Boolean-Oracle — PoC Archivehttps://poc.intelseclab.com/tags/boolean-oracle/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000Strapi CMS Admin Account Takeover via Query Filter Bypass — CVE-2026-27886https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-27886-strapi-account-takeover/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-27886-strapi-account-takeover/Critical severity — web · CVE-2026-27886. Status: Weaponized. Affects: Strapi CMS (Content API). Tags: strapi, cms, account-takeover, password-reset, boolean-oracle, api-filter-bypass, authentication.webCriticalstrapicmsaccount-takeoverpassword-resetboolean-oracleapi-filter-bypassauthenticationGhost CMS Content API — Unauthenticated Blind SQL Injection (CVE-2026-26980)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-26980-ghost-cms-blind-sqli/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-26980-ghost-cms-blind-sqli/Critical severity — web · CVE-2026-26980. Status: Weaponized. Affects: Ghost CMS. Tags: ghost-cms, sql-injection, blind-sqli, content-api, unauthenticated, boolean-oracle, mysql, sqlite.webCriticalghost-cmssql-injectionblind-sqlicontent-apiunauthenticatedboolean-oraclemysqlsqlite