Cloud — PoC Archivehttps://poc.intelseclab.com/tags/cloud/Latest proof-of-concept entries.Hugoen-usSun, 17 May 2026 00:00:00 +0000React2Shell - Next.js RSC Unauthenticated RCEhttps://poc.intelseclab.com/pocs/web/2026-05-17_react2shell-rce/Sun, 17 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-17_react2shell-rce/Critical severity (CVSS 10) — web · CVE-2025-55182. Status: Weaponized. Affects: Next.js (App Router with React Server Components), React. Tags: RCE, Next.js, React, RSC, deserialization, prototype-pollution, unauthenticated, Node.js, cloud.webCriticalRCENext.jsReactRSCdeserializationprototype-pollutionunauthenticatedNode.jscloudAzure Networking Privilege Escalation via Missing Privilege Checkhttps://poc.intelseclab.com/pocs/cloud/2026-05-17_azure-networking-privilege-escalation/Sun, 17 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/cloud/2026-05-17_azure-networking-privilege-escalation/Critical severity (CVSS 10) — cloud · CVE-2025-54914. Status: Researched. Affects: Microsoft Azure Networking service (GetRouteTable API). Tags: privilege-escalation, Azure, cloud, lateral-movement, API, routing, networking, no-user-interaction.cloudCriticalprivilege-escalationAzurecloudlateral-movementAPIroutingnetworkingno-user-interaction