Curl — PoC Archivehttps://poc.intelseclab.com/tags/curl/Latest proof-of-concept entries.Hugoen-usSun, 16 Aug 2026 00:00:00 +0000Cisco IMC Argument Injection to Root RCE (CVE-2026-20200)https://poc.intelseclab.com/pocs/network/2026-08-16_cve-2026-20200-cisco-imc-argument-injection-rce/Sun, 16 Aug 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-08-16_cve-2026-20200-cisco-imc-argument-injection-rce/Critical severity (CVSS 9.9) — network · CVE-2026-20200 / NSIDE-SA-2026-003. Status: Patched. Affects: Cisco Integrated Management Controller (CIMC). Tags: cisco, imc, cimc, argument-injection, rce, redfish, curl, reverse-shell, arm, file-read, file-write, CVE-2026-20200.networkCriticalciscoimccimcargument-injectionrceredfishcurlreverse-shellarmfile-readfile-writeCVE-2026-20200Xiongmai XM530 IP Camera ONVIF Authentication Bypass (CVE-2025-65856)https://poc.intelseclab.com/pocs/hardware/2026-07-06_cve-2025-65856-onvif-camera-auth-bypass/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/hardware/2026-07-06_cve-2025-65856-onvif-camera-auth-bypass/Critical severity (CVSS 9.8) — hardware · CVE-2025-65856. Status: Weaponized. Affects: Xiongmai XM530-based IP camera ONVIF service (tested on model XM530_50X50-WG_8M). Tags: xiongmai, xm530, onvif, ip-camera, iot, auth-bypass, access-control, information-disclosure, rtsp, cwe-306, cwe-287, python, bash, curl.hardwareCriticalxiongmaixm530onvifip-cameraiotauth-bypassaccess-controlinformation-disclosurertspcwe-306cwe-287pythonbashcurlMCPJam Inspector Unauthenticated Command Injection RCE (CVE-2026-23744)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-23744-mcpjam-inspector-htb-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-23744-mcpjam-inspector-htb-rce/Critical severity — web · CVE-2026-23744. Status: PoC. Affects: MCPJam Inspector v1.4.2. Tags: mcpjam-inspector, mcp, command-injection, rce, curl, hack-the-box, reverse-shell, chained-privesc.webCriticalmcpjam-inspectormcpcommand-injectionrcecurlhack-the-boxreverse-shellchained-privescLangflow Custom Component Remote Code Execution — CVE-2026-33017https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-33017-langflow-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-33017-langflow-rce/Critical severity — web · CVE-2026-33017. Status: PoC. Affects: Langflow (flow-building / LLM pipeline platform). Tags: langflow, rce, custom-component, code-execution, flow-builder, reverse-shell, curl.webCriticallangflowrcecustom-componentcode-executionflow-builderreverse-shellcurlcurl SMB Connection-Reuse Use-After-Free (CVE-2026-3805)https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-3805-curl-smb-use-after-free/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-3805-curl-smb-use-after-free/High severity — network · CVE-2026-3805. Status: PoC. Affects: curl / libcurl. Tags: curl, libcurl, use-after-free, smb, cwe-416, memory-corruption, asan.networkHighcurllibcurluse-after-freesmbcwe-416memory-corruptionasancurl SMTP EXPN Recipient CRLF Command Injectionhttps://poc.intelseclab.com/pocs/network/2026-07-03_curl-smtp-expn-crlf-injection/Fri, 03 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-03_curl-smtp-expn-crlf-injection/Medium severity — network · None assigned as of 2026-07-03. Status: PoC. Affects: curl / libcurl (SMTP support). Tags: curl, smtp, crlf-injection, command-injection, expn, vrfy, protocol-injection, libcurl.networkMediumcurlsmtpcrlf-injectioncommand-injectionexpnvrfyprotocol-injectionlibcurl