https://poc.intelseclab.com/tags/arbitrary-file-write/Latest proof-of-concept entries.Hugoen-usSat, 15 Aug 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-08-15_cve-2026-47301-sccm-adminservice-cab-rce/Sat, 15 Aug 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-08-15_cve-2026-47301-sccm-adminservice-cab-rce/Critical severity (CVSS 9.8) — network · CVE-2026-47301. Status: Patched. Affects: Microsoft Configuration Manager (SCCM / ConfigMgr), AdminService REST API. Tags: windows, sccm, configmgr, rce, cab, path-traversal, dll-hijacking, dll-proxy, arbitrary-file-write, system, microsoft, CVE-2026-47301.networkCriticalwindowssccmconfigmgrrcecabpath-traversaldll-hijackingdll-proxyarbitrary-file-writesystemmicrosoftCVE-2026-47301https://poc.intelseclab.com/pocs/web/2026-07-12_cve-2026-56260-crawl4ai-output-path-arbitrary-write/Sun, 12 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-12_cve-2026-56260-crawl4ai-output-path-arbitrary-write/Critical severity (CVSS 9.1) — web · CVE-2026-56260 (GHSA-365w-hqf6-vxfg). Status: PoC — lab (vulnerable-app/) demonstrates genuine unrestricted arbitrary file write; the bundled poc.py scanner is deliberately conservative (writes only to a randomized safe /tmp marker) so it is safe to run against real/production targets. See Notes.. Affects: Crawl4AI — open-source LLM-friendly web crawler/scraper (unclecode/crawl4ai), Docker API server mode. Tags: crawl4ai, ai-web-crawler, docker-api, path-traversal, arbitrary-file-write, cwe-22, unauthenticated, remote, denial-of-service.webCriticalcrawl4aiai-web-crawlerdocker-apipath-traversalarbitrary-file-writecwe-22unauthenticatedremotedenial-of-servicehttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-28286-zimaos-arbitrary-file-write/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-28286-zimaos-arbitrary-file-write/Critical severity — web · CVE-2026-28286. Status: PoC. Affects: ZimaOS (NAS / home-server operating system), file API endpoint /v2_1/files/file. Tags: zimaos, nas, arbitrary-file-write, path-traversal, api-misconfiguration, rce, home-server.webCriticalzimaosnasarbitrary-file-writepath-traversalapi-misconfigurationrcehome-serverhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-37068-veno-file-manager-arbitrary-file-write/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-37068-veno-file-manager-arbitrary-file-write/Critical severity — web · CVE-2026-37068. Status: Weaponized. Affects: Veno File Manager Project. Tags: veno-file-manager, arbitrary-file-write, rce, authenticated, superadmin, cwe-434.webCriticalveno-file-managerarbitrary-file-writerceauthenticatedsuperadmincwe-434https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-39023-responsive-filemanager-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-39023-responsive-filemanager-rce/Critical severity — web · CVE-2026-39023. Status: Weaponized. Affects: Responsive Filemanager. Tags: responsive-filemanager, php, unauthenticated, rce, duplicate-file, arbitrary-file-write.webCriticalresponsive-filemanagerphpunauthenticatedrceduplicate-filearbitrary-file-writehttps://poc.intelseclab.com/pocs/hardware/2026-07-05_cve-2026-31156-openplc-glue-generator-traversal/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/hardware/2026-07-05_cve-2026-31156-openplc-glue-generator-traversal/High severity — hardware · CVE-2026-31156. Status: PoC. Affects: OpenPLC_v3 — utils/glue_generator_src/glue_generator.cpp build/code-generation utility. Tags: openplc, ics, path-traversal, arbitrary-file-write, glue-generator, cpp, plc, industrial-control.hardwareHighopenplcicspath-traversalarbitrary-file-writeglue-generatorcppplcindustrial-controlhttps://poc.intelseclab.com/pocs/misc/2026-07-05_cve-2026-29786-node-tar-symlink-traversal/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/misc/2026-07-05_cve-2026-29786-node-tar-symlink-traversal/High severity — misc · CVE-2026-29786. Status: PoC. Affects: tar npm package (Node.js). Tags: node-tar, path-traversal, symlink, archive-extraction, arbitrary-file-write, nodejs, supply-chain.miscHighnode-tarpath-traversalsymlinkarchive-extractionarbitrary-file-writenodejssupply-chainhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-25895-fuxa-path-traversal-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-25895-fuxa-path-traversal-rce/Critical severity (CVSS 9.8) — web · CVE-2026-25895. Status: Weaponized. Affects: FUXA (Node.js-based SCADA/HMI platform), frangoteam. Tags: