https://poc.intelseclab.com/tags/ci-cd/Latest proof-of-concept entries.Hugoen-usSun, 09 Aug 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-08-09_cve-2026-63077-teamcity-preauth-rce/Sun, 09 Aug 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-08-09_cve-2026-63077-teamcity-preauth-rce/Critical severity (CVSS 9.8) — web · CVE-2026-63077. Status: Patched. Affects: JetBrains TeamCity (on-premises CI/CD server), agent polling subsystem. Tags: jetbrains, teamcity, preauth-rce, xstream, deserialization, hsqldb, polyglot, jsp, CWE-502, agent-polling, ci-cd.webCriticaljetbrainsteamcitypreauth-rcexstreamdeserializationhsqldbpolyglotjspCWE-502agent-pollingci-cdhttps://poc.intelseclab.com/pocs/cloud/2026-07-06_cve-2025-54416-tj-actions-branch-names-command-injection/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/cloud/2026-07-06_cve-2025-54416-tj-actions-branch-names-command-injection/Critical severity (CVSS 9.1) — cloud · CVE-2025-54416. Status: PoC. Affects: tj-actions/branch-names GitHub Action. Tags: github-actions, ci-cd, command-injection, supply-chain, tj-actions, branch-names, secrets-exfiltration, shell-injection.cloudCriticalgithub-actionsci-cdcommand-injectionsupply-chaintj-actionsbranch-namessecrets-exfiltrationshell-injectionhttps://poc.intelseclab.com/pocs/cloud/2026-07-05_cve-2026-11417-aws-cdk-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/cloud/2026-07-05_cve-2026-11417-aws-cdk-rce/High severity (CVSS 3.1) — cloud · CVE-2026-11417. Status: PoC. Affects: aws-cdk-lib (npm package), NodejsFunction L2 construct. Tags: aws, cdk, supply-chain, command-injection, esbuild, nodejs, ci-cd, rce.cloudHighawscdksupply-chaincommand-injectionesbuildnodejsci-cdrcehttps://poc.intelseclab.com/pocs/cloud/2026-07-05_cve-2026-44590-sherlock-pull-request-target-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/cloud/2026-07-05_cve-2026-44590-sherlock-pull-request-target-rce/Critical severity (CVSS 9.3) — cloud · CVE-2026-44590. Status: PoC. Affects: sherlock-project/sherlock (GitHub Actions workflow validate_modified_targets.yml). Tags: github-actions, pull_request_target, command-injection, ci-cd, supply-chain, token-exfiltration, sherlock.cloudCriticalgithub-actionspull_request_targetcommand-injectionci-cdsupply-chaintoken-exfiltrationsherlockhttps://poc.intelseclab.com/pocs/misc/2026-07-05_cve-2026-31900-psf-black-action-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/misc/2026-07-05_cve-2026-31900-psf-black-action-rce/High severity (CVSS 8.7) — misc · CVE-2026-31900 (GHSA-v53h-f6m7-xcgm). Status: PoC. Affects: psf/black GitHub Action. Tags: github-actions, supply-chain, rce, regex, pep508, ci-cd, secrets-theft, psf-black.miscHighgithub-actionssupply-chainrceregexpep508ci-cdsecrets-theftpsf-blackhttps://poc.intelseclab.com/pocs/cloud/2026-07-05_cve-2026-4660-go-getter-terraform-pathspec-injection/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/cloud/2026-07-05_cve-2026-4660-go-getter-terraform-pathspec-injection/High severity (CVSS 7.5) — cloud · CVE-2026-4660 / HCSEC-2026-04. Status: PoC. Affects: hashicorp/go-getter (used by Terraform, Nomad, Packer, Waypoint). Tags: terraform, go-getter, git, pathspec-injection, arbitrary-file-read, ci-cd, supply-chain, iac.cloudHighterraformgo-gettergitpathspec-injectionarbitrary-file-readci-cdsupply-chainiachttps://poc.intelseclab.com/pocs/cloud/2026-07-03_gitea-act-runner-container-options-escape/Fri, 03 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/cloud/2026-07-03_gitea-act-runner-container-options-escape/High severity — cloud · None assigned as of 2026-07-03. Status: PoC. Affects: Gitea Actions act_runner (Docker-backed). Tags: gitea, act-runner, ci-cd, docker, container-escape, host-namespace, privilege-escalation, capabilities.cloudHighgiteaact-runnerci-cddockercontainer-escapehost-namespaceprivilege-escalationcapabilities