Data-Exfiltration — PoC Archivehttps://poc.intelseclab.com/tags/data-exfiltration/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000WordPress "Form Maker" Plugin Unauthenticated SQL Injection — CVE-2026-3359https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-3359-formmaker-wordpress-sqli/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-3359-formmaker-wordpress-sqli/Critical severity — web · CVE-2026-3359. Status: PoC. Affects: WordPress "Form Maker" plugin by Web10. Tags: wordpress, sql-injection, form-maker, unauthenticated, admin-ajax, wp-plugin, data-exfiltration.webCriticalwordpresssql-injectionform-makerunauthenticatedadmin-ajaxwp-plugindata-exfiltrationSliver C2 MCP Server Unauthenticated CORS/Preflight Bypass (CVE-2026-34227)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-34227-sliver-mcp-cors-bypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-34227-sliver-mcp-cors-bypass/High severity — web · CVE-2026-34227 (GHSA-6fpf-248c-m7wm). Status: PoC. Affects: Sliver C2 framework — MCP (Model Context Protocol) server interface. Tags: sliver, c2, mcp, cors, csrf, sse, cross-origin, data-exfiltration.webHighsliverc2mcpcorscsrfssecross-origindata-exfiltrationpdfmake Server-Side Request Forgery via Unvalidated Document URLs (CVE-2026-26801)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-26801-pdfmake-ssrf/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-26801-pdfmake-ssrf/High severity — web · CVE-2026-26801. Status: Weaponized. Affects: pdfmake (Node.js PDF generation library), src/URLResolver.js. Tags: ssrf, pdfmake, node-js, cloud-metadata, aws-imds, cwe-918, credential-theft, data-exfiltration.webHighssrfpdfmakenode-jscloud-metadataaws-imdscwe-918credential-theftdata-exfiltrationadx-mcp-server KQL Injection via table_name Parameter (CVE-2026-33980)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-33980-adx-mcp-server-kql-injection/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-33980-adx-mcp-server-kql-injection/High severity (CVSS 8.8) — web · CVE-2026-33980. Status: PoC. Affects: adx-mcp-server (pab1it0/adx-mcp-server). Tags: mcp, kql-injection, azure-data-explorer, ai-agent, prompt-injection, cwe-943, data-exfiltration.webHighmcpkql-injectionazure-data-explorerai-agentprompt-injectioncwe-943data-exfiltrationDrupal Core PostgreSQL SQL Injection (CVE-2026-9082)https://poc.intelseclab.com/pocs/web/2026-05-30_drupal-core-postgresql-sql-injection/Sat, 30 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-30_drupal-core-postgresql-sql-injection/Critical severity — web · CVE-2026-9082 / SA-CORE-2026-004. Status: Patched. Affects: Drupal Core. Tags: SQLi, Drupal, PostgreSQL, JSON:API, unauthenticated, data-exfiltration.webCriticalSQLiDrupalPostgreSQLJSON:APIunauthenticateddata-exfiltration