https://poc.intelseclab.com/tags/header-injection/Latest proof-of-concept entries.Hugoen-usSun, 16 Aug 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-08-16_cve-2026-33267-apache-trafficserver-header-spoof/Sun, 16 Aug 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-08-16_cve-2026-33267-apache-trafficserver-header-spoof/Critical severity (CVSS 10) — web · CVE-2026-33267 / GHSA-jrh6-9hgv-mqm7. Status: Patched (9.2.15 / 10.1.4). Affects: Apache Traffic Server. Tags: apache, traffic-server, ats, header-injection, metadata-spoof, cache-poisoning, acl-bypass, plugin, CVE-2026-33267.webCriticalapachetraffic-serveratsheader-injectionmetadata-spoofcache-poisoningacl-bypasspluginCVE-2026-33267https://poc.intelseclab.com/pocs/network/2026-07-31_cve-2022-40684-fortios-auth-bypass-scanner/Fri, 31 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-31_cve-2022-40684-fortios-auth-bypass-scanner/Critical severity (CVSS 9.8) — network · CVE-2022-40684. Status: Patched (FortiOS ≥7.2.2, ≥7.0.7; FortiProxy ≥7.2.1, ≥7.0.7; FortiSwitchManager ≥7.2.1). Affects: Fortinet FortiOS (FortiGate firewalls), FortiProxy web proxy, FortiSwitchManager web management interface / administrative REST API. Tags: fortios, fortiproxy, fortiswitchmanager, authentication-bypass, rest-api, header-injection, loopback-spoofing, fortigate, ssl-vpn, scanner.networkCriticalfortiosfortiproxyfortiswitchmanagerauthentication-bypassrest-apiheader-injectionloopback-spoofingfortigatessl-vpnscannerhttps://poc.intelseclab.com/pocs/web/2026-07-06_cve-2026-33453-camel-coap-header-injection-reproducer/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2026-33453-camel-coap-header-injection-reproducer/Critical severity (CVSS 9.8) — web · CVE-2026-33453. Status: Patched. Affects: Apache Camel camel-coap component (org.apache.camel.coap.CamelCoapResource), routes forwarding to camel-exec. Tags: apache-camel, camel-coap, coap, header-injection, rce, cwe-915, camel-exec, unauthenticated, udp, spring-boot.webCriticalapache-camelcamel-coapcoapheader-injectionrcecwe-915camel-execunauthenticatedudpspring-boothttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-42281-magicmirror-cors-ssrf/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-42281-magicmirror-cors-ssrf/Critical severity (CVSS 9.2) — web · CVE-2026-42281. Status: PoC. Affects: MagicMirror². Tags: ssrf, unauthenticated, magicmirror, cloud-metadata, secrets-exfiltration, header-injection, open-proxy, python.webCriticalssrfunauthenticatedmagicmirrorcloud-metadatasecrets-exfiltrationheader-injectionopen-proxypythonhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-34975-plunk-crlf-email-injection/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-34975-plunk-crlf-email-injection/High severity (CVSS 8.5) — web · CVE-2026-34975. Status: PoC. Affects: Plunk (useplunk/plunk). Tags: crlf-injection, email, plunk, mime, header-injection, bcc-injection, cwe-93.webHighcrlf-injectionemailplunkmimeheader-injectionbcc-injectioncwe-93https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-33453-apache-camel-coap-header-injection-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-33453-apache-camel-coap-header-injection-rce/Critical severity (CVSS 10) — web · CVE-2026-33453. Status: Weaponized. Affects: Apache Camel — camel-coap component (CamelCoapResource), routes forwarding to camel-exec. Tags: apache-camel, coap, header-injection, rce, cwe-915, camel-exec, unauthenticated, udp.webCriticalapache-camelcoapheader-injectionrcecwe-915camel-execunauthenticatedudphttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-31908-apisix-crlf-header-injection/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-31908-apisix-crlf-header-injection/Critical severity (CVSS 10) — web · CVE-2026-31908. Status: PoC. Affects: Apache APISIX. Tags: apisix, crlf-injection, header-injection, authentication-bypass, forward-auth, api-gateway, reverse-proxy.webCriticalapisixcrlf-injectionheader-injectionauthentication-bypassforward-authapi-gatewayreverse-proxyhttps://poc.intelseclab.com/pocs/web/2026-05-15_nextjs-middleware-bypass-cve-2025-29927/Fri, 15 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-15_nextjs-middleware-bypass-cve-2025-29927/Critical severity (CVSS 9.1) — web · CVE-2025-29927. Status: Weaponized. Affects: Next.js (Vercel). Tags: auth-bypass, middleware-bypass, Next.js, unauthenticated, header-injection.webCriticalauth-bypassmiddleware-bypassNext.jsunauthenticatedheader-injection