https://pragma-core.com weekly 1.0 2026-09-16 https://pragma-core.com/login monthly 0.5 https://pragma-core.com/register monthly 0.7 https://pragma-core.com/features/sast-scanning monthly 0.8 https://pragma-core.com/features/sca-dependency-tracker monthly 0.8 https://pragma-core.com/features/sbom monthly 0.8 https://pragma-core.com/features/code-map monthly 0.8 https://pragma-core.com/features/ai-security-research monthly 0.8 https://pragma-core.com/features/dast-dynamic-application-security-testing monthly 0.9 https://pragma-core.com/features/infrastructure-penetration-testing monthly 0.9 https://pragma-core.com/features/adversary-emulation weekly 0.9 2026-09-16 https://pragma-core.com/features/code-quality-checks monthly 0.8 https://pragma-core.com/features/external-penetration-testing monthly 0.9 https://pragma-core.com/features/cicd-pipeline-security monthly 0.8 https://pragma-core.com/features/container-image-scanning monthly 0.8 https://pragma-core.com/blog weekly 0.8 2026-09-16 https://pragma-core.com/blog/cve-2026-85978-how-one-path-normalization-mismatch-turned-akanas-admin-console-into-unauthenticated-remote-code-execution monthly 0.7 2026-09-16 https://pragma-core.com/blog/cve-2026-78174-how-an-unredacted-session-token-in-a-diagnostic-log-turned-a-low-privileged-watchguard-dimension-admin-into-super-admin monthly 0.7 2026-09-16 https://pragma-core.com/blog/qwen-38-27b-and-the-year-the-open-weights-caught-up-how-a-17gb-download-started-beating-the-frontier monthly 0.7 2026-09-16 https://pragma-core.com/blog/cve-2026-65321-how-one-backslash-in-pyathenas-quote-escaper-turned-parameterized-delete-queries-into-sql-injection monthly 0.7 2026-09-16 https://pragma-core.com/blog/cve-2026-63223-how-a-gif-header-on-a-php-file-turned-codeigniters-image-upload-check-into-remote-code-execution monthly 0.7 2026-09-16 https://pragma-core.com/blog/cve-2026-58155-how-silently-truncating-a-long-header-name-turned-apache-traffic-server-into-a-request-smuggling-engine monthly 0.7 2026-09-16 https://pragma-core.com/blog/pragma-binary-static-analysis-live-sandbox-and-threat-intelligence-in-one-place monthly 0.7 2026-09-16 https://pragma-core.com/blog/cve-2026-60137-cve-2026-63030-how-a-one-position-array-desync-in-wordpresss-batch-api-turned-a-login-only-sql-injection-into-unauthenticated-rce monthly 0.7 2026-09-16 https://pragma-core.com/blog/cve-2026-58644-how-one-unsafe-deserialize-turns-an-on-prem-sharepoint-server-into-unauthenticated-remote-code-execution monthly 0.7 2026-09-16 https://pragma-core.com/blog/asyncapi-and-miasma-v3-how-one-unmerged-workflow-fix-let-a-pull-request-publish-malware-to-29-million-weekly-downloads monthly 0.7 2026-09-16 https://pragma-core.com/blog/introducing-cicd-pipeline-security-the-part-of-your-attack-surface-that-ships-to-production-every-day monthly 0.7 2026-09-16 https://pragma-core.com/blog/ionstack-cve-2026-10702-cve-2026-43499-how-a-jit-miscompilation-and-a-15-year-old-kernel-flaw-turned-one-url-click-into-full-android-17-root monthly 0.7 2026-09-16 https://pragma-core.com/blog/cve-2026-43499-how-a-15-year-old-cleanup-shortcut-in-the-linux-kernels-futex-code-became-a-one-user-path-to-root-and-a-container-escape monthly 0.7 2026-09-16 https://pragma-core.com/blog/pragma-core-for-dynamic-appsec-teams monthly 0.7 2026-09-16 https://pragma-core.com/blog/your-perimeter-tested-every-week-external-penetration-testing-is-live-in-pragma-core monthly 0.7 2026-09-15 