Jwt-Forgery — PoC Archivehttps://poc.intelseclab.com/tags/jwt-forgery/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000Nezha Dashboard Path Traversal → JWT Secret Leak → Token Forgery — CVE-2026-53519https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-53519-nezha-path-traversal-jwt-forgery/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-53519-nezha-path-traversal-jwt-forgery/Info severity — web · CVE-2026-53519 (GHSA-5c25-7vpj-9mqh). Status: PoC. Affects: Nezha Dashboard (monitoring/agent management panel). Tags: nezha, path-traversal, jwt-forgery, unauthenticated, config-disclosure, sqlite, privilege-escalation, cwe-22, cwe-347.webInfonezhapath-traversaljwt-forgeryunauthenticatedconfig-disclosuresqliteprivilege-escalationcwe-22cwe-347n8n Unauthenticated Arbitrary File Read to RCE Full Chain — CVE-2026-21858 + CVE-2025-68613https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-21858-n8n-rce-chain/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-21858-n8n-rce-chain/Critical severity (CVSS 10) — web · CVE-2026-21858, CVE-2025-68613. Status: Weaponized. Affects: n8n workflow automation platform. Tags: n8n, arbitrary-file-read, jwt-forgery, sandbox-bypass, expression-injection, rce, workflow-automation.webCriticaln8narbitrary-file-readjwt-forgerysandbox-bypassexpression-injectionrceworkflow-automationHAXcms Node.js Private Key Disclosure via Broken HMAC (CVE-2026-46395)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-46395-haxcms-hmac-key-leak/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-46395-haxcms-hmac-key-leak/Critical severity (CVSS 9.8) — web · CVE-2026-46395. Status: PoC. Affects: HAXcms Node.js backend (elmsln/HAXcms, haxcms-nodejs) — src/lib/HAXCMS.js. Tags: haxcms, nodejs, hmac, jwt-forgery, cwe-321, cwe-200, key-disclosure, cms.webCriticalhaxcmsnodejshmacjwt-forgerycwe-321cwe-200key-disclosurecms