PoC Archive PoC Archive

tag

Data-Exfiltration

  • CVE-2026-3359 web CRITICAL

    WordPress "Form Maker" Plugin Unauthenticated SQL Injection — CVE-2026-3359

    The WordPress "Form Maker" plugin (up to version 1.15.42) passes attacker-controlled input from a crafted inputs[2|typecheckbox|all] field on the admin-ajax.php?action=fmreloadinput endpoint into a SQL query without adequate sanitization, allowing…

    Unverified 2026-07-05
  • CVE-2026-34227 web HIGH

    Sliver C2 MCP Server Unauthenticated CORS/Preflight Bypass (CVE-2026-34227)

    Sliver's MCP server exposes an unauthenticated Server-Sent Events (SSE) interface on 127.0.0.1:8080 and responds to every request with Access-Control-Allow-Origin: . Because the underlying mcp-go library does not validate the request's Content-Type, a…

    Unverified 2026-07-05
  • CVE-2026-26801 web HIGH

    pdfmake Server-Side Request Forgery via Unvalidated Document URLs (CVE-2026-26801)

    CVE-2026-26801 is a Server-Side Request Forgery vulnerability in pdfmake, a popular Node.js PDF generation library. When a document definition (docDefinition) references remote resources in fields such as images, attachments, or files, pdfmake's…

    Patched 2026-07-05
  • CVE-2026-33980 web HIGH 8.8

    adx-mcp-server KQL Injection via table_name Parameter (CVE-2026-33980)

    adx-mcp-server is a Model Context Protocol server that exposes tools letting an AI agent query an Azure Data Explorer (Kusto/KQL) cluster. Three "safe" metadata tools — gettableschema, sampletabledata, and gettabledetails — build their KQL queries by directly…

    Patched 2026-07-05
  • CVE-2026-9082 / SA-CORE-2026-004 web CRITICAL KEV EPSS 88%

    Drupal Core PostgreSQL SQL Injection (CVE-2026-9082)

    CVE-2026-9082 is an unauthenticated SQL injection in Drupal Core's PostgreSQL entity-query handling for JSON:API filters. User-controlled array keys are used to build SQL placeholder names without proper sanitization, enabling injection into generated SQL. On…

    Patched 2026-05-30