Htaccess-Poisoning โ€” PoC Archivehttps://poc.intelseclab.com/tags/htaccess-poisoning/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000EspoCRM Authenticated RCE via Formula ACL Bypass + Attachment Path Traversal โ€” CVE-2026-33656https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-33656-espocrm-formula-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-33656-espocrm-formula-rce/Critical severity โ€” web ยท CVE-2026-33656. Status: Weaponized. Affects: EspoCRM <= 9.3.3. Tags: espocrm, rce, path-traversal, webshell, htaccess-poisoning, formula-engine, authenticated, crm.webCriticalespocrmrcepath-traversalwebshellhtaccess-poisoningformula-engineauthenticatedcrm