fuxa, scada, ics, path-traversal, arbitrary-file-write, rce, unauthenticated, cwe-22, cron-persistence, webshell.webCriticalfuxascadaicspath-traversalarbitrary-file-writerceunauthenticatedcwe-22cron-persistencewebshellhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-54337-fireshare-file-overwrite/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-54337-fireshare-file-overwrite/Info severity — web · CVE-2026-54337 (see [GHSA-hmh2-6g84-q8jx](https://github.com/ShaneIsrael/fireshare/security/advisories/GHSA-hmh2-6g84-q8jx)). Status: PoC. Affects: Fireshare (self-hosted video sharing app), <= 1.16.3. Tags: fireshare, unauthenticated, arbitrary-file-write, argument-injection, ffmpeg, file-upload, cwe-73, docker.webInfofireshareunauthenticatedarbitrary-file-writeargument-injectionffmpegfile-uploadcwe-73dockerhttps://poc.intelseclab.com/pocs/misc/2026-07-05_cve-2026-43893-exiftool-vendored-arg-injection-file-write/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/misc/2026-07-05_cve-2026-43893-exiftool-vendored-arg-injection-file-write/High severity (CVSS 8.2) — misc · CVE-2026-43893 / GHSA-cw26-7653-2rp5. Status: PoC. Affects: exiftool-vendored (npm package, Node.js wrapper around Phil Harvey's ExifTool). Tags: exiftool, exiftool-vendored, argument-injection, arbitrary-file-write, arbitrary-file-read, nodejs, cli-wrapper, newline-injection.miscHighexiftoolexiftool-vendoredargument-injectionarbitrary-file-writearbitrary-file-readnodejscli-wrappernewline-injectionhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-6815-casdoor-path-traversal-file-write/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-6815-casdoor-path-traversal-file-write/High severity — web · CVE-2026-6815. Status: Weaponized. Affects: Casdoor (open-source identity/access management platform). Tags: casdoor, path-traversal, arbitrary-file-write, rce, dos, authenticated, cwe-22.webHighcasdoorpath-traversalarbitrary-file-writercedosauthenticatedcwe-22https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-32731-apostrophecms-tar-path-traversal/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-32731-apostrophecms-tar-path-traversal/High severity — web · CVE-2026-32731. Status: PoC. Affects: ApostropheCMS (site export/import feature). Tags: apostrophecms, cms, path-traversal, tar-slip, arbitrary-file-write, import, node-js.webHighapostrophecmscmspath-traversaltar-sliparbitrary-file-writeimportnode-jshttps://poc.intelseclab.com/pocs/misc/2026-07-05_cve-2026-39973-apktool-path-traversal/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/misc/2026-07-05_cve-2026-39973-apktool-path-traversal/High severity — misc · CVE-2026-39973. Status: PoC. Affects: iBotPeaches/Apktool (Android APK decompiler/rebuilder). Tags: apktool, path-traversal, resources-arsc, apk, decompilation, arbitrary-file-write, android-tooling.miscHighapktoolpath-traversalresources-arscapkdecompilationarbitrary-file-writeandroid-toolinghttps://poc.intelseclab.com/pocs/cloud/2026-07-05_cve-2026-7791-aws-workspaces-skylight-lpe/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/cloud/2026-07-05_cve-2026-7791-aws-workspaces-skylight-lpe/High severity — cloud · CVE-2026-7791. Status: PoC. Affects: Amazon WorkSpaces — Skylight Workspace Config Service. Tags: aws, amazon-workspaces, skylight, toctou, privilege-escalation, arbitrary-file-write, windows, directory-junction.cloudHighawsamazon-workspacesskylighttoctouprivilege-escalationarbitrary-file-writewindowsdirectory-junctionhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-21440-adonisjs-bodyparser-path-traversal/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-21440-adonisjs-bodyparser-path-traversal/Critical severity (CVSS 9.2) — web · CVE-2026-21440 (GHSA-gvq6-hvvp-h34h). Status: Weaponized. Affects: @adonisjs/bodyparser (AdonisJS multipart file-upload handling). Tags: adonisjs, nodejs, path-traversal, arbitrary-file-write, cwe-22, file-upload, rce, bodyparser.webCriticaladonisjsnodejspath-traversalarbitrary-file-writecwe-22file-uploadrcebodyparserhttps://poc.intelseclab.com/pocs/misc/2026-05-15_winrar-path-traversal-cve-2025-6218/Fri, 15 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/misc/2026-05-15_winrar-path-traversal-cve-2025-6218/High severity — misc · CVE-2025-6218. Status: Weaponized. Affects: WinRAR archive extraction workflow. Tags: path-traversal, arbitrary-file-write, startup-folder, WinRAR, Windows, user-interaction.miscHighpath-traversalarbitrary-file-writestartup-folderWinRARWindowsuser-interaction