Minecraft — PoC Archivehttps://poc.intelseclab.com/tags/minecraft/Latest proof-of-concept entries.Hugoen-usMon, 06 Jul 2026 00:00:00 +0000Crafty Controller Webhook Jinja2 Server-Side Template Injection RCE (CVE-2025-14700)https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-14700-crafty-controller-ssti-rce/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-14700-crafty-controller-ssti-rce/Critical severity (CVSS 9.9) — web · CVE-2025-14700. Status: Weaponized. Affects: Crafty Controller (Minecraft server management panel). Tags: crafty-controller, minecraft, jinja2, ssti, server-side-template-injection, reverse-shell, tornado, xsrf, python, cwe-1336.webCriticalcrafty-controllerminecraftjinja2sstiserver-side-template-injectionreverse-shelltornadoxsrfpythoncwe-1336Lunar Client Modrinth Explore Raw-HTML to Local Launcher Execution Chainhttps://poc.intelseclab.com/pocs/binary/2026-07-03_lunar-client-modrinth-rce-chain/Fri, 03 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-07-03_lunar-client-modrinth-rce-chain/Critical severity (CVSS 3.1) — binary · None assigned as of 2026-07-03. Status: Incomplete PoC. Affects: Lunar Client (Electron desktop application), Modrinth Explore integration. Tags: lunar-client, electron, minecraft, modrinth, raw-html-injection, ipc, rce, sandbox-escape, launcher-abuse.binaryCriticallunar-clientelectronminecraftmodrinthraw-html-injectionipcrcesandbox-escapelauncher-abuse