Api — PoC Archivehttps://poc.intelseclab.com/tags/api/Latest proof-of-concept entries.Hugoen-usSun, 09 Aug 2026 00:00:00 +0000Ivanti Endpoint Manager Mobile (EPMM) Unauthenticated Remote API Access (CVE-2023-35078)https://poc.intelseclab.com/pocs/network/2026-08-09_cve-2023-35078-ivanti-epmm-unauth-api-access/Sun, 09 Aug 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-08-09_cve-2023-35078-ivanti-epmm-unauth-api-access/Critical severity (CVSS 9.8) — network · CVE-2023-35078 (Ivanti advisory; CWE-287 per NVD). Status: Patched (Ivanti EPMM 11.8.1.1, 11.9.1.1, 11.10.0.2 and later). Affects: Ivanti Endpoint Manager Mobile (EPMM), previously branded MobileIron Core — the /mifs/aad/api/ administrative API surface. Tags: ivanti, epmm, mobileiron-core, mdm, authentication-bypass, cwe-287, unauthenticated, api, pii-disclosure, cisa-kev, ransomware, scanner.networkCriticalivantiepmmmobileiron-coremdmauthentication-bypasscwe-287unauthenticatedapipii-disclosurecisa-kevransomwarescannerHoverfly Middleware Command Injection to RCE (CVE-2025-54123)https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-54123-hoverfly-middleware-rce/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-54123-hoverfly-middleware-rce/Critical severity (CVSS 9.8) — web · CVE-2025-54123. Status: Weaponized. Affects: SpectoLabs Hoverfly (HTTP/API service virtualization tool) — admin API, <= v1.11.3. Tags: hoverfly, command-injection, middleware, api, token-auth, rce, cwe-78, python.webCriticalhoverflycommand-injectionmiddlewareapitoken-authrcecwe-78pythonFlowiseAI Account-Takeover via Forgot-Password Token Leak (CVE-2025-58434)https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-58434-flowise-auth-bypass/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-58434-flowise-auth-bypass/Critical severity (CVSS 9.8) — web · CVE-2025-58434. Status: Weaponized. Affects: FlowiseAI (/api/v1/account/forgot-password and /api/v1/account/reset-password endpoints). Tags: flowiseai, auth-bypass, account-takeover, forgot-password, reset-password, api, python, cwe-640.webCriticalflowiseaiauth-bypassaccount-takeoverforgot-passwordreset-passwordapipythoncwe-640YAMCS Unauthorized User Enumeration via IAM API (CVE-2026-44595)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-44595-yamcs-iam-user-enumeration/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-44595-yamcs-iam-user-enumeration/Medium severity (CVSS 4.3) — web · CVE-2026-44595 / GHSA-p2rj-mrmc-9w29. Status: PoC. Affects: yamcs-core (YAMCS mission control software). Tags: yamcs, iam, missing-authorization, user-enumeration, broken-access-control, api.webMediumyamcsiammissing-authorizationuser-enumerationbroken-access-controlapiVaultwarden Organization Collection Permissions Bypass & Cipher Enumeration (CVE-2026-26012)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-26012-vaultwarden-collection-bypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-26012-vaultwarden-collection-bypass/Medium severity (CVSS 6.5) — web · CVE-2026-26012 (GHSA-h265-g7rm-h337). Status: PoC. Affects: Vaultwarden (unofficial Bitwarden-compatible server). Tags: vaultwarden, bitwarden, password-manager, idor, access-control-bypass, api, cipher-enumeration, self-hosted.webMediumvaultwardenbitwardenpassword-manageridoraccess-control-bypassapicipher-enumerationself-hostedSmarterMail Unauthenticated Admin Password Reset (CVE-2026-0001 / WT-2026-0001)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-0001-smartermail-password-reset/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-0001-smartermail-password-reset/Critical severity (CVSS 9) — web · CVE-2026-0001 (tracked publicly as WT-2026-0001). Status: PoC. Affects: SmarterTools SmarterMail (webmail/admin control panel), typically on port 9998. Tags: smartermail, auth-bypass, password-reset, email-server, unauthenticated, rce-chain, smartertools, api.webCriticalsmartermailauth-bypasspassword-resetemail-serverunauthenticatedrce-chainsmartertoolsapiLangflow Unauthenticated Remote Code Execution via `validate/code` Endpoint (CVE-2026-0770)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-0770-langflow-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-0770-langflow-rce/Critical