Cwe-347 — PoC Archivehttps://poc.intelseclab.com/tags/cwe-347/Latest proof-of-concept entries.Hugoen-usSun, 19 Jul 2026 00:00:00 +0000SimpleHelp OIDC Authentication Bypass via Unverified JWT Signature (CVE-2026-48558)https://poc.intelseclab.com/pocs/web/2026-07-19_cve-2026-48558-simplehelp-oidc-auth-bypass/Sun, 19 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-19_cve-2026-48558-simplehelp-oidc-auth-bypass/Critical severity (CVSS 10) — web · CVE-2026-48558. Status: Weaponized — forges valid privileged sessions with no credentials. Affects: SimpleHelp — remote support / RMM (remote monitoring and management) platform, OIDC authentication flow. Tags: simplehelp, rmm, oidc, jwt, alg-none, cwe-347, authentication-bypass, unauthenticated, remote, kev, actively-exploited, ransomware.webCriticalsimplehelprmmoidcjwtalg-nonecwe-347authentication-bypassunauthenticatedremotekevactively-exploitedransomwareFortiOS/FortiProxy/FortiSwitchManager/FortiWeb FortiCloud SSO Authentication Bypass Detection Tool (CVE-2025-59718)https://poc.intelseclab.com/pocs/network/2026-07-06_cve-2025-59718-fortios-version-detection-scanner/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-06_cve-2025-59718-fortios-version-detection-scanner/Critical severity (CVSS 9.8) — network · CVE-2025-59718 (Fortinet advisory FG-IR-25-647; related: CVE-2025-59719). Status: PoC. Affects: Fortinet FortiOS, FortiProxy, FortiSwitchManager, FortiWeb. Tags: fortinet, fortios, fortiproxy, fortiswitchmanager, fortiweb, forticloud-sso, authentication-bypass, version-detection, ssh, scanner, cwe-347.networkCriticalfortinetfortiosfortiproxyfortiswitchmanagerfortiwebforticloud-ssoauthentication-bypassversion-detectionsshscannercwe-347Nezha Dashboard Path Traversal → JWT Secret Leak → Token Forgery — CVE-2026-53519https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-53519-nezha-path-traversal-jwt-forgery/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-53519-nezha-path-traversal-jwt-forgery/Info severity — web · CVE-2026-53519 (GHSA-5c25-7vpj-9mqh). Status: PoC. Affects: Nezha Dashboard (monitoring/agent management panel). Tags: nezha, path-traversal, jwt-forgery, unauthenticated, config-disclosure, sqlite, privilege-escalation, cwe-22, cwe-347.webInfonezhapath-traversaljwt-forgeryunauthenticatedconfig-disclosuresqliteprivilege-escalationcwe-22cwe-347Nextcloud user_oidc ID4me JWT Signature Bypass (CVE-2026-45156)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-45156-nextcloud-id4me-jwt-bypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-45156-nextcloud-id4me-jwt-bypass/High severity (CVSS 8.1) — web · CVE-2026-45156. Status: PoC. Affects: Nextcloud user_oidc app — ID4me identity provider integration. Tags: nextcloud, user_oidc, id4me, jwt, alg-none, authentication-bypass, cwe-347.webHighnextclouduser_oidcid4mejwtalg-noneauthentication-bypasscwe-347