PoC Archive PoC Archive

tag

Phishing

ClickFix Social-Engineering Technique — Fortinet-Branded Multi-Stage Lure (Fake File-Access Page + Fake CAPTCHA + Clipboard Injection)
N/A (social-engineering technique, not a software vulnerability) social-engineering Unverified
N/Asocial-engineeringHIGHUnverified2026-07-27ClickFix Social Engineering Technique — Fake Cloudflare Turnstile Just a Moment Verification Lure
N/A (social-engineering technique, not a software vulnerability) social-engineering Unverified
N/Asocial-engineeringHIGHUnverified2026-07-27ClickFix Fake-CAPTCHA Social-Engineering Kit with IP Fencing and 19-Language Localization
N/A (social-engineering technique, not a software vulnerability) social-engineering Unverified
N/Asocial-engineeringHIGHUnverified2026-07-27ClickFix Fake reCAPTCHA to mshta/HTA Execution Chain
N/A (social-engineering technique, not a software vulnerability) social-engineering Unverified
N/Asocial-engineeringHIGHUnverified2026-07-27Windows ShellLink (.lnk) Remote Code Execution — CVE-2026-21510 LNK-Stomping Generator KEV EPSS 26%
CVE-2026-21510 social-engineering Unverified
CVE-2026-21510social-engineeringHIGHUnverified2026-07-05RTF Protected-View Bypass (CVE-2026-21514) Chained with ShellLink RCE (CVE-2026-21510) — Builder Scripts KEV
CVE-2026-21514, CVE-2026-21510 social-engineering Unverified
CVE-2026-21514, CVE-2026-21510social-engineeringHIGHUnverified2026-07-05EcoOnline EHS Android App — Deep Link Validation Bypass to WebView Open Redirect (CVE-2026-26897)
CVE-2026-26897 web Patched
CVE-2026-26897webMEDIUM 6.3Patched2026-07-05