Middleware — PoC Archivehttps://poc.intelseclab.com/tags/middleware/Latest proof-of-concept entries.Hugoen-usMon, 06 Jul 2026 00:00:00 +0000Hoverfly Middleware Command Injection to RCE (CVE-2025-54123)https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-54123-hoverfly-middleware-rce/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-54123-hoverfly-middleware-rce/Critical severity (CVSS 9.8) — web · CVE-2025-54123. Status: Weaponized. Affects: SpectoLabs Hoverfly (HTTP/API service virtualization tool) — admin API, <= v1.11.3. Tags: hoverfly, command-injection, middleware, api, token-auth, rce, cwe-78, python.webCriticalhoverflycommand-injectionmiddlewareapitoken-authrcecwe-78pythonDiscourse Scoped API Key Pre-Route Authorization Bypasshttps://poc.intelseclab.com/pocs/web/2026-07-03_discourse-scoped-api-key-route-bypass/Fri, 03 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-03_discourse-scoped-api-key-route-bypass/High severity — web · None assigned as of 2026-07-03. Status: PoC. Affects: Discourse (forum platform). Tags: discourse, authorization-bypass, api-key-scope, rails, middleware, privilege-escalation, route-confusion.webHighdiscourseauthorization-bypassapi-key-scoperailsmiddlewareprivilege-escalationroute-confusion