https://securelayer7.net/lab/anephenix-hub-websocket-rpc-resource-exhaustion SecureLayer7 en 2026-07-24T22:09:42.905Z @anephenix/hub WebSocket RPC Waiter Resource Exhaustion Security Research https://securelayer7.net/lab/blaze-server-chunked-trailer-header-injection SecureLayer7 en 2026-07-24T22:28:38.450Z blaze-server HTTP/1.1 Chunked Trailer Header Injection Security Research https://securelayer7.net/lab/budibase-app-scoped-builder-privilege-escalation-roles-assign SecureLayer7 en 2026-07-24T22:30:45.779Z Budibase: App-Scoped Builder Privilege Escalation via Public Role Assignment API Security Research https://securelayer7.net/lab/budibase-dns-rebinding-ssrf-openapi-rest-query SecureLayer7 en 2026-07-24T22:18:05.055Z Budibase: DNS Rebinding SSRF Bypass in OpenAPI Import and REST Query Execution Security Research https://securelayer7.net/lab/budibase-email-change-idor-account-takeover-accountid-not-validated SecureLayer7 en 2026-07-24T22:24:03.637Z Budibase Email Change IDOR Allows Full Account Takeover via POST /api/v2/email Security Research https://securelayer7.net/lab/budibase-mongodb-nosql-operator-injection-filter-bypass SecureLayer7 en 2026-07-24T22:23:01.235Z Budibase MongoDB Integration NoSQL Operator Injection Security Research https://securelayer7.net/lab/budibase-mongodb-tls-path-filesystem-read-oracle SecureLayer7 en 2026-07-24T21:43:55.695Z Budibase MongoDB Datasource Filesystem Read Oracle via Unvalidated TLS Certificate Paths Security Research https://securelayer7.net/lab/budibase-mysql-describe-backtick-sql-injection-multiplestatements SecureLayer7 en 2026-07-24T21:28:39.821Z Budibase MySQL DESCRIBE Backtick Injection via multipleStatements Security Research https://securelayer7.net/lab/budibase-mysql-multiplestatements-sql-injection SecureLayer7 en 2026-07-24T21:44:56.632Z Budibase MySQL Integration SQL Injection via multipleStatements Security Research https://securelayer7.net/lab/budibase-oidc-sso-account-takeover-email-verified-bypass SecureLayer7 en 2026-07-24T21:36:07.547Z Budibase OIDC SSO Account Takeover via Unverified Email Claim Security Research https://securelayer7.net/lab/budibase-rest-datasource-ssrf-dns-rebinding-undici-dispatcher SecureLayer7 en 2026-07-24T22:21:52.854Z Budibase REST Datasource SSRF via DNS Rebinding (undici dispatcher bypasses IP pin) Security Research https://securelayer7.net/lab/budibase-rest-datasource-unauthenticated-credential-theft-cross-origin-query-pat SecureLayer7 en 2026-07-24T21:34:53.181Z Budibase REST Datasource Unauthenticated Credential Theft via Cross-Origin Query Path Security Research https://securelayer7.net/lab/budibase-s3-presigned-url-authorization-regression-basic-user-escalation SecureLayer7 en 2026-07-24T21:42:38.984Z Budibase S3 Presigned URL Authorization Regression (BASIC User Escalation) Security Research https://securelayer7.net/lab/budibase-server-nosql-injection-mongodb-query-parameter-interpolation SecureLayer7 en 2026-07-24T21:29:51.404Z @budibase/server NoSQL Injection via MongoDB Query Parameter Interpolation Security Research https://securelayer7.net/lab/budibase-unauthenticated-tenant-user-info-disclosure SecureLayer7 en 2026-07-24T21:30:56.964Z Budibase Unauthenticated Tenant User Information Disclosure Security Research https://securelayer7.net/lab/cve-2026-14257-brace-expansion-unbounded-expansion-oom-dos SecureLayer7 