https://poc.intelseclab.com/tags/information-disclosure/Latest proof-of-concept entries.Hugoen-usSun, 09 Aug 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/cloud/2026-08-09_cve-2026-64640-apache-polaris-cross-tenant-credential-vending/Sun, 09 Aug 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/cloud/2026-08-09_cve-2026-64640-apache-polaris-cross-tenant-credential-vending/High severity (CVSS 8.1) — cloud · CVE-2026-64640. Status: Patched. Affects: Apache Polaris (Apache Iceberg REST catalog), registerTable and registerView endpoints. Tags: apache-polaris, iceberg, apache-iceberg, credential-vending, confused-deputy, authorization-bypass, cross-tenant, s3, storage, allowed-locations, CWE-441, CWE-639, CWE-918, ssrf, server-side-read, information-disclosure, register-table, register-view.cloudHighapache-polarisicebergapache-icebergcredential-vendingconfused-deputyauthorization-bypasscross-tenants3storageallowed-locationsCWE-441CWE-639CWE-918ssrfserver-side-readinformation-disclosureregister-tableregister-viewhttps://poc.intelseclab.com/pocs/hardware/2026-07-06_cve-2025-65856-onvif-camera-auth-bypass/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/hardware/2026-07-06_cve-2025-65856-onvif-camera-auth-bypass/Critical severity (CVSS 9.8) — hardware · CVE-2025-65856. Status: Weaponized. Affects: Xiongmai XM530-based IP camera ONVIF service (tested on model XM530_50X50-WG_8M). Tags: xiongmai, xm530, onvif, ip-camera, iot, auth-bypass, access-control, information-disclosure, rtsp, cwe-306, cwe-287, python, bash, curl.hardwareCriticalxiongmaixm530onvifip-cameraiotauth-bypassaccess-controlinformation-disclosurertspcwe-306cwe-287pythonbashcurlhttps://poc.intelseclab.com/pocs/network/2026-07-06_cve-2025-13315-twonky-server-auth-bypass/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-06_cve-2025-13315-twonky-server-auth-bypass/Critical severity (CVSS 9.8) — network · CVE-2025-13315. Status: PoC. Affects: Twonky Server (Lynx Technology), a DLNA/UPnP media server. Tags: twonky-server, dlna, upnp, media-server, auth-bypass, access-control, information-disclosure, credential-leak, cwe-284, unauthenticated, nuclei.networkCriticaltwonky-serverdlnaupnpmedia-serverauth-bypassaccess-controlinformation-disclosurecredential-leakcwe-284unauthenticatednucleihttps://poc.intelseclab.com/pocs/network/2026-07-06_cve-2025-62168-squid-error-page-header-reflection-token-leak/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-06_cve-2025-62168-squid-error-page-header-reflection-token-leak/Critical severity (CVSS 10) — network · CVE-2025-62168. Status: PoC. Affects: Squid Proxy. Tags: squid, proxy, information-disclosure, header-reflection, jwt, token-leak, error-page, cwe-209, cwe-550.networkCriticalsquidproxyinformation-disclosureheader-reflectionjwttoken-leakerror-pagecwe-209cwe-550https://poc.intelseclab.com/pocs/cloud/2026-07-06_cve-2025-68926-rustfs-grpc-token-bypass/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/cloud/2026-07-06_cve-2025-68926-rustfs-grpc-token-bypass/Critical severity (CVSS 9.8) — cloud · CVE-2025-68926. Status: Weaponized. Affects: RustFS (Rust-based S3-compatible distributed object storage) — internal node-to-node gRPC service. Tags: rustfs, grpc, hardcoded-credentials, authentication-bypass, object-storage, s3-compatible, information-disclosure, credential-theft, data-destruction, cwe-798, cwe-306.cloudCriticalrustfsgrpchardcoded-credentialsauthentication-bypassobject-storages3-compatibleinformation-disclosurecredential-theftdata-destructioncwe-798cwe-306https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-49132-pterodactyl-locale-path-traversal/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-49132-pterodactyl-locale-path-traversal/Critical severity (CVSS 10) — web · CVE-2025-49132. Status: Weaponized. Affects: Pterodactyl Panel (game server management panel). Tags: pterodactyl, path-traversal, unauthenticated, information-disclosure, credential-leak, database, php, config-exposure, cwe-22.webCriticalpterodactylpath-traversalunauthenticatedinformation-disclosurecredential-leakdatabasephpconfig-exposurecwe-22https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-11749-ai-engine-admin-account-creation/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-11749-ai-engine-admin-account-creation/Critical severity (CVSS 9.8) — web · CVE-2025-11749. Status: