Skip to main content
COSMICBYTEZLABS
NewsSecurityHOWTOsToolsTraining
StudyProjectsNewsletterHire MeAbout
Subscribe

Press Enter to search or Esc to close

News
Security
HOWTOs
Tools
Training
Study
Projects
Newsletter
Hire Me
About
RSS Feed
Reading List
Subscribe

Stay in the Loop

Get the latest security alerts, tutorials, and tech insights delivered to your inbox.

Subscribe NowFree forever. No spam.
COSMICBYTEZLABS

Your trusted source for IT intelligence, cybersecurity insights, and hands-on technical guides.

2368+ Articles
158+ Guides

CONTENT

  • Latest News
  • Security Alerts
  • HOWTOs
  • Checklists
  • Projects
  • Exam Prep

RESOURCES

  • Search
  • Browse Tags
  • Newsletter Archive
  • Reading List
  • RSS Feed

COMPANY

  • About Us
  • Contact
  • Privacy Policy
  • Terms of Service

© 2026 CosmicBytez Labs. All rights reserved.

System Status: Operational
All tags
8 articles

#Web Application Security

All CosmicBytez Labs articles tagged #Web Application Security, across news, security advisories, how-to guides, and projects.

  • SecurityJul 24, 2026

    CVE-2026-15981: WordPress SAML SSO Authentication Bypass (CVSS 9.8)

    A critical authentication bypass in the WordPress SAML Single Sign On plugin allows unauthenticated attackers to log in as any user, including...

  • SecurityJul 20, 2026

    CVE-2026-16227: SQL Injection in SourceCodester Class and Exam Timetabling System

    A remotely exploitable SQL injection vulnerability in SourceCodester Class and Exam Timetabling System 1.0 allows unauthenticated attackers to manipulate...

  • SecurityJul 20, 2026

    CVE-2026-16228: SQL Injection in SourceCodester Class and Exam Timetabling System via edit_schoolyr.php

    A second SQL injection flaw in SourceCodester Class and Exam Timetabling System 1.0 exposes the /edit_schoolyr.php endpoint to remote unauthenticated...

  • SecurityJun 30, 2026

    CVE-2026-13550: SQL Injection in itsourcecode Baptism Information Management System 1.0

    A high-severity SQL injection vulnerability has been identified in itsourcecode Baptism Information Management System 1.0, allowing remote attackers to...

  • SecurityJun 30, 2026

    CVE-2026-13551: SQL Injection in itsourcecode Baptism Information Management System 1.0 (editBaptism.php)

    A second high-severity SQL injection vulnerability has been disclosed in itsourcecode Baptism Information Management System 1.0, this time affecting the...

  • SecurityJun 17, 2026

    CVE-2026-48907: Joomla Content Editor Unauthenticated PHP Upload Flaw

    A maximum-severity improper access control flaw in Widget Factory's Joomla Content Editor allows unauthenticated attackers to upload and execute arbitrary...

  • NewsApr 5, 2026

    Hackers Exploit React2Shell in Automated Credential Theft

    Threat actors are running a large-scale, automated campaign exploiting React2Shell (CVE-2025-55182) in vulnerable Next.js applications to steal...

  • NewsMar 4, 2026

    LexisNexis Confirms Cloud Breach Exposing 400K User

    LexisNexis Legal & Professional confirms a data breach after threat actor FulcrumSec exploited an unpatched React2Shell vulnerability to exfiltrate 2.04...