For injection attacks (SQLi, SSTI, SSRF, XXE, command injection, PHP type juggling, PHP file inclusion), see server-side.md. For deserialization attacks (Java, Pickle) and race conditions, see ...

These are traditional unit tests written with pytest Failures on these tests will cause alarms if code is merged into main ...

Scanning activity targeting BeyondTrust Remote Support appliances raises concerns that exploitation of CVE-2026-102764 is expanding beyond targeted intrusions to opportunistic attacks.