https://poc.intelseclab.com/tags/access-control/Latest proof-of-concept entries.Hugoen-usMon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/hardware/2026-07-06_cve-2025-65856-onvif-camera-auth-bypass/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/hardware/2026-07-06_cve-2025-65856-onvif-camera-auth-bypass/Critical severity (CVSS 9.8) — hardware · CVE-2025-65856. Status: Weaponized. Affects: Xiongmai XM530-based IP camera ONVIF service (tested on model XM530_50X50-WG_8M). Tags: xiongmai, xm530, onvif, ip-camera, iot, auth-bypass, access-control, information-disclosure, rtsp, cwe-306, cwe-287, python, bash, curl.hardwareCriticalxiongmaixm530onvifip-cameraiotauth-bypassaccess-controlinformation-disclosurertspcwe-306cwe-287pythonbashcurlhttps://poc.intelseclab.com/pocs/network/2026-07-06_cve-2025-13315-twonky-server-auth-bypass/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-06_cve-2025-13315-twonky-server-auth-bypass/Critical severity (CVSS 9.8) — network · CVE-2025-13315. Status: PoC. Affects: Twonky Server (Lynx Technology), a DLNA/UPnP media server. Tags: twonky-server, dlna, upnp, media-server, auth-bypass, access-control, information-disclosure, credential-leak, cwe-284, unauthenticated, nuclei.networkCriticaltwonky-serverdlnaupnpmedia-serverauth-bypassaccess-controlinformation-disclosurecredential-leakcwe-284unauthenticatednucleihttps://poc.intelseclab.com/pocs/network/2026-07-06_cve-2025-66039-freepbx-auth-bypass/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-06_cve-2025-66039-freepbx-auth-bypass/Critical severity (CVSS 9.8) — network · CVE-2025-66039. Status: PoC. Affects: FreePBX (Sangoma) framework module — web-based administration panel for Asterisk-based VoIP/PBX systems. Tags: freepbx, sangoma, voip, telephony, authentication-bypass, access-control, authtype, webserver-auth, cwe-287, cwe-863, nuclei, version-fingerprinting.networkCriticalfreepbxsangomavoiptelephonyauthentication-bypassaccess-controlauthtypewebserver-authcwe-287cwe-863nucleiversion-fingerprintinghttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-42569-phpvms-unauth-importer-wipe/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-42569-phpvms-unauth-importer-wipe/Critical severity — web · CVE-2026-42569. Status: PoC. Affects: phpVMS (Virtual Airline Management System). Tags: unauthenticated, phpvms, database-wipe, legacy-endpoint, access-control, destructive, python.webCriticalunauthenticatedphpvmsdatabase-wipelegacy-endpointaccess-controldestructivepythonhttps://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-33186-grpc-go-rbac-authz-bypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-33186-grpc-go-rbac-authz-bypass/High severity — network · CVE-2026-33186 (GHSA-p77j-4mvh-x3m3). Status: PoC. Affects: google.golang.org/grpc (grpc-go) authz package (SDK-level RBAC). Tags: grpc, grpc-go, rbac, authorization-bypass, http2, path-normalization, golang, access-control.networkHighgrpcgrpc-gorbacauthorization-bypasshttp2path-normalizationgolangaccess-controlhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-43515-tomcat-constraint-bypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-43515-tomcat-constraint-bypass/High severity — web · CVE-2026-43515. Status: PoC. Affects: Apache Tomcat — org.apache.catalina.realm.RealmBase.findSecurityConstraints(). Tags: apache-tomcat, java, security-constraint, auth-bypass, realm-base, servlet, web-xml, access-control.webHighapache-tomcatjavasecurity-constraintauth-bypassrealm-baseservletweb-xmlaccess-controlhttps://poc.intelseclab.com/pocs/web/2026-07-03_cve-2026-45115-mybb-acp-privilege-escalation/Fri, 03 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-03_cve-2026-45115-mybb-acp-privilege-escalation/High severity — web · None assigned as of 2026-07-03 (see Notes — CVE-2026-45115 identifies a separate, already-patched MyBB issue). Status: PoC. Affects: MyBB forum software, Admin CP add-user flow. Tags: mybb, privilege-escalation, admin-cp, authorization-bypass, forum-software, php, access-control.webHighmybbprivilege-escalationadmin-cpauthorization-bypassforum-softwarephpaccess-controlhttps://poc.intelseclab.com/pocs/web/2026-07-01_cve-2026-48907-joomla-jce-unauth-rce/Wed, 01 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-01_cve-2026-48907-joomla-jce-unauth-rce/Critical severity (CVSS 10) — web · CVE-2026-48907. Status: Weaponized. Affects: Joomla Content Editor (JCE) extension by Widget Factory. Tags: RCE, unauthenticated, Joomla, JCE, CMS, access-control, webshell, php-webshell, file-upload, CISA-KEV, active-exploitation.webCriticalRCEunauthenticatedJoomlaJCECMSaccess-controlwebshellphp-webshellfile-uploadCISA-KEVactive-exploitationhttps://poc.intelseclab.com/pocs/web/2026-06-30_cve-2026-48908-sp-page-builder-joomla-rce/Tue, 30 Jun 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-06-30_cve-2026-48908-sp-page-builder-joomla-rce/Critical severity (CVSS 10) — web · CVE-2026-48908 (GHSA-8fwr-8fxr-8v2p). Status: Weaponized — public PoC with mass-scan support, added to CISA KEV 2026-07-07, confirmed active in-the-wild exploitation. Affects: SP Page Builder extension for Joomla (joomshaper.net). Tags: RCE, unauthenticated, file-upload, PHP-webshell, Joomla, CMS, access-control, Python, CVSS-10, kev, backdoor, cwe-434.webCriticalRCEunauthenticatedfile-uploadPHP-webshellJoomlaCMSaccess-controlPythonCVSS-10kevbackdoorcwe-434