Cwe-943 — PoC Archivehttps://poc.intelseclab.com/tags/cwe-943/Latest proof-of-concept entries.Hugoen-usMon, 06 Jul 2026 00:00:00 +0000Mongoose `populate()` Match `$where` Bypass Command Injection (CVE-2025-23061)https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-23061-mongoose-command-injection/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-23061-mongoose-command-injection/Critical severity (CVSS 9) — web · CVE-2025-23061. Status: Weaponized. Affects: Mongoose (Node.js MongoDB ODM). Tags: mongoose, nodejs, nosql-injection, mongodb, populate, where-operator, command-injection, rce, cwe-943, cwe-94, express.webCriticalmongoosenodejsnosql-injectionmongodbpopulatewhere-operatorcommand-injectionrcecwe-943cwe-94expressgraphiti-core Cypher Injection via Unsanitized node_labels — CVE-2026-32247https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-32247-graphiti-cypher-injection/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-32247-graphiti-cypher-injection/High severity (CVSS 8.1) — web · CVE-2026-32247 (GHSA, getzep/graphiti). Status: PoC. Affects: graphiti-core (getzep/graphiti) — memory/graph layer used by AI agent frameworks, exposed via an MCP server. Tags: cypher-injection, neo4j, falkordb, graphiti, mcp, ai-agent, tenant-isolation-bypass, cwe-943.webHighcypher-injectionneo4jfalkordbgraphitimcpai-agenttenant-isolation-bypasscwe-943adx-mcp-server KQL Injection via table_name Parameter (CVE-2026-33980)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-33980-adx-mcp-server-kql-injection/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-33980-adx-mcp-server-kql-injection/High severity (CVSS 8.8) — web · CVE-2026-33980. Status: PoC. Affects: adx-mcp-server (pab1it0/adx-mcp-server). Tags: mcp, kql-injection, azure-data-explorer, ai-agent, prompt-injection, cwe-943, data-exfiltration.webHighmcpkql-injectionazure-data-explorerai-agentprompt-injectioncwe-943data-exfiltration