Golang — PoC Archivehttps://poc.intelseclab.com/tags/golang/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000WordPress "List Site Contributors" Plugin Reflected XSS Scanner (CVE-2026-0594)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-0594-listsitecontributors-xss/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-0594-listsitecontributors-xss/Medium severity — web · CVE-2026-0594. Status: PoC. Affects: "List Site Contributors" WordPress plugin. Tags: wordpress, xss, reflected-xss, wp-json, rest-api, plugin-vulnerability, golang, scanner.webMediumwordpressxssreflected-xsswp-jsonrest-apiplugin-vulnerabilitygolangscannerSliver C2 Server mTLS Nil-Pointer Panic / Infrastructure Kill-Switch — CVE-2026-29781https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-29781-sliver-c2-mtls-panic/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-29781-sliver-c2-mtls-panic/High severity — network · CVE-2026-29781 (GHSA-hx52-cv84-jr5v). Status: PoC. Affects: Sliver C2 server (BishopFox). Tags: sliver-c2, denial-of-service, nil-pointer-dereference, protobuf, mtls, golang, red-team-tooling.networkHighsliver-c2denial-of-servicenil-pointer-dereferenceprotobufmtlsgolangred-team-toolinggRPC-Go RBAC Authorization Bypass via Missing Leading Slash in `:path` (CVE-2026-33186)https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-33186-grpc-go-rbac-authz-bypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-33186-grpc-go-rbac-authz-bypass/High severity — network · CVE-2026-33186 (GHSA-p77j-4mvh-x3m3). Status: PoC. Affects: google.golang.org/grpc (grpc-go) authz package (SDK-level RBAC). Tags: grpc, grpc-go, rbac, authorization-bypass, http2, path-normalization, golang, access-control.networkHighgrpcgrpc-gorbacauthorization-bypasshttp2path-normalizationgolangaccess-controlDirtyDecrypt-Go — RxRPC rxgk Page-Cache Overwrite LPE (Go Port) — CVE-2026-31635https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-31635-dirtydecrypt-go-rxgk-lpe/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-31635-dirtydecrypt-go-rxgk-lpe/High severity — binary · CVE-2026-31635. Status: Weaponized. Affects: Linux kernel — net/rxrpc/rxgk_common.h (rxgk_decrypt_skb()). Tags: linux-kernel, lpe, rxrpc, rxgk, page-cache, dirty-pipe-variant, splice, golang, unprivileged.binaryHighlinux-kernellperxrpcrxgkpage-cachedirty-pipe-variantsplicegolangunprivileged