Javascript-Injection — PoC Archivehttps://poc.intelseclab.com/tags/javascript-injection/Latest proof-of-concept entries.Hugoen-usMon, 06 Jul 2026 00:00:00 +0000Flowise CustomMCP Unauthenticated Remote Code Execution via Function() Constructor (CVE-2025-59528)https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-59528-flowise-custommcp-function-rce/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-59528-flowise-custommcp-function-rce/Critical severity (CVSS 10) — web · CVE-2025-59528. Status: Weaponized. Affects: Flowise (FlowiseAI/Flowise). Tags: flowise, rce, custommcp, function-constructor, javascript-injection, unauthenticated, llm, node-load-method, cwe-94.webCriticalflowisercecustommcpfunction-constructorjavascript-injectionunauthenticatedllmnode-load-methodcwe-94OpenRemote — Expression Injection RCE in Rules Engine (CVE-2026-39842)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-39842-openremote-expression-injection-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-39842-openremote-expression-injection-rce/Critical severity (CVSS 10) — web · CVE-2026-39842 / GHSA-7mqr-33rv-p3mp. Status: Weaponized. Affects: OpenRemote (IoT device/rules management platform). Tags: openremote, iot, nashorn, javascript-injection, rules-engine, rce, authenticated, root.webCriticalopenremoteiotnashornjavascript-injectionrules-enginerceauthenticatedrootDbGate Unauthenticated RCE via JSON Script Runner (CVE-2026-47668)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-47668-dbgate-json-script-runner-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-47668-dbgate-json-script-runner-rce/Critical severity (CVSS 3.1) — web · CVE-2026-47668. Status: PoC. Affects: DbGate (dbgate-serve — web-based database management tool). Tags: dbgate, rce, code-injection, javascript-injection, cwe-94, cwe-20, cwe-1188, database-management.webCriticaldbgatercecode-injectionjavascript-injectioncwe-94cwe-20cwe-1188database-management