Redis — PoC Archivehttps://poc.intelseclab.com/tags/redis/Latest proof-of-concept entries.Hugoen-usMon, 06 Jul 2026 00:00:00 +0000RediShell: Redis Lua Scripting Use-After-Free Leading to JOP-Chained Remote Code Execution (CVE-2025-49844)https://poc.intelseclab.com/pocs/binary/2026-07-06_cve-2025-49844-redis-lua-uaf-jop-rce/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-07-06_cve-2025-49844-redis-lua-uaf-jop-rce/Critical severity (CVSS 9.9) — binary · CVE-2025-49844. Status: Weaponized. Affects: Redis (embedded Lua scripting engine). Tags: redis, lua, use-after-free, uaf, memory-corruption, jop, jump-oriented-programming, shellcode, iced-x86, docker, cwe-416, rce.binaryCriticalredisluause-after-freeuafmemory-corruptionjopjump-oriented-programmingshellcodeiced-x86dockercwe-416rceMercator Configuration SSRF Chained to Internal Redis RCE (CVE-2026-49345)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-49345-mercator-ssrf-redis-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-49345-mercator-ssrf-redis-rce/Critical severity — web · CVE-2026-49345. Status: PoC. Affects: Mercator (sourcentis/mercator vulnerability-management web app), ConfigurationController::testProvider. Tags: ssrf, redis, rce, gopher, webshell, internal-network-pivot, php, mercator.webCriticalssrfredisrcegopherwebshellinternal-network-pivotphpmercatorAutoGPT Platform Chat Session IDOR / Session Hijack — CVE-2026-30950https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-30950-autogpt-session-idor/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-30950-autogpt-session-idor/High severity (CVSS 7.1) — web · CVE-2026-30950 (GHSA-q58p-v9r9-7gqj). Status: PoC. Affects: AutoGPT Platform (autogpt-platform-backend, chat/copilot feature). Tags: autogpt, idor, cwe-862, session-hijack, missing-authorization, python, fastapi, redis.webHighautogptidorcwe-862session-hijackmissing-authorizationpythonfastapiredisRedis Vector Set Duplicate HNSW Node ID RCEhttps://poc.intelseclab.com/pocs/network/2026-07-03_redis-vector-set-hnsw-id-rce/Fri, 03 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-03_redis-vector-set-hnsw-id-rce/Critical severity — network · None assigned as of 2026-07-03. Status: Weaponized. Affects: Redis server, Vector Set module (modules/vector-sets). Tags: redis, vector-set, hnsw, rce, deserialization, use-after-free, heap-corruption, rdb-restore.networkCriticalredisvector-sethnswrcedeserializationuse-after-freeheap-corruptionrdb-restoreTossUp — TerraMaster TOS Unauthenticated Redis Root RCE + NFS LPEhttps://poc.intelseclab.com/pocs/network/2026-05-18_tossup-terramaster-redis-rce/Mon, 18 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-05-18_tossup-terramaster-redis-rce/Critical severity — network · N/A (vendor confirmed TOS4 is EOL; no fix planned). Status: Weaponized. Affects: TerraMaster TOS3_A1.0 4.2.41, Redis 4.0.10. Tags: RCE, unauthenticated, Redis, TerraMaster, NAS, AArch64, root, module-loading, replication-abuse, NFS, no_root_squash, LPE, network.networkCriticalRCEunauthenticatedRedisTerraMasterNASAArch64rootmodule-loadingreplication-abuseNFSno_root_squashLPEnetwork