Service-Worker — PoC Archivehttps://poc.intelseclab.com/tags/service-worker/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000Lightspeed Classroom Management Weak Authentication / Device Takeover — CVE-2026-30368https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-30368-lightspeed-classroom-auth-bypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-30368-lightspeed-classroom-auth-bypass/High severity — web · CVE-2026-30368. Status: PoC. Affects: Lightspeed Classroom Management (Chrome extension for school device management). Tags: chrome-extension, wasm, jwt, ably, service-worker, education-technology, device-control, browser.webHighchrome-extensionwasmjwtablyservice-workereducation-technologydevice-controlbrowserBentoPDF Stored XSS to File Exfiltration (CVE-2026-41653)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-41653-bentopdf-stored-xss-exfil/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-41653-bentopdf-stored-xss-exfil/Critical severity — web · CVE-2026-41653. Status: PoC. Affects: BentoPDF (self-hosted browser-side PDF toolbox). Tags: xss, stored-xss, file-exfiltration, client-side, service-worker, wasm-hijack, pdf-toolbox, markdown-injection.webCriticalxssstored-xssfile-exfiltrationclient-sideservice-workerwasm-hijackpdf-toolboxmarkdown-injection