en 2026-07-24T21:54:46.720Z CVE-2026-14257: brace-expansion Unbounded Expansion Length DoS (OOM Crash) CVE Advisory https://securelayer7.net/lab/cve-2026-16584-aws-api-mcp-server-policy-bypass-init-failure SecureLayer7 en 2026-07-24T23:12:09.454Z CVE-2026-16584: AWS API MCP Server Security Policy Bypass via Startup Initialization Failure CVE Advisory https://securelayer7.net/lab/cve-2026-16756-aws-smithy-http-server-slowloris-dos SecureLayer7 en 2026-07-24T22:52:16.432Z CVE-2026-16756: aws-smithy-http-server Slowloris Denial of Service CVE Advisory https://securelayer7.net/lab/cve-2026-16796-bedrock-agentcore-install-packages-argument-injection SecureLayer7 en 2026-07-24T22:50:03.750Z CVE-2026-16796: bedrock-agentcore Argument Injection in install_packages() CVE Advisory https://securelayer7.net/lab/cve-2026-33413-etcd-watch-withfromkey-rbac-bypass SecureLayer7 en 2026-07-24T23:21:57.727Z CVE-2026-33413: etcd Watch API RBAC Authorization Bypass via Open-Ended Range Security Research https://securelayer7.net/lab/cve-2026-44907-react-server-dom-webpack-dos-server-functions SecureLayer7 en 2026-07-24T22:31:55.794Z CVE-2026-44907: react-server-dom-webpack Denial of Service in Server Functions CVE Advisory https://securelayer7.net/lab/cve-2026-50132-budibase-chat-link-handoff-csrf-identity-confusion SecureLayer7 en 2026-07-24T22:16:44.402Z CVE-2026-50132: Budibase Chat-Link Handoff Identity Confusion CSRF Security Research https://securelayer7.net/lab/cve-2026-55404-yt-dlp-write-link-shortcut-injection-rce SecureLayer7 en 2026-07-24T20:48:51.059Z CVE-2026-55404: yt-dlp Shortcut File Injection Leading to Remote Code Execution CVE Advisory https://securelayer7.net/lab/cve-2026-55502-cloudreve-onedrive-oauth-scope-bypass SecureLayer7 en 2026-07-24T21:10:55.211Z CVE-2026-55502: Cloudreve Admin.Read OAuth Token Can Overwrite OneDrive Storage Policy Credentials CVE Advisory https://securelayer7.net/lab/cve-2026-59224-open-webui-terminal-proxy-user-id-spoofing SecureLayer7 en 2026-07-24T21:09:51.372Z CVE-2026-59224: open-webui Terminal Proxy Authentication Bypass via session_id Query Injection CVE Advisory https://securelayer7.net/lab/cve-2026-62263-openam-webauthn-objectinputfilter-depth-bypass-rce SecureLayer7 en 2026-07-24T23:24:32.600Z CVE-2026-62263: OpenAM WebAuthn ObjectInputFilter depth>1 Deserialization RCE CVE Advisory https://securelayer7.net/lab/cve-2026-62379-openam-authxmlutils-unsafe-reflection-rce SecureLayer7 en 2026-07-24T23:17:52.339Z CVE-2026-62379: OpenAM Unauthenticated Remote Code Execution via Unsafe Reflection in AuthXMLUtils CVE Advisory https://securelayer7.net/lab/etcd-tls-listener-unbounded-handshake-goroutine-dos SecureLayer7 en 2026-07-24T22:48:52.955Z etcd tlsListener Unbounded TLS Handshake Goroutine DoS Security Research https://securelayer7.net/lab/frp-ssh-tunnel-gateway-integer-overflow-dos SecureLayer7 en 2026-07-24T21:57:43.444Z frp SSH Tunnel Gateway Unauthenticated Remote Denial of Service via Integer Overflow Security Research https://securelayer7.net/lab/gitpython-create-remote-env-var-exfiltration-incomplete-fix SecureLayer7 en 2026-07-24T22:10:51.082Z GitPython Environment-Variable Exfiltration via Repo.create_remote() URL Security Research https://securelayer7.net/lab/http4s-blaze-server-http1-request-smuggling-parser-laxities SecureLayer7 en 2026-07-24T22:29:28.398Z