https://poc.intelseclab.com/tags/docker-lab/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-22738-spring-ai-spel-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-22738-spring-ai-spel-rce/Critical severity (CVSS 9.8) — web · CVE-2026-22738. Status: Weaponized. Affects: Spring AI spring-ai-core (SimpleVectorStore). Tags: spring-ai, spel-injection, java, rce, vector-store, unauthenticated, cwe-94, docker-lab.webCriticalspring-aispel-injectionjavarcevector-storeunauthenticatedcwe-94docker-labhttps://poc.intelseclab.com/pocs/cloud/2026-07-05_cve-2026-32604-spinnaker-git-clone-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/cloud/2026-07-05_cve-2026-32604-spinnaker-git-clone-rce/Critical severity (CVSS 10) — cloud · CVE-2026-32604 (CWE-78). Status: PoC. Affects: Spinnaker (Clouddriver service) — continuous delivery / multi-cloud orchestration platform. Tags: spinnaker, clouddriver, command-injection, rce, cd-pipeline, cloud-credentials, shell-injection, docker-lab.cloudCriticalspinnakerclouddrivercommand-injectionrcecd-pipelinecloud-credentialsshell-injectiondocker-labhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-41179-rclone-rc-api-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-41179-rclone-rc-api-rce/Critical severity (CVSS 9.8) — web · CVE-2026-41179. Status: Weaponized. Affects: rclone (Remote Control / rcd HTTP API). Tags: rclone, rce, unauthenticated, webdav, rc-api, command-injection, docker-lab.webCriticalrclonerceunauthenticatedwebdavrc-apicommand-injectiondocker-labhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-21876-crs-waf-multipart-bypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-21876-crs-waf-multipart-bypass/Critical severity — web · CVE-2026-21876. Status: PoC. Tags: waf-bypass, owasp-crs, modsecurity, multipart-form-data, charset-smuggling, xss, docker-lab.webCriticalwaf-bypassowasp-crsmodsecuritymultipart-form-datacharset-smugglingxssdocker-labhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-40701-nginx-resolver-ocsp-uaf/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-40701-nginx-resolver-ocsp-uaf/Medium severity (CVSS 6.3) — web · CVE-2026-40701. Status: PoC. Affects: nginx (open source). Tags: nginx, use-after-free, ocsp-stapling, resolver, memory-corruption, docker-lab, tls.webMediumnginxuse-after-freeocsp-staplingresolvermemory-corruptiondocker-labtlshttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-42926-nginx-http2-frame-injection/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-42926-nginx-http2-frame-injection/High severity — web · CVE-2026-42926. Status: PoC. Affects: NGINX (HTTP/2 upstream proxying). Tags: nginx, http2, frame-injection, reverse-proxy, request-smuggling, docker-lab.webHighnginxhttp2frame-injectionreverse-proxyrequest-smugglingdocker-labhttps://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-32710-mariadb-json-schema-udf-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-32710-mariadb-json-schema-udf-rce/Critical severity — binary · CVE-2026-32710. Status: PoC. Affects: MariaDB (JSON_SCHEMA_VALID() SQL function). Tags: mariadb, mysql, heap-overflow, privilege-escalation, udf, raptor-udf, sql, json, docker-lab.binaryCriticalmariadbmysqlheap-overflowprivilege-escalationudfraptor-udfsqljsondocker-labhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-42048-langflow-kb-path-traversal/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-42048-langflow-kb-path-traversal/High severity — web · CVE-2026-42048 (GHSA-9whx-c884-c68q). Status: PoC. Affects: Langflow (Knowledge Bases bulk delete API). Tags: langflow, path-traversal, arbitrary-file-deletion, cwe-22, api, docker-lab, knowledge-base.webHighlangflowpath-traversalarbitrary-file-deletioncwe-22apidocker-labknowledge-basehttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-53435-jenkins-deser-file-read/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-53435-jenkins-deser-file-read/High severity (CVSS 9.1) — web · CVE-2026-53435 (Jenkins SECURITY-3707). Status: PoC. Affects: Jenkins (core), View configuration (config.xml) deserialization path. Tags: jenkins, deserialization, classfilter-bypass, xstream, config-xml, stapler, arbitrary-file-read, docker-lab, cwe-502.webHighjenkinsdeserializationclassfilter-bypassxstreamconfig-xmlstaplerarbitrary-file-readdocker-labcwe-502https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-1281-ivanti-epmm-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-1281-ivanti-epmm-rce/Critical severity — network · CVE-2026-1281, CVE-2026-1340. Status: PoC. Affects: Ivanti Endpoint Manager Mobile (EPMM), map-appstore-url CGI handler. Tags: ivanti, epmm, mobileiron, pre-auth-rce, bash, arithmetic-expansion, command-injection, docker-lab.networkCriticalivantiepmmmobileironpre-auth-rcebasharithmetic-expansioncommand-injectiondocker-labhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-42589-gotenberg-exiftool-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-42589-gotenberg-exiftool-rce/Critical severity (CVSS 9.8) — web · CVE-2026-42589. Status: PoC. Affects: Gotenberg (document/PDF conversion microservice). Tags: gotenberg, exiftool, command-injection, cwe-78, unauthenticated, rce, docker-lab, nuclei.webCriticalgotenbergexiftoolcommand-injectioncwe-78unauthenticatedrcedocker-labnucleihttps://poc.intelseclab.com/pocs/misc/2026-07-05_cve-2026-54316-claude-code-webfetch-hf-exfil/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/misc/2026-07-05_cve-2026-54316-claude-code-webfetch-hf-exfil/Medium severity — misc · CVE-2026-54316 (GHSA-fg94-h982-f3mm). Status: PoC. Affects: @anthropic-ai/claude-code (npm package, Claude Code CLI). Tags: claude-code, webfetch, prompt-injection, exfiltration, huggingface, allow-list-bypass, agentic-ai, docker-lab, cwe-183.miscMediumclaude-codewebfetchprompt-injectionexfiltrationhuggingfaceallow-list-bypassagentic-aidocker-labcwe-183https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-2576-business-directory-plugin-sqli/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-2576-business-directory-plugin-sqli/High severity (CVSS 7.5) — web · CVE-2026-2576. Status: Weaponized. Affects: Business Directory Plugin (Easy Listing Directories) for WordPress. Tags: wordpress, sqli, time-based-blind, business-directory-plugin, unauthenticated, cwe-89, wpdb, docker-lab.webHighwordpresssqlitime-based-blindbusiness-directory-pluginunauthenticatedcwe-89wpdbdocker-labhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-29145-tomcat-mtls-ocsp-bypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-29145-tomcat-mtls-ocsp-bypass/Critical severity (CVSS 9.1) — web · CVE-2026-29145. Status: PoC. Affects: Apache Tomcat (CLIENT_CERT / Mutual TLS authentication). Tags: tomcat, mtls, client-cert, ocsp, auth-bypass, revocation-check, docker-lab, java.webCriticaltomcatmtlsclient-certocspauth-bypassrevocation-checkdocker-labjava