Smb — PoC Archivehttps://poc.intelseclab.com/tags/smb/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000Windows Server 2025 Local NTLM Reflection LPE via SMB Arbitrary Port + PetitPotam (CVE-2026-24294)https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-24294-petitpotam-smb-ntlm-reflection-lpe/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-24294-petitpotam-smb-ntlm-reflection-lpe/Critical severity — network · CVE-2026-24294 (Microsoft Security Response Center). Status: Weaponized. Affects: Windows Server 2025 (SMB client "arbitrary TCP port" feature). Tags: ntlm-relay, smb, petitpotam, windows-server-2025, local-privilege-escalation, lsass, coercion, impacket.networkCriticalntlm-relaysmbpetitpotamwindows-server-2025local-privilege-escalationlsasscoercionimpacketSamba spoolss Print Job Command Injection RCE (CVE-2026-4480)https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-4480-samba-spoolss-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-4480-samba-spoolss-rce/Critical severity — network · CVE-2026-4480. Status: PoC. Affects: Samba (spoolss / print spooler RPC service). Tags: samba, spoolss, smb, printer, rpc, command-injection, reverse-shell.networkCriticalsambaspoolsssmbprinterrpccommand-injectionreverse-shellcurl SMB Connection-Reuse Use-After-Free (CVE-2026-3805)https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-3805-curl-smb-use-after-free/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-3805-curl-smb-use-after-free/High severity — network · CVE-2026-3805. Status: PoC. Affects: curl / libcurl. Tags: curl, libcurl, use-after-free, smb, cwe-416, memory-corruption, asan.networkHighcurllibcurluse-after-freesmbcwe-416memory-corruptionasanApache Solr UNC Path Validation Bypass to RCE (CVE-2026-22444)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-22444-solr-unc-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-22444-solr-unc-rce/Critical severity — web · CVE-2026-22444. Status: Weaponized. Affects: Apache Solr, standalone mode, running on Windows. Tags: apache-solr, rce, unc-path, smb, configset, javascript-script-update-processor, windows, cwe-20.webCriticalapache-solrrceunc-pathsmbconfigsetjavascript-script-update-processorwindowscwe-20Windows NTLM Hash Disclosure via File Explorer - CVE-2025-24054https://poc.intelseclab.com/pocs/binary/2026-05-17_windows-ntlm-hash-disclosure-cve-2025-24054/Sun, 17 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-05-17_windows-ntlm-hash-disclosure-cve-2025-24054/Medium severity (CVSS 6.5) — binary · CVE-2025-24054. Status: Patched. Affects: Windows File Explorer (Windows Shell). Tags: NTLM, NTLMv2, hash-disclosure, zero-click, Windows, File-Explorer, UNC, SMB, credential-theft, in-the-wild, state-sponsored.binaryMediumNTLMNTLMv2hash-disclosurezero-clickWindowsFile-ExplorerUNCSMBcredential-theftin-the-wildstate-sponsored