Csrf — PoC Archivehttps://poc.intelseclab.com/tags/csrf/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000Sliver C2 MCP Server Unauthenticated CORS/Preflight Bypass (CVE-2026-34227)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-34227-sliver-mcp-cors-bypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-34227-sliver-mcp-cors-bypass/High severity — web · CVE-2026-34227 (GHSA-6fpf-248c-m7wm). Status: PoC. Affects: Sliver C2 framework — MCP (Model Context Protocol) server interface. Tags: sliver, c2, mcp, cors, csrf, sse, cross-origin, data-exfiltration.webHighsliverc2mcpcorscsrfssecross-origindata-exfiltrationNhost Local MCP Server Unauthenticated CORS Bypass Leading to Full Project Takeover (CVE-2026-34200)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-34200-nhost-mcp-cors-takeover/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-34200-nhost-mcp-cors-takeover/Critical severity (CVSS 9.6) — web · CVE-2026-34200 (GHSA-6c5x-3h35-vvw2). Status: PoC. Affects: Nhost CLI local MCP server (nhost mcp start). Tags: mcp, cors, csrf, drive-by, cors-bypass, credential-theft, hasura, dns-rebinding.webCriticalmcpcorscsrfdrive-bycors-bypasscredential-thefthasuradns-rebindingJupyterHub Cross-Origin Form POST XSRF Bypass (CVE-2026-40864)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-40864-jupyterhub-xsrf-bypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-40864-jupyterhub-xsrf-bypass/Medium severity — web · CVE-2026-40864 (GHSA-m68r-v472-jgq9). Status: PoC. Affects: JupyterHub. Tags: jupyterhub, csrf, xsrf-bypass, sec-fetch-mode, cwe-352, python, jupyter, session-hijack.webMediumjupyterhubcsrfxsrf-bypasssec-fetch-modecwe-352pythonjupytersession-hijackJoomla Page Builder CK Unauthenticated Arbitrary File Upload RCE — CVE-2026-56290https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-56290-joomla-pagebuilderck-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-56290-joomla-pagebuilderck-rce/Critical severity (CVSS 9.8) — web · CVE-2026-56290. Status: PoC. Affects: Page Builder CK (com_pagebuilderck) — Joomla extension. Tags: joomla, page-builder-ck, com_pagebuilderck, file-upload, unauth-rce, csrf, cms.webCriticaljoomlapage-builder-ckcom_pagebuilderckfile-uploadunauth-rcecsrfcmsFriendly Functions for Welcart WordPress Plugin CSRF (CVE-2026-1208)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-1208-welcart-plugin-csrf/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-1208-welcart-plugin-csrf/Medium severity (CVSS 4.3) — web · CVE-2026-1208. Status: PoC. Affects: Friendly Functions for Welcart (WordPress plugin). Tags: wordpress, wp-plugin, csrf, welcart, cwe-352, settings-manipulation.webMediumwordpresswp-plugincsrfwelcartcwe-352settings-manipulationdiskover-community — CSRF Leading to Authentication Bypass (CVE-2026-38934)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-38934-diskover-community-csrf-authbypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-38934-diskover-community-csrf-authbypass/High severity (CVSS 8.8) — web · CVE-2026-38934. Status: PoC. Affects: diskover-community. Tags: diskover, csrf, authentication-bypass, php, elasticsearch, settings-tampering.webHighdiskovercsrfauthentication-bypassphpelasticsearchsettings-tamperingAppsmith Table Widget Stored XSS to Admin Account Takeover — CVE-2026-30862https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-30862-appsmith-stored-xss-privesc/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-30862-appsmith-stored-xss-privesc/Critical severity (CVSS 9.1) — web · CVE-2026-30862 (GHSA-5hw4-whxv-6794). Status: PoC. Affects: Appsmith. Tags: appsmith, stored-xss, csrf, privilege-escalation, xsrf-token, react, low-code.webCriticalappsmithstored-xsscsrfprivilege-escalationxsrf-tokenreactlow-codeAdminPanel 4.0 CSRF File Deletion / Setup-Mode Reset — CVE-2026-30498https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-30498-adminpanel-csrf/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-30498-adminpanel-csrf/High severity — web · CVE-2026-30498 (reserved by MITRE). Status: PoC. Affects: AdminPanel 4.0 (archived project). Tags: csrf, php, file-deletion, auth-bypass, setup-mode, get-request, adminpanel.webHighcsrfphpfile-deletionauth-bypasssetup-modeget-requestadminpanelGogs Admin User Edit CSRF to Git Hook RCEhttps://poc.intelseclab.com/pocs/web/2026-07-03_gogs-admin-csrf-git-hook-rce/Fri, 03 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-03_gogs-admin-csrf-git-hook-rce/Critical severity — web · None assigned as of 2026-07-03. Status: Weaponized. Affects: Gogs (self-hosted Git service). Tags: gogs, csrf, git-hooks, privilege-escalation, rce, admin-takeover, git, self-hosted.webCriticalgogscsrfgit-hooksprivilege-escalationrceadmin-takeovergitself-hosted