Weaponized. Affects: AI Engine plugin for WordPress (mwai). Tags: wordpress, ai-engine, mwai, mcp, rest-api, information-disclosure, privilege-escalation, admin-account-creation, python, mass-scanner.webCriticalwordpressai-enginemwaimcprest-apiinformation-disclosureprivilege-escalationadmin-account-creationpythonmass-scannerhttps://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-34474-zte-router-sensitive-data-exposure/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-34474-zte-router-sensitive-data-exposure/High severity — network · CVE-2026-34474. Status: PoC. Affects: ZTE ZXHN H298A (hardware 1.1) and ZXHN H108N (hardware 2.6) home routers. Tags: information-disclosure, router, firmware, unauthenticated, credential-leak, iot, zte, wifi.networkHighinformation-disclosurerouterfirmwareunauthenticatedcredential-leakiotztewifihttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-39912-xboard-v2board-account-takeover/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-39912-xboard-v2board-account-takeover/Critical severity (CVSS 9.1) — web · CVE-2026-39912. Status: Weaponized. Affects: V2Board / Xboard (VPN/proxy subscription management panels). Tags: xboard, v2board, php, laravel, account-takeover, magic-link, unauthenticated, information-disclosure, proxy-panel.webCriticalxboardv2boardphplaravelaccount-takeovermagic-linkunauthenticatedinformation-disclosureproxy-panelhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-43700-webgpu-importexternaltexture-cross-origin-leak/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-43700-webgpu-importexternaltexture-cross-origin-leak/High severity — web · CVE-2026-43700. Status: PoC. Affects: WebKit / Safari (GPUDevice.importExternalTexture WebGPU API). Tags: webkit, safari, webgpu, cross-origin, information-disclosure, same-origin-policy-bypass, external-texture, video.webHighwebkitsafariwebgpucross-origininformation-disclosuresame-origin-policy-bypassexternal-texturevideohttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-43735-webkit-navigateevent-sourceelement-leak/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-43735-webkit-navigateevent-sourceelement-leak/High severity — web · CVE-2026-43735. Status: PoC. Affects: WebKit / Safari (Navigation API — NavigateEvent.sourceElement). Tags: webkit, safari, navigation-api, navigateevent, cross-origin, information-disclosure, dom-access, same-origin-policy-bypass, iframe.webHighwebkitsafarinavigation-apinavigateeventcross-origininformation-disclosuredom-accesssame-origin-policy-bypassiframehttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-37069-veno-file-manager-path-disclosure/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-37069-veno-file-manager-path-disclosure/Low severity — web · CVE-2026-37069. Status: PoC. Affects: Veno File Manager Project. Tags: veno-file-manager, path-disclosure, unauthenticated, information-disclosure, cwe-200.webLowveno-file-managerpath-disclosureunauthenticatedinformation-disclosurecwe-200https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-55584-phpsysinfo-xff-allowlist-bypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-55584-phpsysinfo-xff-allowlist-bypass/High severity (CVSS 7.5) — web · CVE-2026-55584 / GHSA-786w-p5pm-cvgh. Status: PoC. Affects: phpSysInfo. Tags: phpsysinfo, ip-spoofing, x-forwarded-for, access-control-bypass, cwe-290, information-disclosure.webHighphpsysinfoip-spoofingx-forwarded-foraccess-control-bypasscwe-290information-disclosurehttps://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-3008-notepadpp-formatstring/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-3008-notepadpp-formatstring/Medium severity — binary · CVE-2026-3008. Status: PoC. Affects: Notepad++ 8.9.3. Tags: notepad++, format-string, wsprintfw, dos, information-disclosure, localization, windows.binaryMediumnotepad++format-stringwsprintfwdosinformation-disclosurelocalizationwindowshttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-23491-invoiceplane-path-traversal/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-23491-invoiceplane-path-traversal/Critical severity — web · CVE-2026-23491. Status: PoC. Affects: InvoicePlane. Tags: