Incorrect-Access-Control — PoC Archivehttps://poc.intelseclab.com/tags/incorrect-access-control/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000Veno File Manager Incorrect Access Control — Application Log Extraction (CVE-2026-37067)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-37067-veno-file-manager-log-disclosure/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-37067-veno-file-manager-log-disclosure/Medium severity — web · CVE-2026-37067. Status: PoC. Affects: Veno File Manager Project. Tags: veno-file-manager, incorrect-access-control, log-disclosure, unauthenticated, cwe-284.webMediumveno-file-managerincorrect-access-controllog-disclosureunauthenticatedcwe-284Veno File Manager 4.4.9 — Unauthenticated Email Hijack via SMTP Relay (CVE-2026-37073)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-37073-veno-file-manager-email-hijack/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-37073-veno-file-manager-email-hijack/Medium severity — web · CVE-2026-37073. Status: PoC. Affects: Veno File Manager Project. Tags: file-manager, unauthenticated, smtp-relay, email-spoofing, incorrect-access-control, veno-file-manager.webMediumfile-managerunauthenticatedsmtp-relayemail-spoofingincorrect-access-controlveno-file-managerVeno File Manager 4.4.9 — Authenticated Arbitrary File Read (CVE-2026-37070)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-37070-veno-file-manager-file-read/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-37070-veno-file-manager-file-read/Medium severity — web · CVE-2026-37070. Status: PoC. Affects: Veno File Manager Project. Tags: file-manager, incorrect-access-control, arbitrary-file-read, php, authenticated, veno-file-manager.webMediumfile-managerincorrect-access-controlarbitrary-file-readphpauthenticatedveno-file-manager