https://poc.intelseclab.com/tags/java/Latest proof-of-concept entries.Hugoen-usSun, 09 Aug 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-08-09_cve-2025-61882-oracle-ebs-preauth-rce/Sun, 09 Aug 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-08-09_cve-2025-61882-oracle-ebs-preauth-rce/Critical severity (CVSS 9.8) — web · CVE-2025-61882 (Oracle Security Alert, out-of-band, October 2025). Status: Patched (Oracle out-of-band Security Alert, October 2025). Affects: Oracle E-Business Suite — Oracle Concurrent Processing product, BI Publisher Integration component (reached via the /OA_HTML/ web tier: configurator/UiServlet and ieshostedsurvey.jsp). Tags: oracle-ebs, oracle-concurrent-processing, bi-publisher-integration, pre-auth, rce, ssrf, crlf-injection, request-smuggling, path-traversal, auth-bypass, xslt, java, cisa-kev, ransomware, cl0p, watchtowr.webCriticaloracle-ebsoracle-concurrent-processingbi-publisher-integrationpre-authrcessrfcrlf-injectionrequest-smugglingpath-traversalauth-bypassxsltjavacisa-kevransomwarecl0pwatchtowrhttps://poc.intelseclab.com/pocs/web/2026-07-31_cve-2026-16723-fastjson-rce/Fri, 31 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-31_cve-2026-16723-fastjson-rce/Critical severity (CVSS 9) — web · CVE-2026-16723. Status: PoC (no vendor patch, Fastjson 1.x line unpatched). Affects: Alibaba Fastjson (Java JSON library), packaged inside a Spring Boot executable fat-JAR. Tags: fastjson, deserialization, rce, java, spring-boot, autotype-bypass, jar-protocol, ssrf.webCriticalfastjsondeserializationrcejavaspring-bootautotype-bypassjar-protocolssrfhttps://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-41243-spring-cloud-gateway-actuator-rce-lab/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-41243-spring-cloud-gateway-actuator-rce-lab/Critical severity (CVSS 10) — web · CVE-2025-41243. Status: PoC. Affects: Spring Cloud Gateway (spring-cloud-starter-gateway 4.1.0 on spring-boot-starter-parent 3.3.0), with Actuator's gateway endpoint exposed. Tags: spring-cloud-gateway, actuator, spel-injection, rce, java, docker, lab-environment.webCriticalspring-cloud-gatewayactuatorspel-injectionrcejavadockerlab-environmenthttps://poc.intelseclab.com/pocs/misc/2026-07-06_cve-2025-30065-parquet-avro-schema-deserialization-rce/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/misc/2026-07-06_cve-2025-30065-parquet-avro-schema-deserialization-rce/Critical severity (CVSS 9.8) — misc · CVE-2025-30065. Status: PoC. Affects: Apache Parquet Java (parquet-avro module). Tags: rce, ssrf, unsafe-deserialization, parquet-avro, avro-schema, java-class, jvm, cwe-502, cwe-20, incomplete-fix, java.miscCriticalrcessrfunsafe-deserializationparquet-avroavro-schemajava-classjvmcwe-502cwe-20incomplete-fixjavahttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-41901-thymeleaf-spel-injection-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-41901-thymeleaf-spel-injection-rce/Critical severity — web · CVE-2026-41901. Status: PoC. Affects: Spring Boot application using Thymeleaf template engine. Tags: thymeleaf, spel-injection, ssti, spring-boot, rce, java, template-injection.webCriticalthymeleafspel-injectionsstispring-bootrcejavatemplate-injectionhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-22732-spring-security-header-bypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-22732-spring-security-header-bypass/Critical severity (CVSS 9.1) — web · CVE-2026-22732. Status: PoC. Affects: Spring Security (Spring Boot applications). Tags: spring-security, spring-boot, security-headers, response-splitting, x-frame-options, hsts, java, junit.webCriticalspring-securityspring-bootsecurity-headersresponse-splittingx-frame-optionshstsjavajunithttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-22738-spring-ai-spel-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-22738-spring-ai-spel-rce/Critical severity (CVSS 9.8) — web · CVE-2026-22738. Status: Weaponized. Affects: Spring AI spring-ai-core (SimpleVectorStore). Tags: spring-ai, spel-injection, java, rce, vector-store, unauthenticated, cwe-94, docker-lab.webCriticalspring-aispel-injectionjavarcevector-storeunauthenticatedcwe-94docker-labhttps://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-20980-samsung-android-at-command-lpe/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-20980-samsung-android-at-command-lpe/Critical severity — binary · CVE-2026-20980 (chained with CVE-2026-20981 and CVE-2026-20982). Status: PoC. Affects: Samsung Android AT-command distribution stack (at_distributor / libpacm_client.so, FacAtFunction system app, ShortcutService). Tags: android, samsung, at-command, privilege-escalation, usb, system-server, exploit-chain, java, apk.binaryCriticalandroidsamsungat-commandprivilege-escalationusbsystem-serverexploit-chainjavaapkhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-29000-pac4j-jwt-auth-bypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-29000-pac4j-jwt-auth-bypass/Critical severity (CVSS 9.8) — web · CVE-2026-29000. Status: