Session-Poisoning — PoC Archivehttps://poc.intelseclab.com/tags/session-poisoning/Latest proof-of-concept entries.Hugoen-usFri, 31 Jul 2026 00:00:00 +0000Craft CMS Pre-Auth Remote Code Execution via Session Poisoning + Yii2 PhpManager Gadget (CVE-2025-32432)https://poc.intelseclab.com/pocs/web/2026-07-31_cve-2025-32432-craftcms-preauth-rce/Fri, 31 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-31_cve-2025-32432-craftcms-preauth-rce/Critical severity (CVSS 10) — web · CVE-2025-32432. Status: Patched (Craft CMS 5.6.17+). Affects: Craft CMS (craftcms/cms). Tags: craftcms, rce, preauth, session-poisoning, php-deserialization, yii2, phpfpm, unauthenticated, go, cve-2025-32432.webCriticalcraftcmsrcepreauthsession-poisoningphp-deserializationyii2phpfpmunauthenticatedgocve-2025-32432Wing FTP Server Admin Session Poisoning via Lua loadfile() RCE (CVE-2026-44403)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-44403-wingftp-session-poisoning-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-44403-wingftp-session-poisoning-rce/High severity — web · CVE-2026-44403. Status: PoC. Affects: Wing FTP Server (WebAdmin console). Tags: wingftp, lua, session-poisoning, loadfile, rce, webadmin, authenticated.webHighwingftpluasession-poisoningloadfilercewebadminauthenticatedcPanel & WHM Authentication Bypass via Session-File CRLF Injection (CVE-2026-41940)https://poc.intelseclab.com/pocs/web/2026-05-16_cpanel-whm-auth-bypass-crlf-session-injection/Sat, 16 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-16_cpanel-whm-auth-bypass-crlf-session-injection/Critical severity (CVSS 10) — web · CVE-2026-41940. Status: Weaponized. Affects: cPanel & WHM. Tags: auth-bypass, CRLF-injection, session-poisoning, cPanel, WHM, unauthenticated.webCriticalauth-bypassCRLF-injectionsession-poisoningcPanelWHMunauthenticated