Cwe-88 — PoC Archivehttps://poc.intelseclab.com/tags/cwe-88/Latest proof-of-concept entries.Hugoen-usMon, 06 Jul 2026 00:00:00 +0000pgAdmin 4 Restore Feature Regex-Bypass Command Injection RCE (CVE-2025-13780)https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-13780-pgadmin4-regex-bypass-rce/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-13780-pgadmin4-regex-bypass-rce/Critical severity (CVSS 9.1) — web · CVE-2025-13780. Status: Weaponized. Affects: pgAdmin 4. Tags: pgadmin4, postgresql, regex-bypass, command-injection, psql-meta-command, utf8-bom, crlf-injection, rce, python, cwe-77, cwe-88.webCriticalpgadmin4postgresqlregex-bypasscommand-injectionpsql-meta-commandutf8-bomcrlf-injectionrcepythoncwe-77cwe-88Weblate Arbitrary File Read via ssh-keyscan Host Argument Injection — CVE-2026-24126https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-24126-weblate-ssh-keyscan-file-read/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-24126-weblate-ssh-keyscan-file-read/High severity (CVSS 6.5) — web · CVE-2026-24126. Status: PoC. Affects: Weblate (self-hosted translation platform). Tags: weblate, argument-injection, command-injection, ssh-keyscan, arbitrary-file-read, authenticated, python, cwe-88.webHighweblateargument-injectioncommand-injectionssh-keyscanarbitrary-file-readauthenticatedpythoncwe-88