Cwe-863 — PoC Archivehttps://poc.intelseclab.com/tags/cwe-863/Latest proof-of-concept entries.Hugoen-usMon, 06 Jul 2026 00:00:00 +0000Real Spaces WordPress Theme Unauthenticated Privilege Escalation via `imic_agent_register` (CVE-2025-6758)https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-6758-realspaces-privesc/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-6758-realspaces-privesc/Critical severity (CVSS 9.8) — web · CVE-2025-6758. Status: Weaponized. Affects: Real Spaces - Properties Directory Theme for WordPress (imic_agent_register AJAX handler). Tags: wordpress, real-spaces, imic, privilege-escalation, unauthenticated, admin-ajax, role-assignment, cwe-269, cwe-863, python.webCriticalwordpressreal-spacesimicprivilege-escalationunauthenticatedadmin-ajaxrole-assignmentcwe-269cwe-863pythonFreePBX Framework Module Authentication Bypass via Forged Authorization Header (CVE-2025-66039)https://poc.intelseclab.com/pocs/network/2026-07-06_cve-2025-66039-freepbx-auth-bypass/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-06_cve-2025-66039-freepbx-auth-bypass/Critical severity (CVSS 9.8) — network · CVE-2025-66039. Status: PoC. Affects: FreePBX (Sangoma) framework module — web-based administration panel for Asterisk-based VoIP/PBX systems. Tags: freepbx, sangoma, voip, telephony, authentication-bypass, access-control, authtype, webserver-auth, cwe-287, cwe-863, nuclei, version-fingerprinting.networkCriticalfreepbxsangomavoiptelephonyauthentication-bypassaccess-controlauthtypewebserver-authcwe-287cwe-863nucleiversion-fingerprintingLiteLLM Proxy Privilege Escalation via `/user/update` (CVE-2026-47102)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-47102-litellm-privesc-user-update/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-47102-litellm-privesc-user-update/High severity (CVSS 8.8) — web · CVE-2026-47102. Status: PoC. Affects: LiteLLM (LLM API proxy / gateway). Tags: litellm, privilege-escalation, broken-access-control, cwe-863, api-authorization, llm-proxy.webHighlitellmprivilege-escalationbroken-access-controlcwe-863api-authorizationllm-proxyLiteLLM /config/update Broken Access Control (CVE-2026-35029)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-35029-litellm-config-broken-access-control/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-35029-litellm-config-broken-access-control/High severity (CVSS 8.8) — web · CVE-2026-35029. Status: Weaponized. Affects: LiteLLM proxy. Tags: broken-access-control, litellm, ai-gateway, config-update, ssrf, rce, environment-variable-theft, cwe-863.webHighbroken-access-controllitellmai-gatewayconfig-updatessrfrceenvironment-variable-theftcwe-863Kanboard — Missing Access Control on Plugin Installation Leads to Administrative RCE via Webshell Plugin (CVE-2026-25924)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-25924-kanboard-plugin-webshell/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-25924-kanboard-plugin-webshell/High severity (CVSS 8.4) — web · CVE-2026-25924 / GHSA-grch-p7vf-vc4f. Status: Weaponized. Affects: Kanboard (project management application). Tags: kanboard, rce, webshell, plugin-installation, incorrect-authorization, cwe-863, cwe-94, admin-bypass, backdoor.webHighkanboardrcewebshellplugin-installationincorrect-authorizationcwe-863cwe-94admin-bypassbackdoorGitea OAuth2 Scope Enforcement Bypass via HTTP Basic Auth — CVE-2026-28699https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-28699-gitea-oauth2-scope-bypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-28699-gitea-oauth2-scope-bypass/High severity — web · CVE-2026-28699. Status: PoC. Affects: Gitea (code.gitea.io/gitea). Tags: gitea, oauth2, scope-bypass, basic-auth, incorrect-authorization, cwe-863, api.webHighgiteaoauth2scope-bypassbasic-authincorrect-authorizationcwe-863api