Cwe-284 — PoC Archivehttps://poc.intelseclab.com/tags/cwe-284/Latest proof-of-concept entries.Hugoen-usMon, 06 Jul 2026 00:00:00 +0000Twonky Server 8.5.2 Unauthenticated `/nmc/rpc/` Auth Bypass & Admin Credential Log Leak (CVE-2025-13315)https://poc.intelseclab.com/pocs/network/2026-07-06_cve-2025-13315-twonky-server-auth-bypass/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-06_cve-2025-13315-twonky-server-auth-bypass/Critical severity (CVSS 9.8) — network · CVE-2025-13315. Status: PoC. Affects: Twonky Server (Lynx Technology), a DLNA/UPnP media server. Tags: twonky-server, dlna, upnp, media-server, auth-bypass, access-control, information-disclosure, credential-leak, cwe-284, unauthenticated, nuclei.networkCriticaltwonky-serverdlnaupnpmedia-serverauth-bypassaccess-controlinformation-disclosurecredential-leakcwe-284unauthenticatednucleiFrontend Admin by DynamiApps — Unauthenticated Administrator Account Creation (CVE-2025-13342)https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-13342-frontend-admin-unauth-admin-creation/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-13342-frontend-admin-unauth-admin-creation/Critical severity (CVSS 9.8) — web · CVE-2025-13342. Status: Weaponized. Affects: Frontend Admin by DynamiApps (WordPress plugin built on Advanced Custom Fields / ACF frontend forms). Tags: wordpress, wordpress-plugin, frontend-admin, dynamiapps, acf, advanced-custom-fields, broken-access-control, cwe-284, privilege-escalation, unauthenticated, admin-takeover, python.webCriticalwordpresswordpress-pluginfrontend-admindynamiappsacfadvanced-custom-fieldsbroken-access-controlcwe-284privilege-escalationunauthenticatedadmin-takeoverpythonFiberHome HG6145F1 Predictable Default Wi-Fi PSK Derived from Broadcast SSID (CVE-2025-63353)https://poc.intelseclab.com/pocs/network/2026-07-06_cve-2025-63353-fiberhome-predictable-wifi-psk/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-06_cve-2025-63353-fiberhome-predictable-wifi-psk/Critical severity (CVSS 9.8) — network · CVE-2025-63353 / GHSA-cg2x-c25f-6327. Status: PoC. Affects: FiberHome HG6145F1 GPON ONT (Wuhan FiberHome International Technologies). Tags: fiberhome, hg6145f1, gpon-ont, predictable-psk, default-credentials, wpa2, wifi, cwe-284, cwe-1392.networkCriticalfiberhomehg6145f1gpon-ontpredictable-pskdefault-credentialswpa2wificwe-284cwe-1392Veno File Manager Incorrect Access Control — Application Log Extraction (CVE-2026-37067)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-37067-veno-file-manager-log-disclosure/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-37067-veno-file-manager-log-disclosure/Medium severity — web · CVE-2026-37067. Status: PoC. Affects: Veno File Manager Project. Tags: veno-file-manager, incorrect-access-control, log-disclosure, unauthenticated, cwe-284.webMediumveno-file-managerincorrect-access-controllog-disclosureunauthenticatedcwe-284Linux Kernel PPP Unprivileged User-Namespace Precondition Probe — CVE-2026-53075https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-53075-ppp-userns-probe/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-53075-ppp-userns-probe/Info severity — binary · CVE-2026-53075. Status: PoC. Affects: Linux kernel, PPP (/dev/ppp) subsystem. Tags: linux-kernel, ppp, user-namespace, unshare, ioctl, privilege-check, cwe-284.binaryInfolinux-kernelpppuser-namespaceunshareioctlprivilege-checkcwe-284