Timing-Attack — PoC Archivehttps://poc.intelseclab.com/tags/timing-attack/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000Vendure GraphQL Admin API Authentication Timing Attack / User Enumeration (CVE-2026-25050)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-25050-vendure-user-enum/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-25050-vendure-user-enum/Medium severity — web · CVE-2026-25050. Status: PoC. Affects: Vendure (NativeAuthenticationStrategy.authenticate(), Admin GraphQL API). Tags: vendure, graphql, timing-attack, user-enumeration, authentication, python, cwe-208, brute-force-enabler.webMediumvenduregraphqltiming-attackuser-enumerationauthenticationpythoncwe-208brute-force-enablerApache HTTP Server mod_auth_digest Timing Attack — CVE-2026-33006https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-33006-apache-mod-auth-digest-timing/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-33006-apache-mod-auth-digest-timing/Medium severity (CVSS 4.8) — web · CVE-2026-33006. Status: PoC. Affects: Apache HTTP Server (mod_auth_digest module). Tags: apache, mod_auth_digest, timing-attack, authentication-bypass, digest-auth, http, side-channel.webMediumapachemod_auth_digesttiming-attackauthentication-bypassdigest-authhttpside-channel