http4s-blaze-server HTTP/1.1 Request Smuggling (Multiple Parser Laxities) Security Research https://securelayer7.net/lab/http4s-blaze-server-websocket-unbounded-aggregation-dos SecureLayer7 en 2026-07-24T23:16:36.022Z http4s-blaze-server Unbounded WebSocket Message Aggregation DoS Security Research https://securelayer7.net/lab/oh-my-posh-template-injection-path-rce SecureLayer7 en 2026-07-24T23:09:34.401Z Oh My Posh: Arbitrary Command Execution via Template Injection in Path Segment Security Research https://securelayer7.net/lab/omnifaces-forged-resource-id-xss-push-replay SecureLayer7 en 2026-07-24T23:10:54.777Z OmniFaces: Forged Resource IDs, XSS via o:hashParam, and Push-Channel Replay Security Research https://securelayer7.net/lab/opendj-dsml-anyuri-ssrf-file-read-dos SecureLayer7 en 2026-07-24T21:50:38.708Z OpenDJ DSMLv2 Gateway Unauthenticated SSRF and Local File Read Security Research https://securelayer7.net/lab/opendj-sasl-plain-authzid-proxy-aci-bypass SecureLayer7 en 2026-07-24T21:49:15.065Z OpenDJ SASL PLAIN authzid Proxy ACI Authorization Bypass Security Research https://securelayer7.net/lab/openlist-batch-rename-src-name-path-traversal SecureLayer7 en 2026-07-24T23:23:02.663Z OpenList Authenticated Path Traversal in Batch Rename src_name Security Research https://securelayer7.net/lab/pheditor-authentication-bypass-forced-password-change SecureLayer7 en 2026-07-24T22:05:05.570Z Pheditor: Authentication Bypass in Forced Password-Change Flow Security Research https://securelayer7.net/lab/pheditor-terminal-allowlist-bypass-argument-injection-rce SecureLayer7 en 2026-07-24T21:51:46.049Z Pheditor Terminal Command-Allowlist Bypass via Argument Injection (RCE) Security Research https://securelayer7.net/lab/poweradmin-api-broken-access-control-password-reset-privilege-escalation SecureLayer7 en 2026-07-24T22:04:02.811Z Poweradmin: API Broken Access Control Allows Non-Admin to Reset Any User's Password Security Research https://securelayer7.net/lab/poweradmin-idor-broken-access-control-dns-record-edit SecureLayer7 en 2026-07-24T22:02:53.716Z Poweradmin: IDOR Broken Access Control in DNS Record Edit Security Research https://securelayer7.net/lab/poweradmin-oidc-sub-collation-bypass-account-takeover SecureLayer7 en 2026-07-24T22:01:47.188Z Poweradmin OIDC sub Collation Bypass Account Takeover Security Research https://securelayer7.net/lab/py-libp2p-yamux-oversized-data-frame-dos SecureLayer7 en 2026-07-24T22:55:23.169Z py-libp2p yamux connection DoS via oversized DATA frame Security Research https://securelayer7.net/lab/shescape-quadratic-dos-flag-protection-redos SecureLayer7 en 2026-07-24T22:58:13.970Z Shescape: Quadratic-Time Denial of Service in Flag Protection Security Research https://securelayer7.net/lab/shescape-shell-injection-windows-cmd-parentheses SecureLayer7 en 2026-07-24T23:04:38.011Z shescape: Shell Injection via Unescaped Parentheses on Windows CMD Security Research https://securelayer7.net/lab/sm-crypto-predictable-sm2-key-generation-weak-prng-nodejs SecureLayer7 en 2026-07-24T21:55:56.303Z sm-crypto: Predictable SM2 Key Generation via Weak PRNG in Node.js Security Research https://securelayer7.net/lab/vantage6-algorithm-store-incorrect-authorization-edit-endpoint SecureLayer7 en 2026-07-24T22:08:35.239Z vantage6 Algorithm Store: Incorrect Authorization on Algorithm Edit Endpoint Security Research