invoiceplane, path-traversal, directory-traversal, unauthenticated, information-disclosure, php, arbitrary-file-read.webCriticalinvoiceplanepath-traversaldirectory-traversalunauthenticatedinformation-disclosurephparbitrary-file-readhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-5173-gitlab-websocket-graphql-bypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-5173-gitlab-websocket-graphql-bypass/High severity — web · CVE-2026-5173. Status: PoC. Affects: GitLab CE/EE, ActionCable WebSocket endpoint (/-/cable), GraphqlChannel. Tags: gitlab, websocket, graphql, actioncable, graphqlchannel, information-disclosure, broken-access-control.webHighgitlabwebsocketgraphqlactioncablegraphqlchannelinformation-disclosurebroken-access-controlhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-27771-gitea-registry-auth-bypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-27771-gitea-registry-auth-bypass/Critical severity — web · CVE-2026-27771. Status: Weaponized. Affects: Gitea (self-hosted Git service with OCI container registry). Tags: gitea, forgejo, oci-registry, auth-bypass, container-registry, unauthenticated, information-disclosure.webCriticalgiteaforgejooci-registryauth-bypasscontainer-registryunauthenticatedinformation-disclosurehttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-24072-apache-httpd-ap-expr-lpe/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-24072-apache-httpd-ap-expr-lpe/Medium severity — web · CVE-2026-24072. Status: PoC. Affects: Apache HTTP Server (httpd). Tags: apache-httpd, mod_rewrite, ap_expr, htaccess, local-privilege-escalation, arbitrary-file-read, information-disclosure, cwe-668.webMediumapache-httpdmod_rewriteap_exprhtaccesslocal-privilege-escalationarbitrary-file-readinformation-disclosurecwe-668https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-0047-activitymanager-bitmap-leak/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-0047-activitymanager-bitmap-leak/Critical severity (CVSS 8.4) — binary · CVE-2026-0047. Status: Weaponized. Affects: Android system_server ActivityManagerService.dumpBitmapsProto(). Tags: android, activitymanagerservice, binder, missing-permission-check, information-disclosure, zero-permission, baklava, bitmap-theft.binaryCriticalandroidactivitymanagerservicebindermissing-permission-checkinformation-disclosurezero-permissionbaklavabitmap-thefthttps://poc.intelseclab.com/pocs/web/2026-07-03_nextjs-unstable-cache-key-collision/Fri, 03 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-03_nextjs-unstable-cache-key-collision/High severity — web · None assigned as of 2026-07-03. Status: PoC. Affects: Next.js (App Router, Data Cache). Tags: nextjs, unstable_cache, cache-poisoning, cache-key-collision, data-cache, information-disclosure, server-side-caching, javascript.webHighnextjsunstable_cachecache-poisoningcache-key-collisiondata-cacheinformation-disclosureserver-side-cachingjavascripthttps://poc.intelseclab.com/pocs/web/2026-07-03_firefox-smartwindow-private-url-exfil/Fri, 03 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-03_firefox-smartwindow-private-url-exfil/High severity — web · None assigned as of 2026-07-03. Status: PoC. Affects: Firefox Smart Window (AI browsing assistant feature). Tags: firefox, smart-window, ai-assistant, privacy-leak, information-disclosure, url-token-exfiltration, browser, prompt-injection.webHighfirefoxsmart-windowai-assistantprivacy-leakinformation-disclosureurl-token-exfiltrationbrowserprompt-injectionhttps://poc.intelseclab.com/pocs/network/2026-07-01_cve-2026-47729-squidbleed-squid-ftp-oob-read/Wed, 01 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-01_cve-2026-47729-squidbleed-squid-ftp-oob-read/Medium severity — network · CVE-2026-47729. Status: PoC. Affects: Squid Proxy — FTP gateway / directory-listing parser. Tags: memory-disclosure, information-disclosure, Squid, proxy, FTP, heap-overflow, oob-read, credential-theft, legacy.networkMediummemory-disclosureinformation-disclosureSquidproxyFTPheap-overflowoob-readcredential-theftlegacyhttps://poc.intelseclab.com/pocs/web/2026-05-17_nextjs-i18n-middleware-bypass/Sun, 17 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-17_nextjs-i18n-middleware-bypass/High severity (CVSS 7.5) — web · CVE-2026-44573. Status: Weaponized. Affects: Next.js Pages Router with i18n configuration. Tags: middleware-bypass, i18n, _next/data, Pages-Router, authorization-bypass, information-disclosure, Next.js, unauthenticated.webHighmiddleware-bypassi18n_next/dataPages-Routerauthorization-bypassinformation-disclosureNext.jsunauthenticated