Command-Execution — PoC Archivehttps://poc.intelseclab.com/tags/command-execution/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000Percona PMM Authenticated RCE via PostgreSQL COPY TO PROGRAM (CVE-2026-25212)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-25212-percona-pmm-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-25212-percona-pmm-rce/Critical severity (CVSS 9.9) — web · CVE-2026-25212. Status: PoC. Affects: Percona Monitoring and Management (PMM). Tags: rce, percona-pmm, postgresql, copy-to-program, grafana, privilege-escalation, command-execution.webCriticalrcepercona-pmmpostgresqlcopy-to-programgrafanaprivilege-escalationcommand-executionlocal-mcp exec Tool Sandbox/Restriction Bypass (CVE-2026-6130)https://poc.intelseclab.com/pocs/misc/2026-07-05_cve-2026-6130-local-mcp-exec-sandbox-bypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/misc/2026-07-05_cve-2026-6130-local-mcp-exec-sandbox-bypass/Medium severity — misc · CVE-2026-6130. Status: PoC. Affects: local-mcp (zero-dependency MCP server for local file operations, v1.1.1). Tags: mcp, model-context-protocol, sandbox-bypass, command-execution, exec-restriction-bypass.miscMediummcpmodel-context-protocolsandbox-bypasscommand-executionexec-restriction-bypassPostgreSQL Referential-Integrity Owner-Switched Implicit Cast RCEhttps://poc.intelseclab.com/pocs/network/2026-07-04_postgres-ri-owner-switched-cast-rce/Sat, 04 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-04_postgres-ri-owner-switched-cast-rce/High severity — network · None assigned as of 2026-07-04. Status: PoC. Affects: PostgreSQL (server). Tags: postgresql, privilege-escalation, referential-integrity, implicit-cast, command-execution, database, uncoordinated-disclosure.networkHighpostgresqlprivilege-escalationreferential-integrityimplicit-castcommand-executiondatabaseuncoordinated-disclosureOpenVPN Connect Server-Pushed Option Current-User Command Executionhttps://poc.intelseclab.com/pocs/network/2026-07-03_openvpn-connect-server-pushed-option-ace/Fri, 03 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-03_openvpn-connect-server-pushed-option-ace/High severity — network · None assigned as of 2026-07-03. Status: PoC. Affects: OpenVPN Connect for Windows. Tags: openvpn, openvpn-connect, malicious-vpn-server, command-execution, script-permission-bypass, pushed-options, windows, client-side.networkHighopenvpnopenvpn-connectmalicious-vpn-servercommand-executionscript-permission-bypasspushed-optionswindowsclient-side