https://poc.intelseclab.com/tags/shell-injection/Latest proof-of-concept entries.Hugoen-usMon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/cloud/2026-07-06_cve-2025-54416-tj-actions-branch-names-command-injection/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/cloud/2026-07-06_cve-2025-54416-tj-actions-branch-names-command-injection/Critical severity (CVSS 9.1) — cloud · CVE-2025-54416. Status: PoC. Affects: tj-actions/branch-names GitHub Action. Tags: github-actions, ci-cd, command-injection, supply-chain, tj-actions, branch-names, secrets-exfiltration, shell-injection.cloudCriticalgithub-actionsci-cdcommand-injectionsupply-chaintj-actionsbranch-namessecrets-exfiltrationshell-injectionhttps://poc.intelseclab.com/pocs/cloud/2026-07-05_cve-2026-32604-spinnaker-git-clone-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/cloud/2026-07-05_cve-2026-32604-spinnaker-git-clone-rce/Critical severity (CVSS 10) — cloud · CVE-2026-32604 (CWE-78). Status: PoC. Affects: Spinnaker (Clouddriver service) — continuous delivery / multi-cloud orchestration platform. Tags: spinnaker, clouddriver, command-injection, rce, cd-pipeline, cloud-credentials, shell-injection, docker-lab.cloudCriticalspinnakerclouddrivercommand-injectionrcecd-pipelinecloud-credentialsshell-injectiondocker-labhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-4802-cockpit-logsjournal-shell-injection/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-4802-cockpit-logsjournal-shell-injection/High severity — web · CVE-2026-4802. Status: PoC. Affects: Red Hat Cockpit — the web-based Linux system administration console (cockpit-project.org), specifically pkg/systemd/logsJournal.jsx. **Not** to be confused with the headless "Cockpit CMS".. Tags: cockpit, redhat, shell-injection, command-injection, rce, websocket, systemd, journalctl.webHighcockpitredhatshell-injectioncommand-injectionrcewebsocketsystemdjournalctl