https://pragma-core.com/blog/cve-2025-29927-how-one-internal-header-let-attackers-walk-straight-past-nextjs-middleware-auth monthly 0.7 2026-09-16 https://pragma-core.com/blog/owasp-global-appsec-eu-2026-thoughts-and-conclusions-from-the-floor monthly 0.7 2026-09-16 https://pragma-core.com/blog/when-the-attacker-has-an-ai-too-appsec-scanning-in-an-era-where-exploits-arrive-before-patches monthly 0.7 2026-09-16 https://pragma-core.com/blog/classic-sast-vs-ai-powered-sast-why-pattern-matching-stops-at-the-function-boundary-and-reasoning-takes-over monthly 0.7 2026-09-16 https://pragma-core.com/blog/continuous-attack-emulation-turning-the-mitre-attck-matrix-into-a-live-test-your-defenses-never-stop-taking-pragma-core-feature-preview monthly 0.7 2026-09-15 https://pragma-core.com/blog/npm-v12-how-switching-off-one-install-time-default-cuts-the-legs-out-from-under-almost-every-recent-npm-worm monthly 0.7 2026-09-14 https://pragma-core.com/blog/cve-2026-20253-how-a-localhost-only-database-helper-turned-every-aws-splunk-box-into-a-pre-auth-rce monthly 0.7 2026-09-15 https://pragma-core.com/blog/miasma-how-a-157-byte-bindinggyp-file-turned-npm-install-into-a-self-spreading-credential-worm monthly 0.7 2026-09-14 https://pragma-core.com/blog/when-the-attacker-is-an-agent-securing-infrastructure-with-ai-powered-red-teaming monthly 0.7 2026-09-13 https://pragma-core.com/blog/cve-2026-20245-how-a-tenant-list-csv-upload-turned-cisco-sd-wan-manager-into-a-root-shell monthly 0.7 2026-09-16 https://pragma-core.com/blog/megalodon-how-teampcp-turned-5561-github-pipelines-into-a-credential-harvest-factory-in-six-hours monthly 0.7 2026-09-15 https://pragma-core.com/blog/cve-2026-45659-how-an-ordinary-site-member-turns-on-prem-sharepoint-into-a-remote-code-execution-box monthly 0.7 2026-09-16 https://pragma-core.com/blog/cve-2026-48095-how-a-1-byte-heap-buffer-turned-7-zips-ntfs-parser-into-an-extension-agnostic-code-execution-primitive monthly 0.7 2026-09-16 https://pragma-core.com/blog/continuous-pentest-what-rolling-means-and-why-it-matters-most-on-the-internal-network monthly 0.7 2026-09-16 https://pragma-core.com/blog/continuous-web-dast-what-it-does-where-it-fits-and-what-an-annual-pentest-cannot monthly 0.7 2026-09-16 https://pragma-core.com/blog/continuous-adversary-emulation-random-cadence-unannounced-runs-and-real-blue-team-reactions monthly 0.7 2026-09-15 https://pragma-core.com/blog/cve-2026-43640-how-one-short-circuit-turned-a-stolen-bitwarden-session-into-a-persistent-scim-key monthly 0.7 2026-09-16 https://pragma-core.com/blog/cve-2026-6973-ivanti-epmm-rce-actively-exploited-in-the-wild-and-already-in-cisa-kev monthly 0.7 2026-09-15 https://pragma-core.com/blog/cve-2026-42945-how-an-18-year-old-flaw-in-nginxs-rewrite-module-turned-the-worlds-most-popular-web-server-into-a-one-shot-rce-target monthly 0.7 2026-09-16 https://pragma-core.com/blog/breakdown-of-cve-2026-45321 monthly 0.7 2026-09-16 https://pragma-core.com/blog/cve-2026-23918-apache-http2-double-free-flaw-that-can-bring-down-your-server-and-worse monthly 0.7 2026-09-15 https://pragma-core.com/blog/dirty-frag-cve-2026-43284-cve-2026-43500-how-the-same-page-cache-write-class-that-powered-copy-fail-came-back-in-ipsec-and-rxrpc-and-leaked-before-the-patch-was-ready monthly 0.7 2026-09-16 https://pragma-core.com/blog/cve-2026-40372-how-a-broken-hmac-check-in-aspnet-core-data-protection-let-attackers-forge-authentication-cookies monthly 0.7 2026-09-16 