https://poc.intelseclab.com/tags/iis/Latest proof-of-concept entries.Hugoen-usSun, 17 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-17_toolshell-sharepoint-chain/Sun, 17 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-17_toolshell-sharepoint-chain/Critical severity — web · CVE-2025-53770, CVE-2025-53771, CVE-2025-49704, CVE-2025-49706. Status: Weaponized. Affects: Microsoft SharePoint Server. Tags: RCE, SharePoint, unauthenticated, deserialization, auth-bypass, APT27, APT31, ransomware, Windows, IIS.webCriticalRCESharePointunauthenticateddeserializationauth-bypassAPT27APT31ransomwareWindowsIIShttps://poc.intelseclab.com/pocs/web/2026-05-15_exchange-health-checker-outbound-rule-blind-spot/Fri, 15 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-15_exchange-health-checker-outbound-rule-blind-spot/Medium severity (CVSS 5.3) — web · CVE-2026-42897. Status: Researched. Affects: Microsoft CSS-Exchange Health Checker (HealthChecker.ps1). Tags: Exchange, HealthChecker, IIS, URL-Rewrite, outbound-rules, EOMT, CSP, detection-gap.webMediumExchangeHealthCheckerIISURL-Rewriteoutbound-rulesEOMTCSPdetection-gap