Weaponized. Affects: pac4j (JWT authentication module), used in Java web applications. Tags: pac4j, jwt, jwe, auth-bypass, alg-none, jwks, privilege-escalation, java.webCriticalpac4jjwtjweauth-bypassalg-nonejwksprivilege-escalationjavahttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-33439-openam-deserialization-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-33439-openam-deserialization-rce/Critical severity (CVSS 9.8) — web · CVE-2026-33439. Status: Weaponized. Affects: ForgeRock / OpenIdentityPlatform OpenAM. Tags: openam, forgerock, deserialization, rce, pre-auth, java, gadget-chain, xalan, jato.webCriticalopenamforgerockdeserializationrcepre-authjavagadget-chainxalanjatohttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-25526-jinjava-ssti-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-25526-jinjava-ssti-rce/Critical severity — web · CVE-2026-25526. Status: Weaponized. Affects: Jinjava (HubSpot's Java Jinja-like template engine). Tags: ssti, jinjava, java, jackson, objectmapper, sandbox-escape, rce, deserialization.webCriticalsstijinjavajavajacksonobjectmappersandbox-escapercedeserializationhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-34486-tomcat-tribes-deserialization-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-34486-tomcat-tribes-deserialization-rce/Critical severity — web · CVE-2026-34486. Status: Weaponized. Affects: Apache Tomcat Tribes clustering (EncryptInterceptor). Tags: deserialization, rce, tomcat, tribes, clustering, java, gadget-chain, unauthenticated.webCriticaldeserializationrcetomcattribesclusteringjavagadget-chainunauthenticatedhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-43515-tomcat-constraint-bypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-43515-tomcat-constraint-bypass/High severity — web · CVE-2026-43515. Status: PoC. Affects: Apache Tomcat — org.apache.catalina.realm.RealmBase.findSecurityConstraints(). Tags: apache-tomcat, java, security-constraint, auth-bypass, realm-base, servlet, web-xml, access-control.webHighapache-tomcatjavasecurity-constraintauth-bypassrealm-baseservletweb-xmlaccess-controlhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-29145-tomcat-mtls-ocsp-bypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-29145-tomcat-mtls-ocsp-bypass/Critical severity (CVSS 9.1) — web · CVE-2026-29145. Status: PoC. Affects: Apache Tomcat (CLIENT_CERT / Mutual TLS authentication). Tags: tomcat, mtls, client-cert, ocsp, auth-bypass, revocation-check, docker-lab, java.webCriticaltomcatmtlsclient-certocspauth-bypassrevocation-checkdocker-labjavahttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-44825-apache-solr-velocity-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-44825-apache-solr-velocity-rce/Critical severity (CVSS 9.8) — web · CVE-2026-44825. Status: PoC. Affects: Apache Solr (VelocityResponseWriter / wt=velocity). Tags: apache-solr, velocity, ssti, template-injection, rce, java, default-credentials.webCriticalapache-solrvelocitysstitemplate-injectionrcejavadefault-credentialshttps://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-42779-apache-mina-deserialization-bypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-42779-apache-mina-deserialization-bypass/Critical severity (CVSS 9.8) — network · CVE-2026-42779. Status: PoC. Affects: Apache MINA (mina-core). Tags: apache-mina, java, deserialization, cwe-502, gadget-chain, commons-collections, rce, filter-bypass.networkCriticalapache-minajavadeserializationcwe-502gadget-chaincommons-collectionsrcefilter-bypasshttps://poc.intelseclab.com/pocs/web/2026-05-17_confluence-ssti-rce-cve-2023-22527/Sun, 17 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-17_confluence-ssti-rce-cve-2023-22527/Critical severity (CVSS 10) — web · CVE-2023-22527. Status: Weaponized. Affects: Atlassian Confluence Data Center and Confluence Server. Tags: RCE, Confluence, SSTI, Freemarker, OGNL, unauthenticated, Java, Atlassian, ransomware.webCriticalRCEConfluenceSSTIFreemarkerOGNLunauthenticatedJavaAtlassianransomwarehttps://poc.intelseclab.com/pocs/web/2026-05-17_confluence-postauth-rce-cve-2024-21683/Sun, 17 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-17_confluence-postauth-rce-cve-2024-21683/High severity (CVSS 8.3) — web · CVE-2024-21683. Status: Weaponized. Affects: Atlassian Confluence Data Center and Server. Tags: RCE, Confluence, post-auth, Rhino, JavaScript, Java, deserialization, Metasploit, red-team.webHighRCEConfluencepost-authRhinoJavaScriptJavadeserializationMetasploitred-teamhttps://poc.intelseclab.com/pocs/misc/2026-05-16_apache-parquet-unsafe-deserialization-rce/Sat, 16 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/misc/2026-05-16_apache-parquet-unsafe-deserialization-rce/Critical severity (CVSS 10) — misc · CVE-2025-30065. Status: Weaponized. Affects: Apache Parquet Java (parquet-avro) schema parsing consumers. Tags: RCE, unsafe-deserialization, parquet-avro, avro-schema, Java, JVM, SSRF, data-pipeline.miscCriticalRCEunsafe-deserializationparquet-avroavro-schemaJavaJVMSSRFdata-pipeline