<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Detection — PoC Archive</title><link>https://poc.intelseclab.com/tags/detection/</link><description>Latest proof-of-concept entries.</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Tue, 11 Aug 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://poc.intelseclab.com/tags/detection/index.xml" rel="self" type="application/rss+xml"/><item><title>Active Directory — SPN Unicode Collision Detection Scanner (CVE-2026-25177)</title><link>https://poc.intelseclab.com/pocs/network/2026-08-11_cve-2026-25177-ad-spn-unicode-collision-detector/</link><pubDate>Tue, 11 Aug 2026 00:00:00 +0000</pubDate><guid>https://poc.intelseclab.com/pocs/network/2026-08-11_cve-2026-25177-ad-spn-unicode-collision-detector/</guid><description>High severity (CVSS 8.8) — network · CVE-2026-25177. Status: Patched. Affects: Microsoft Active Directory Domain Services, Service Principal Name (SPN) validation. Tags: windows, active-directory, kerberos, spn, unicode, homoglyph, privilege-escalation, detection, scanner, ldap, CWE-641, microsoft, CVE-2026-25177.</description><category>network</category><category>High</category><category>windows</category><category>active-directory</category><category>kerberos</category><category>spn</category><category>unicode</category><category>homoglyph</category><category>privilege-escalation</category><category>detection</category><category>scanner</category><category>ldap</category><category>CWE-641</category><category>microsoft</category><category>CVE-2026-25177</category></item><item><title>FortiAuthenticator Unauthenticated RCE Endpoint Probe (CVE-2026-44277)</title><link>https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-44277-fortiauthenticator-unauth-rce/</link><pubDate>Sun, 05 Jul 2026 00:00:00 +0000</pubDate><guid>https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-44277-fortiauthenticator-unauth-rce/</guid><description>Critical severity — web · CVE-2026-44277. Status: PoC. Affects: Fortinet FortiAuthenticator. Tags: fortinet, fortiauthenticator, unauthenticated-rce, api, endpoint-probe, detection.</description><category>web</category><category>Critical</category><category>fortinet</category><category>fortiauthenticator</category><category>unauthenticated-rce</category><category>api</category><category>endpoint-probe</category><category>detection</category></item><item><title>CVE-2026-50656 RoguePlanet — Safe Vulnerability Checker (Resurface)</title><link>https://poc.intelseclab.com/pocs/binary/2026-06-26_cve-2026-50656-rogueplanet-checker/</link><pubDate>Fri, 26 Jun 2026 00:00:00 +0000</pubDate><guid>https://poc.intelseclab.com/pocs/binary/2026-06-26_cve-2026-50656-rogueplanet-checker/</guid><description>High severity (CVSS 7.8) — binary · CVE-2026-50656. Status: Researched. Affects: Microsoft Malware Protection Engine (mpengine.dll, MsMpEng.exe). Tags: LPE, Windows Defender, TOCTOU, symlink, reparse-point, junction, CWE-59, checker, detection, non-destructive, MsMpEng.</description><category>binary</category><category>High</category><category>LPE</category><category>Windows Defender</category><category>TOCTOU</category><category>symlink</category><category>reparse-point</category><category>junction</category><category>CWE-59</category><category>checker</category><category>detection</category><category>non-destructive</category><category>MsMpEng</category></item></channel></rss>