed-arbitrary-file-read SecureLayer7 en 2026-07-30T18:29:11.090Z CVE-2026-66066: Active Storage Arbitrary File Read via libvips Unfuzzed Loaders CVE Advisory https://securelayer7.net/lab/cve-2026-67424-flyto-core-ssrf-redirect-bypass SecureLayer7 en 2026-07-30T15:08:45.660Z CVE-2026-67424: flyto-core SSRF via Unvalidated HTTP Redirect CVE Advisory https://securelayer7.net/lab/cve-2026-67425-flyto-core-llm-api-key-exfiltration-base-url SecureLayer7 en 2026-07-30T15:14:58.158Z CVE-2026-67425: flyto-core LLM API Key Exfiltration via Caller-Controlled base_url CVE Advisory https://securelayer7.net/lab/cve-2026-67426-flyto-core-unauthenticated-ssrf-runner-secret SecureLayer7 en 2026-07-30T15:11:27.665Z CVE-2026-67426: flyto-core Unauthenticated SSRF and Runner Secret Exfiltration CVE Advisory https://securelayer7.net/lab/cve-2026-67428-flyto-core-ssrf-unguarded-http-modules SecureLayer7 en 2026-07-30T15:09:57.996Z CVE-2026-67428: flyto-core Missing SSRF Guard on HTTP Modules CVE Advisory https://securelayer7.net/lab/cve-2026-67429-flyto-core-arbitrary-file-write-image-download SecureLayer7 en 2026-07-30T14:49:47.052Z CVE-2026-67429: flyto-core Arbitrary File Write via image.download CVE Advisory https://securelayer7.net/lab/cve-2026-67432-mcp-ruby-sdk-unbounded-body-dos SecureLayer7 en 2026-07-30T14:51:48.356Z CVE-2026-67432: mcp (Ruby SDK) Unbounded Request Body Memory Exhaustion CVE Advisory https://securelayer7.net/lab/netfoil-block-response-0000-localhost-traffic SecureLayer7 en 2026-07-29T17:08:53.037Z netfoil: Incorrect Block Response Sends Traffic to Localhost Security Research