Node-Js — PoC Archivehttps://poc.intelseclab.com/tags/node-js/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000Typebot Unauthenticated Preview-Chat SSRF — CVE-2026-33712https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-33712-typebot-ssrf/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-33712-typebot-ssrf/High severity — web · CVE-2026-33712. Status: PoC. Affects: Typebot (open-source chatbot builder), preview chat endpoint. Tags: ssrf, typebot, isolated-vm, sandbox-escape, cloud-metadata, node-js, unauthenticated, chatbot.webHighssrftypebotisolated-vmsandbox-escapecloud-metadatanode-jsunauthenticatedchatbotpdfmake Server-Side Request Forgery via Unvalidated Document URLs (CVE-2026-26801)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-26801-pdfmake-ssrf/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-26801-pdfmake-ssrf/High severity — web · CVE-2026-26801. Status: Weaponized. Affects: pdfmake (Node.js PDF generation library), src/URLResolver.js. Tags: ssrf, pdfmake, node-js, cloud-metadata, aws-imds, cwe-918, credential-theft, data-exfiltration.webHighssrfpdfmakenode-jscloud-metadataaws-imdscwe-918credential-theftdata-exfiltrationApostropheCMS Import — Malicious Tar Archive Path Traversal (CVE-2026-32731)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-32731-apostrophecms-tar-path-traversal/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-32731-apostrophecms-tar-path-traversal/High severity — web · CVE-2026-32731. Status: PoC. Affects: ApostropheCMS (site export/import feature). Tags: apostrophecms, cms, path-traversal, tar-slip, arbitrary-file-write, import, node-js.webHighapostrophecmscmspath-traversaltar-sliparbitrary-file-writeimportnode-js