Cwe-321 — PoC Archivehttps://poc.intelseclab.com/tags/cwe-321/Latest proof-of-concept entries.Hugoen-usSun, 12 Jul 2026 00:00:00 +0000Flowise Enterprise Authentication Bypass via Hardcoded Default JWT Secrets (CVE-2026-56271)https://poc.intelseclab.com/pocs/web/2026-07-12_cve-2026-56271-flowise-hardcoded-jwt-authbypass/Sun, 12 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-12_cve-2026-56271-flowise-hardcoded-jwt-authbypass/Critical severity (CVSS 9.8) — web · CVE-2026-56271 (GHSA-cc4f-hjpj-g9p8). Status: Weaponized (functional PoC forges valid admin JWTs and confirms bypass against real endpoints). Affects: Flowise — open-source low-code LLM/agent orchestration platform (enterprise edition, passport authentication middleware). Tags: flowise, ai-gateway, llm-orchestration, jwt, hardcoded-secret, authentication-bypass, cwe-321, unauthenticated, remote, privilege-escalation.webCriticalflowiseai-gatewayllm-orchestrationjwthardcoded-secretauthentication-bypasscwe-321unauthenticatedremoteprivilege-escalationGladinet CentreStack / Triofox Hardcoded AES Key Access-Ticket Forgery to Arbitrary File Read (CVE-2025-14611)https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-14611-centrestack-triofox-file-read/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-14611-centrestack-triofox-file-read/Critical severity (CVSS 9.8) — web · CVE-2025-14611. Status: Weaponized. Affects: Gladinet CentreStack and Triofox (GladCtrl64.dll / filesvr.dn file-download handler). Tags: gladinet, centrestack, triofox, hardcoded-key, aes-256-cbc, access-ticket-forgery, arbitrary-file-read, authentication-bypass, iis-app-pool, python, cwe-798, cwe-321.webCriticalgladinetcentrestacktriofoxhardcoded-keyaes-256-cbcaccess-ticket-forgeryarbitrary-file-readauthentication-bypassiis-app-poolpythoncwe-798cwe-321Lansweeper lsrunase 2.0 / lsencrypt 2.0 — RC4 Password Recovery (CVE-2026-39031)https://poc.intelseclab.com/pocs/crypto/2026-07-05_cve-2026-39031-lansweeper-lsrunase-rc4-key-recovery/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/crypto/2026-07-05_cve-2026-39031-lansweeper-lsrunase-rc4-key-recovery/High severity — crypto · CVE-2026-39031. Status: Weaponized. Affects: Lansweeper lsrunase 2.0 / lsencrypt 2.0. Tags: lansweeper, rc4, hardcoded-key, password-recovery, cryptography, offline-decryption, cwe-321.cryptoHighlansweeperrc4hardcoded-keypassword-recoverycryptographyoffline-decryptioncwe-321HAXcms Node.js Private Key Disclosure via Broken HMAC (CVE-2026-46395)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-46395-haxcms-hmac-key-leak/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-46395-haxcms-hmac-key-leak/Critical severity (CVSS 9.8) — web · CVE-2026-46395. Status: PoC. Affects: HAXcms Node.js backend (elmsln/HAXcms, haxcms-nodejs) — src/lib/HAXCMS.js. Tags: haxcms, nodejs, hmac, jwt-forgery, cwe-321, cwe-200, key-disclosure, cms.webCriticalhaxcmsnodejshmacjwt-forgerycwe-321cwe-200key-disclosurecms