Shell — PoC Archivehttps://poc.intelseclab.com/tags/shell/Latest proof-of-concept entries.Hugoen-usMon, 06 Jul 2026 00:00:00 +0000Sudo `chroot` Option Local Privilege Escalation (CVE-2025-32463)https://poc.intelseclab.com/pocs/binary/2026-07-06_cve-2025-32463-sudo-chroot-privesc/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-07-06_cve-2025-32463-sudo-chroot-privesc/Critical severity (CVSS 9.3) — binary · CVE-2025-32463. Status: Weaponized. Affects: sudo (-R / --chroot option). Tags: sudo, chroot, privilege-escalation, nsswitch, nss-module, local-privesc, linux, shell, c.binaryCriticalsudochrootprivilege-escalationnsswitchnss-modulelocal-privesclinuxshellcCrushFTP AS2 Header Authentication Bypass (CVE-2025-54309)https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-54309-crushftp-as2-auth-bypass/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-54309-crushftp-as2-auth-bypass/Critical severity (CVSS 9) — web · CVE-2025-54309. Status: Patched. Affects: CrushFTP server, AS2 (Applicability Statement 2) authentication module / web admin interface. Tags: crushftp, as2, authentication-bypass, cwe-287, cwe-306, cwe-807, session-hijacking, shell, ftp-server.webCriticalcrushftpas2authentication-bypasscwe-287cwe-306cwe-807session-hijackingshellftp-serverClaude Desktop Cowork VM Image Integrity Bypass / Local Persistence (CVE-2026-7574)https://poc.intelseclab.com/pocs/binary/2026-06-30_cve-2026-7574-claude-desktop-cowork-vm-bypass/Tue, 30 Jun 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-06-30_cve-2026-7574-claude-desktop-cowork-vm-bypass/High severity (CVSS 8.7) — binary · CVE-2026-7574. Status: PoC. Affects: Anthropic Claude Desktop — Cowork feature. Tags: LPE, persistence, VM-integrity, rootfs, Claude, AI-application, macOS, ext4, integrity-bypass, Shell.binaryHighLPEpersistenceVM-integrityrootfsClaudeAI-applicationmacOSext4integrity-bypassShell