Cwe-200 — PoC Archivehttps://poc.intelseclab.com/tags/cwe-200/Latest proof-of-concept entries.Hugoen-usMon, 06 Jul 2026 00:00:00 +0000RestroPress WordPress Plugin Unauthenticated Information Exposure Leading to JWT Forgery / Account Takeover (CVE-2025-9209)https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-9209-restropress-jwt-forgery/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-9209-restropress-jwt-forgery/Critical severity (CVSS 9.8) — web · CVE-2025-9209. Status: Weaponized. Affects: RestroPress – Online Food Ordering System (WordPress plugin). Tags: restropress, wordpress, wordpress-plugin, information-exposure, jwt, authentication-bypass, account-takeover, rest-api, mass-scanner, cwe-200, cwe-287, python.webCriticalrestropresswordpresswordpress-plugininformation-exposurejwtauthentication-bypassaccount-takeoverrest-apimass-scannercwe-200cwe-287pythonVeno File Manager Absolute Path Disclosure (CVE-2026-37069)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-37069-veno-file-manager-path-disclosure/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-37069-veno-file-manager-path-disclosure/Low severity — web · CVE-2026-37069. Status: PoC. Affects: Veno File Manager Project. Tags: veno-file-manager, path-disclosure, unauthenticated, information-disclosure, cwe-200.webLowveno-file-managerpath-disclosureunauthenticatedinformation-disclosurecwe-200Realtek rtl819x Jungle SDK Unauthenticated Kernel Memory R/W via Debug IOCTLs (CVE-2026-36355)https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-36355-realtek-rtl819x-kernel-memory-rw/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-36355-realtek-rtl819x-kernel-memory-rw/Critical severity — network · CVE-2026-36355. Status: Weaponized. Affects: Realtek rtl819x "Jungle SDK" out-of-tree Wi-Fi driver (rtl8192cd). Tags: realtek, rtl819x, router-firmware, kernel-memory, ioctl, wifi-driver, root, cwe-782, cwe-787, cwe-200.networkCriticalrealtekrtl819xrouter-firmwarekernel-memoryioctlwifi-driverrootcwe-782cwe-787cwe-200HAXcms Node.js Private Key Disclosure via Broken HMAC (CVE-2026-46395)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-46395-haxcms-hmac-key-leak/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-46395-haxcms-hmac-key-leak/Critical severity (CVSS 9.8) — web · CVE-2026-46395. Status: PoC. Affects: HAXcms Node.js backend (elmsln/HAXcms, haxcms-nodejs) — src/lib/HAXCMS.js. Tags: haxcms, nodejs, hmac, jwt-forgery, cwe-321, cwe-200, key-disclosure, cms.webCriticalhaxcmsnodejshmacjwt-forgerycwe-321cwe-200key-disclosurecms