Backdoor — PoC Archivehttps://poc.intelseclab.com/tags/backdoor/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000ProFTPD mod_sql Pre-Auth SQL Injection Leading to RCE (CVE-2026-42167)https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-42167-proftpd-sqli-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-42167-proftpd-sqli-rce/High severity (CVSS 8.1) — network · CVE-2026-42167. Status: PoC. Affects: ProFTPD (with mod_sql and SQL-backed logging configured). Tags: sqli, unauthenticated, proftpd, mod_sql, ftp, rce, backdoor, go.networkHighsqliunauthenticatedproftpdmod_sqlftprcebackdoorgoKanboard — Missing Access Control on Plugin Installation Leads to Administrative RCE via Webshell Plugin (CVE-2026-25924)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-25924-kanboard-plugin-webshell/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-25924-kanboard-plugin-webshell/High severity (CVSS 8.4) — web · CVE-2026-25924 / GHSA-grch-p7vf-vc4f. Status: Weaponized. Affects: Kanboard (project management application). Tags: kanboard, rce, webshell, plugin-installation, incorrect-authorization, cwe-863, cwe-94, admin-bypass, backdoor.webHighkanboardrcewebshellplugin-installationincorrect-authorizationcwe-863cwe-94admin-bypassbackdoorSP Page Builder (Joomla) Unauthenticated File Upload RCE (CVE-2026-48908)https://poc.intelseclab.com/pocs/web/2026-06-30_cve-2026-48908-sp-page-builder-joomla-rce/Tue, 30 Jun 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-06-30_cve-2026-48908-sp-page-builder-joomla-rce/Critical severity (CVSS 10) — web · CVE-2026-48908 (GHSA-8fwr-8fxr-8v2p). Status: Weaponized — public PoC with mass-scan support, added to CISA KEV 2026-07-07, confirmed active in-the-wild exploitation. Affects: SP Page Builder extension for Joomla (joomshaper.net). Tags: RCE, unauthenticated, file-upload, PHP-webshell, Joomla, CMS, access-control, Python, CVSS-10, kev, backdoor, cwe-434.webCriticalRCEunauthenticatedfile-uploadPHP-webshellJoomlaCMSaccess-controlPythonCVSS-10kevbackdoorcwe-434