Cors — PoC Archivehttps://poc.intelseclab.com/tags/cors/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000Sliver C2 MCP Server Unauthenticated CORS/Preflight Bypass (CVE-2026-34227)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-34227-sliver-mcp-cors-bypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-34227-sliver-mcp-cors-bypass/High severity — web · CVE-2026-34227 (GHSA-6fpf-248c-m7wm). Status: PoC. Affects: Sliver C2 framework — MCP (Model Context Protocol) server interface. Tags: sliver, c2, mcp, cors, csrf, sse, cross-origin, data-exfiltration.webHighsliverc2mcpcorscsrfssecross-origindata-exfiltrationRealtime Collaboration Platform — CORS Misconfiguration Leading to Authenticated Data Exposure (CVE-2026-27579)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-27579-cors-misconfig-data-exposure/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-27579-cors-misconfig-data-exposure/High severity (CVSS 7.4) — web · CVE-2026-27579 (GHSA-qh5m-p8jh-hx88). Status: PoC. Affects: realtime-collaboration-platform (karnop), backed by Appwrite. Tags: cors, misconfiguration, appwrite, cross-origin, credentials, data-exposure, session-hijack, javascript.webHighcorsmisconfigurationappwritecross-origincredentialsdata-exposuresession-hijackjavascriptOpenCode Unauthenticated Local HTTP Server -> Remote Code Execution (CVE-2026-22812)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-22812-opencode-unauth-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-22812-opencode-unauth-rce/High severity (CVSS 8.8) — web · CVE-2026-22812 (GHSA-vxw4-wv6m-9hhh). Status: Weaponized. Affects: OpenCode (AI developer/coding agent tool) local HTTP server. Tags: opencode, unauthenticated-api, rce, localhost-server, cors, session-hijack, cwe-306, cwe-942.webHighopencodeunauthenticated-apircelocalhost-servercorssession-hijackcwe-306cwe-942Nhost Local MCP Server Unauthenticated CORS Bypass Leading to Full Project Takeover (CVE-2026-34200)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-34200-nhost-mcp-cors-takeover/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-34200-nhost-mcp-cors-takeover/Critical severity (CVSS 9.6) — web · CVE-2026-34200 (GHSA-6c5x-3h35-vvw2). Status: PoC. Affects: Nhost CLI local MCP server (nhost mcp start). Tags: mcp, cors, csrf, drive-by, cors-bypass, credential-theft, hasura, dns-rebinding.webCriticalmcpcorscsrfdrive-bycors-bypasscredential-thefthasuradns-rebinding