Lua — PoC Archivehttps://poc.intelseclab.com/tags/lua/Latest proof-of-concept entries.Hugoen-usMon, 27 Jul 2026 00:00:00 +0000Apache APISIX `jwe-decrypt` Integrity-Check Bypass → Unauthenticated Gateway Auth Bypass (CVE-2026-49230)https://poc.intelseclab.com/pocs/web/2026-07-27_cve-2026-49230-apisix-jwe-decrypt-auth-bypass/Mon, 27 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-27_cve-2026-49230-apisix-jwe-decrypt-auth-bypass/Critical severity (CVSS 9.1) — web · CVE-2026-49230. Status: Weaponized. Affects: Apache APISIX — jwe-decrypt auth plugin (apisix/plugins/jwe-decrypt.lua). Tags: apache-apisix, jwe, jwt, integrity-bypass, cwe-354, unauthenticated, api-gateway, lua.webCriticalapache-apisixjwejwtintegrity-bypasscwe-354unauthenticatedapi-gatewayluaRediShell: Redis Lua Scripting Use-After-Free Leading to JOP-Chained Remote Code Execution (CVE-2025-49844)https://poc.intelseclab.com/pocs/binary/2026-07-06_cve-2025-49844-redis-lua-uaf-jop-rce/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-07-06_cve-2025-49844-redis-lua-uaf-jop-rce/Critical severity (CVSS 9.9) — binary · CVE-2025-49844. Status: Weaponized. Affects: Redis (embedded Lua scripting engine). Tags: redis, lua, use-after-free, uaf, memory-corruption, jop, jump-oriented-programming, shellcode, iced-x86, docker, cwe-416, rce.binaryCriticalredisluause-after-freeuafmemory-corruptionjopjump-oriented-programmingshellcodeiced-x86dockercwe-416rceWing FTP Server Admin Session Poisoning via Lua loadfile() RCE (CVE-2026-44403)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-44403-wingftp-session-poisoning-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-44403-wingftp-session-poisoning-rce/High severity — web · CVE-2026-44403. Status: PoC. Affects: Wing FTP Server (WebAdmin console). Tags: wingftp, lua, session-poisoning, loadfile, rce, webadmin, authenticated.webHighwingftpluasession-poisoningloadfilercewebadminauthenticated