https://pragma-core.com/blog/cve-2026-41940-how-three-small-mistakes-in-cpanel-handed-attackers-the-keys-to-15-million-servers monthly 0.7 2026-09-15 https://pragma-core.com/blog/how-a-nine-year-old-kernel-optimization-turned-every-linux-system-into-a-privilege-escalation-target monthly 0.7 2026-09-16 https://pragma-core.com/blog/cve-2026-3854-how-a-single-git-push-turned-githubs-internal-pipeline-into-a-global-attack-surface monthly 0.7 2026-09-15 https://pragma-core.com/blog/why-we-built-pragma-core monthly 0.7 2026-09-15 https://pragma-core.com/blog/tag/adversary-emulation weekly 0.5 https://pragma-core.com/blog/tag/ai weekly 0.5 https://pragma-core.com/blog/tag/application-security weekly 0.5 https://pragma-core.com/blog/tag/appsec weekly 0.5 https://pragma-core.com/blog/tag/auth-bypass weekly 0.5 https://pragma-core.com/blog/tag/cicd weekly 0.5 https://pragma-core.com/blog/tag/continuous-security weekly 0.5 https://pragma-core.com/blog/tag/cpanel weekly 0.5 https://pragma-core.com/blog/tag/cve weekly 0.5 https://pragma-core.com/blog/tag/dast weekly 0.5 https://pragma-core.com/blog/tag/github weekly 0.5 https://pragma-core.com/blog/tag/kernel weekly 0.5 https://pragma-core.com/blog/tag/linux weekly 0.5 https://pragma-core.com/blog/tag/malware-analysis weekly 0.5 https://pragma-core.com/blog/tag/mitre-attack weekly 0.5 https://pragma-core.com/blog/tag/pentest weekly 0.5 https://pragma-core.com/blog/tag/rce weekly 0.5 https://pragma-core.com/blog/tag/red-team weekly 0.5 https://pragma-core.com/blog/tag/reverse-engineering weekly 0.5 https://pragma-core.com/blog/tag/sast weekly 0.5 https://pragma-core.com/blog/tag/supply-chain weekly 0.5 https://pragma-core.com/blog/tag/threat-intelligence weekly 0.5 https://pragma-core.com/blog/tag/vulnerability-research weekly 0.5 https://pragma-core.com/blog/tag/web-security weekly 0.5 https://pragma-core.com/security-advisories weekly 0.9 2026-09-16 https://pragma-core.com/security-advisories/path-traversal-via-unsanitized-upload-filename monthly 0.8 2026-09-16 https://pragma-core.com/security-advisories/arbitrary-binary-execution-via-unvalidated-php-path-parameter monthly 0.8 2026-09-16 https://pragma-core.com/security-advisories/php-object-injection-via-cache-deserialization monthly 0.8 2026-09-16 https://pragma-core.com/security-advisories/cve-2026-46683-ssrf-and-local-file-read-via-the-xsl-style-sheet-option monthly 0.8 2026-09-16 https://pragma-core.com/security-advisories/cve-2026-46643-binary-path-is-never-shell-escaped-due-to-an-inverted-is-executable-check monthly 0.8 2026-09-16 https://pragma-core.com/security-advisories/ghsa-87qc-37cw-84h4-temporaryfiles-is-public-enabling-arbitrary-file-deletion-at-shutdown monthly 0.8 2026-09-16 https://pragma-core.com/security-advisories/cve-2026-45016-local-file-inclusion-via-file-uri-in-mail-compose monthly 0.8 2026-09-16 https://pragma-core.com/security-advisories/unrestricted-identity-provider-selection-in-saml-authentication monthly 0.8 2026-09-16 https://pragma-core.com/security-advisories/cve-2026-41524-stored-xss-in-bravecms-page-and-article-content monthly 0.8 2026-09-16 https://pragma-core.com/security-advisories/cve-2026-41576-stored-html-injection-in-contact-email-via-nl2br-unescaped-blade-template monthly 0.8 2026-09-16 https://pragma-core.com/security-advisories/vulnerable-dependencies monthly 0.8 2026-09-16 https://pragma-core.com/security-advisories/cve-2026-35183-insecure-direct-object-reference-in-article-image-deletion