Post-Auth — PoC Archivehttps://poc.intelseclab.com/tags/post-auth/Latest proof-of-concept entries.Hugoen-usMon, 06 Jul 2026 00:00:00 +0000Roundcube Webmail Post-Auth RCE via PHP Object Deserialization (CVE-2025-49113)https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-49113-roundcube-php-object-deserialization-rce/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-49113-roundcube-php-object-deserialization-rce/Critical severity (CVSS 9.9) — web · CVE-2025-49113. Status: Weaponized. Affects: Roundcube Webmail. Tags: roundcube, webmail, php, deserialization, object-injection, gadget-chain, rce, post-auth, cwe-502.webCriticalroundcubewebmailphpdeserializationobject-injectiongadget-chainrcepost-authcwe-502Confluence Post-Auth RCE - CVE-2024-21683https://poc.intelseclab.com/pocs/web/2026-05-17_confluence-postauth-rce-cve-2024-21683/Sun, 17 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-17_confluence-postauth-rce-cve-2024-21683/High severity (CVSS 8.3) — web · CVE-2024-21683. Status: Weaponized. Affects: Atlassian Confluence Data Center and Server. Tags: RCE, Confluence, post-auth, Rhino, JavaScript, Java, deserialization, Metasploit, red-team.webHighRCEConfluencepost-authRhinoJavaScriptJavadeserializationMetasploitred-team