Junction — PoC Archivehttps://poc.intelseclab.com/tags/junction/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000Lenovo LDE (LdeApi.Server.exe) Unimpersonated Junction-Based Arbitrary File Write to SYSTEM (CVE-2026-0827)https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-0827-lenovo-lde-file-write/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-0827-lenovo-lde-file-write/High severity — binary · CVE-2026-0827 (Lenovo advisory LEN-210693). Status: PoC. Affects: Lenovo LDE (LdeApi.Server.exe). Tags: lenovo, lde, windows, junction, ntfs-symlink, privilege-escalation, unimpersonated-write, local-privesc.binaryHighlenovoldewindowsjunctionntfs-symlinkprivilege-escalationunimpersonated-writelocal-privescCVE-2026-50656 RoguePlanet — Safe Vulnerability Checker (Resurface)https://poc.intelseclab.com/pocs/binary/2026-06-26_cve-2026-50656-rogueplanet-checker/Fri, 26 Jun 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-06-26_cve-2026-50656-rogueplanet-checker/High severity (CVSS 7.8) — binary · CVE-2026-50656. Status: Researched. Affects: Microsoft Malware Protection Engine (mpengine.dll, MsMpEng.exe). Tags: LPE, Windows Defender, TOCTOU, symlink, reparse-point, junction, CWE-59, checker, detection, non-destructive, MsMpEng.binaryHighLPEWindows DefenderTOCTOUsymlinkreparse-pointjunctionCWE-59checkerdetectionnon-destructiveMsMpEng