monthly 0.8 2026-09-16 https://pragma-core.com/security-advisories/cve-2026-35164-unrestricted-file-upload-via-ckeditor-endpoint monthly 0.8 2026-09-16 https://pragma-core.com/security-advisories/cve-2026-35182-missing-authorization-privilege-escalation monthly 0.8 2026-09-16 https://pragma-core.com/security-advisories/tag/xss weekly 0.6 https://pragma-core.com/security-advisories/tag/laravel weekly 0.6 https://pragma-core.com/security-advisories/tag/cms-security weekly 0.6 https://pragma-core.com/security-advisories/tag/cookie-theft weekly 0.6 https://pragma-core.com/security-advisories/tag/privilege-escalation weekly 0.6 https://pragma-core.com/security-advisories/tag/web-security weekly 0.6 https://pragma-core.com/security-advisories/tag/html-injection weekly 0.6 https://pragma-core.com/security-advisories/tag/php-security weekly 0.6 https://pragma-core.com/security-advisories/tag/blade-template weekly 0.6 https://pragma-core.com/security-advisories/tag/email-injection weekly 0.6 https://pragma-core.com/security-advisories/tag/phishing weekly 0.6 https://pragma-core.com/security-advisories/tag/web-application-security weekly 0.6 https://pragma-core.com/security-advisories/tag/cms-vulnerability weekly 0.6 https://pragma-core.com/security-advisories/tag/idor weekly 0.6 https://pragma-core.com/security-advisories/tag/insecure-direct-object-reference weekly 0.6 https://pragma-core.com/security-advisories/tag/broken-access-control weekly 0.6 https://pragma-core.com/security-advisories/tag/unrestricted-file-upload weekly 0.6 https://pragma-core.com/security-advisories/tag/remote-code-execution weekly 0.6 https://pragma-core.com/security-advisories/tag/rce weekly 0.6 https://pragma-core.com/security-advisories/tag/php-web-shell weekly 0.6 https://pragma-core.com/security-advisories/tag/file-upload-bypass weekly 0.6 https://pragma-core.com/security-advisories/tag/privilege-escalation-1 weekly 0.6 https://pragma-core.com/security-advisories/tag/missing-authorization weekly 0.6 https://pragma-core.com/security-advisories/tag/vulnerable-dependencies weekly 0.6 https://pragma-core.com/security-advisories/tag/supply-chain-security weekly 0.6 https://pragma-core.com/security-advisories/tag/outdated-packages weekly 0.6 https://pragma-core.com/security-advisories/tag/composer weekly 0.6 https://pragma-core.com/security-advisories/tag/arbitrary-file-read weekly 0.6 https://pragma-core.com/security-advisories/tag/local-file-inclusion weekly 0.6 https://pragma-core.com/security-advisories/tag/saml weekly 0.6 https://pragma-core.com/security-advisories/tag/authentication weekly 0.6 https://pragma-core.com/security-advisories/tag/identity-provider weekly 0.6 https://pragma-core.com/security-advisories/tag/idp-selection weekly 0.6 https://pragma-core.com/security-advisories/tag/simplesamlphp weekly 0.6 https://pragma-core.com/security-advisories/tag/security-advisory weekly 0.6 https://pragma-core.com/security-advisories/tag/php weekly 0.6 https://pragma-core.com/security-advisories/tag/sso weekly 0.6 https://pragma-core.com/security-advisories/tag/authentication-bypass weekly 0.6 https://pragma-core.com/security-advisories/tag/ssrf weekly 0.6 https://pragma-core.com/security-advisories/tag/web weekly 0.6 https://pragma-core.com/security-advisories/tag/insecure-deserialization weekly 0.6 https://pragma-core.com/newsletter monthly 0.6 https://pragma-core.com/cookie-policy yearly 0.3