C2 — PoC Archivehttps://poc.intelseclab.com/tags/c2/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000Sliver C2 MCP Server Unauthenticated CORS/Preflight Bypass (CVE-2026-34227)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-34227-sliver-mcp-cors-bypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-34227-sliver-mcp-cors-bypass/High severity — web · CVE-2026-34227 (GHSA-6fpf-248c-m7wm). Status: PoC. Affects: Sliver C2 framework — MCP (Model Context Protocol) server interface. Tags: sliver, c2, mcp, cors, csrf, sse, cross-origin, data-exfiltration.webHighsliverc2mcpcorscsrfssecross-origindata-exfiltrationImmich Stored XSS to API Key Exfiltration and Account Hijacking (CVE-2026-35455)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-35455-immich-exfiltration/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-35455-immich-exfiltration/High severity — web · CVE-2026-35455. Status: Weaponized. Affects: Immich (self-hosted photo/video management). Tags: immich, stored-xss, exfiltration, api-key-theft, account-hijacking, self-hosted-photos, c2.webHighimmichstored-xssexfiltrationapi-key-theftaccount-hijackingself-hosted-photosc2