severity — web · CVE-2026-0770. Status: PoC. Affects: Langflow (AI workflow builder). Tags: langflow, rce, unauthenticated, python, code-validation, exec, ai-platform, api.webCriticallangflowrceunauthenticatedpythoncode-validationexecai-platformapiLangflow Knowledge Base Path Traversal / Arbitrary Directory Deletion (CVE-2026-42048)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-42048-langflow-kb-path-traversal/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-42048-langflow-kb-path-traversal/High severity — web · CVE-2026-42048 (GHSA-9whx-c884-c68q). Status: PoC. Affects: Langflow (Knowledge Bases bulk delete API). Tags: langflow, path-traversal, arbitrary-file-deletion, cwe-22, api, docker-lab, knowledge-base.webHighlangflowpath-traversalarbitrary-file-deletioncwe-22apidocker-labknowledge-baseGrafana Dashboard Permissions Broken Access Control — Editor-to-Admin Privilege Escalation (CVE-2026-21721)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-21721-grafana-lpe/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-21721-grafana-lpe/High severity — web · CVE-2026-21721. Status: PoC. Affects: Grafana (self-hosted, dashboard permissions API). Tags: grafana, privilege-escalation, broken-access-control, dashboard-permissions, editor-to-admin, api.webHighgrafanaprivilege-escalationbroken-access-controldashboard-permissionseditor-to-adminapiGitea OAuth2 Scope Enforcement Bypass via HTTP Basic Auth — CVE-2026-28699https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-28699-gitea-oauth2-scope-bypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-28699-gitea-oauth2-scope-bypass/High severity — web · CVE-2026-28699. Status: PoC. Affects: Gitea (code.gitea.io/gitea). Tags: gitea, oauth2, scope-bypass, basic-auth, incorrect-authorization, cwe-863, api.webHighgiteaoauth2scope-bypassbasic-authincorrect-authorizationcwe-863apiFortiAuthenticator Unauthenticated RCE Endpoint Probe (CVE-2026-44277)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-44277-fortiauthenticator-unauth-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-44277-fortiauthenticator-unauth-rce/Critical severity — web · CVE-2026-44277. Status: PoC. Affects: Fortinet FortiAuthenticator. Tags: fortinet, fortiauthenticator, unauthenticated-rce, api, endpoint-probe, detection.webCriticalfortinetfortiauthenticatorunauthenticated-rceapiendpoint-probedetectionCoolify Authenticated Remote Command Injection via Deployment Config (CVE-2026-34038)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-34038-coolify-command-injection/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-34038-coolify-command-injection/Critical severity (CVSS 10) — web · CVE-2026-34038 (GHSA-qqrq-r9h4-x6wp). Status: PoC. Affects: Coolify (self-hosted PaaS/deployment platform). Tags: coolify, command-injection, cwe-78, rce, deployment, docker, api.webCriticalcoolifycommand-injectioncwe-78rcedeploymentdockerapiApache Superset Authenticated SQL Injection via sqlExpression/where Bypass — CVE-2026-23980https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-23980-superset-sqli/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-23980-superset-sqli/Medium severity (CVSS 6.5) — web · CVE-2026-23980. Status: PoC. Affects: Apache Superset. Tags: apache-superset, sql-injection, error-based-sqli, postgresql, authenticated, api, python, cwe-89.webMediumapache-supersetsql-injectionerror-based-sqlipostgresqlauthenticatedapipythoncwe-89Azure Networking Privilege Escalation via Missing Privilege Checkhttps://poc.intelseclab.com/pocs/cloud/2026-05-17_azure-networking-privilege-escalation/Sun, 17 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/cloud/2026-05-17_azure-networking-privilege-escalation/Critical severity (CVSS 10) — cloud · CVE-2025-54914. Status: Researched. Affects: Microsoft Azure Networking service (GetRouteTable API). Tags: privilege-escalation, Azure, cloud, lateral-movement, API, routing, networking, no-user-interaction.cloudCriticalprivilege-escalationAzurecloudlateral-movementAPIroutingnetworkingno-user-interaction