Cwe-290 — PoC Archivehttps://poc.intelseclab.com/tags/cwe-290/Latest proof-of-concept entries.Hugoen-usSat, 11 Jul 2026 00:00:00 +0000Gitea Docker Image Reverse-Proxy Authentication Bypass — "One Header, Any User" (CVE-2026-20896)https://poc.intelseclab.com/pocs/web/2026-07-11_cve-2026-20896-gitea-docker-reverse-proxy-auth-bypass/Sat, 11 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-11_cve-2026-20896-gitea-docker-reverse-proxy-auth-bypass/Critical severity (CVSS 9.8) — web · CVE-2026-20896 (GHSA-f75j-4cw6-rmx4). Status: Weaponized (public PoC + detector script, actively exploited in the wild per Sysdig). Affects: Gitea — official Docker images (gitea/gitea), both root and rootless variants. Tags: gitea, docker, authentication-bypass, reverse-proxy, header-spoofing, unauthenticated, remote, cwe-290, actively-exploited.webCriticalgiteadockerauthentication-bypassreverse-proxyheader-spoofingunauthenticatedremotecwe-290actively-exploitedJAY Login & Register "Switch Back" Cookie Authentication Bypass (CVE-2025-14440)https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-14440-jay-login-register-auth-bypass/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-14440-jay-login-register-auth-bypass/Critical severity (CVSS 9.8) — web · CVE-2025-14440. Status: Weaponized. Affects: JAY Login & Register (WordPress plugin). Tags: wordpress, jay-login-register, authentication-bypass, cookie-manipulation, unauthenticated, python, cwe-287, cwe-290.webCriticalwordpressjay-login-registerauthentication-bypasscookie-manipulationunauthenticatedpythoncwe-287cwe-290phpSysInfo IP Allowlist Bypass via X-Forwarded-For Spoofing — CVE-2026-55584https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-55584-phpsysinfo-xff-allowlist-bypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-55584-phpsysinfo-xff-allowlist-bypass/High severity (CVSS 7.5) — web · CVE-2026-55584 / GHSA-786w-p5pm-cvgh. Status: PoC. Affects: phpSysInfo. Tags: phpsysinfo, ip-spoofing, x-forwarded-for, access-control-bypass, cwe-290, information-disclosure.webHighphpsysinfoip-spoofingx-forwarded-foraccess-control-bypasscwe-290information-disclosureLiteLLM Proxy Unauthenticated Auth Bypass via Host-Header Route Confusion (CVE-2026-49468)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-49468-litellm-host-header-auth-bypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-49468-litellm-host-header-auth-bypass/Critical severity (CVSS 9.8) — web · CVE-2026-49468. Status: PoC. Affects: LiteLLM (BerriAI) proxy. Tags: litellm, llm-proxy, auth-bypass, host-header, route-confusion, cwe-290, fastapi, starlette, python.webCriticallitellmllm-proxyauth-bypasshost-headerroute-confusioncwe-290fastapistarlettepython