Dotnet — PoC Archivehttps://poc.intelseclab.com/tags/dotnet/Latest proof-of-concept entries.Hugoen-usMon, 06 Jul 2026 00:00:00 +0000ConnectWise Automate Adversary-in-the-Middle Remote Code Execution (CVE-2025-11492)https://poc.intelseclab.com/pocs/network/2026-07-06_cve-2025-11492-connectwise-automate-aitm-rce/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-06_cve-2025-11492-connectwise-automate-aitm-rce/Critical severity (CVSS 9.6) — network · CVE-2025-11492. Status: Weaponized. Affects: ConnectWise Automate (LabTech) RMM Agent. Tags: connectwise-automate, labtech, rmm, aitm, mitm, plugin-hijack, unencrypted-http, des3, privilege-escalation, python, csharp, dnspy, dotnet.networkCriticalconnectwise-automatelabtechrmmaitmmitmplugin-hijackunencrypted-httpdes3privilege-escalationpythoncsharpdnspydotnetASP.NET Core Kestrel HTTP Request Smuggling (CVE-2025-55315)https://poc.intelseclab.com/pocs/network/2026-07-06_cve-2025-55315-kestrel-http-request-smuggling/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-06_cve-2025-55315-kestrel-http-request-smuggling/Critical severity (CVSS 9.9) — network · CVE-2025-55315. Status: Weaponized. Affects: ASP.NET Core Kestrel web server (Microsoft.AspNetCore.Server.Kestrel). Tags: aspnet-core, kestrel, http-request-smuggling, chunked-transfer-encoding, dotnet, python, cwe-444, ssrf, cache-poisoning, webshell-upload.networkCriticalaspnet-corekestrelhttp-request-smugglingchunked-transfer-encodingdotnetpythoncwe-444ssrfcache-poisoningwebshell-upload