Electron — PoC Archivehttps://poc.intelseclab.com/tags/electron/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000Termix Stored XSS via Malicious SVG Upload -> LFI / Session Hijack (CVE-2026-22804 / GHSA-m3cv-5hgp-hv35)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-22804-termix-stored-xss/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-22804-termix-stored-xss/High severity — web · CVE-2026-22804 (GHSA-m3cv-5hgp-hv35). Status: Weaponized. Affects: Termix (Electron-based SSH/terminal manager), File Manager component (FileViewer.tsx). Tags: termix, electron, stored-xss, svg-injection, session-hijacking, lfi, file-manager, ssh.webHightermixelectronstored-xsssvg-injectionsession-hijackinglfifile-managersshDiscord Desktop Client Uncontrolled Search Path Element / Local Code Execution (CVE-2026-0776)https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-0776-discord-search-path/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-0776-discord-search-path/High severity (CVSS 7.3) — binary · CVE-2026-0776 (ZDI-CAN-27057, credit: Trend Micro Zero Day Initiative). Status: PoC. Affects: Discord Desktop Client (Windows). Tags: discord, cwe-427, search-path-hijack, node-modules, local-code-execution, windows, electron.binaryHighdiscordcwe-427search-path-hijacknode-moduleslocal-code-executionwindowselectronLunar Client Modrinth Explore Raw-HTML to Local Launcher Execution Chainhttps://poc.intelseclab.com/pocs/binary/2026-07-03_lunar-client-modrinth-rce-chain/Fri, 03 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-07-03_lunar-client-modrinth-rce-chain/Critical severity (CVSS 3.1) — binary · None assigned as of 2026-07-03. Status: Incomplete PoC. Affects: Lunar Client (Electron desktop application), Modrinth Explore integration. Tags: lunar-client, electron, minecraft, modrinth, raw-html-injection, ipc, rce, sandbox-escape, launcher-abuse.binaryCriticallunar-clientelectronminecraftmodrinthraw-html-injectionipcrcesandbox-escapelauncher-abuse