Soap — PoC Archivehttps://poc.intelseclab.com/tags/soap/Latest proof-of-concept entries.Hugoen-usSun, 09 Aug 2026 00:00:00 +0000Check Point Security Management / Multi-Domain Server SmartConsole Authentication Bypass via Forged Application Certificate Bind (CVE-2026-16232)https://poc.intelseclab.com/pocs/network/2026-08-09_cve-2026-16232-checkpoint-smartconsole-auth-bypass/Sun, 09 Aug 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-08-09_cve-2026-16232-checkpoint-smartconsole-auth-bypass/Critical severity (CVSS 9.1) — network · CVE-2026-16232. Status: Patched. Affects: Check Point Security Management Server and Multi-Domain Security Management Server (MDS) — the legacy FWM/CPMI SIC service on TCP 18190 and the CPM SOAP web services on TCP 19009. Tags: check-point, smartconsole, security-management-server, multi-domain-server, cpmi, sic, fwm, authentication-bypass, CWE-287, improper-authentication, privilege-escalation, sso-token-forgery, soap, dle, cisa-kev, bod-26-04, python, firewall-management.networkCriticalcheck-pointsmartconsolesecurity-management-servermulti-domain-servercpmisicfwmauthentication-bypassCWE-287improper-authenticationprivilege-escalationsso-token-forgerysoapdlecisa-kevbod-26-04pythonfirewall-managementD-Link AX1500 SetDeviceSettings `DeviceName` OS Command Injection (CVE-2025-60854)https://poc.intelseclab.com/pocs/network/2026-07-06_cve-2025-60854-dlink-ax1500-devicename-command-injection/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-06_cve-2025-60854-dlink-ax1500-devicename-command-injection/Critical severity (CVSS 9.8) — network · CVE-2025-60854. Status: Weaponized. Affects: D-Link AX1500 router firmware (HNAP/DHMAPI web management SOAP interface). Tags: d-link, ax1500, router, command-injection, os-command-injection, hnap, soap, telnetd, cwe-78, iot.networkCriticald-linkax1500routercommand-injectionos-command-injectionhnapsoaptelnetdcwe-78iotMicrosoft Exchange Authenticated Arbitrary File Read via EWS Reference Attachment (CVE-2026-45504)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-45504-exchange-file-read/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-45504-exchange-file-read/High severity — web · CVE-2026-45504. Status: PoC. Affects: Microsoft Exchange Server (OWA / EWS). Tags: exchange, owa, ews, file-read, ssrf, ntlm, soap, lfi.webHighexchangeowaewsfile-readssrfntlmsoaplfiMantisBT SOAP `mc_issue_add` Authentication Bypass (Type Juggling) — CVE-2026-30849https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-30849-mantisbt-soap-auth-bypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-30849-mantisbt-soap-auth-bypass/High severity — web · CVE-2026-30849. Status: Weaponized. Affects: MantisBT (SOAP API). Tags: mantisbt, soap, auth-bypass, type-juggling, php, bug-tracker, typescript.webHighmantisbtsoapauth-bypasstype-jugglingphpbug-trackertypescriptPHP 8.5.7 StreamBucket-to-SOAP Numeric Cookie Remote Code Executionhttps://poc.intelseclab.com/pocs/web/2026-07-03_php-857-streambucket-soap-rce/Fri, 03 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-03_php-857-streambucket-soap-rce/Critical severity — web · None assigned as of 2026-07-03. Status: PoC. Affects: PHP CLI (Zend Engine) — ArrayIterator, StreamBucket, SoapClient internals. Tags: php, type-confusion, streambucket, soap, hashtable-overwrite, memory-corruption, rce, zend-engine.webCriticalphptype-confusionstreambucketsoaphashtable-overwritememory-corruptionrcezend-engine