Tls — PoC Archivehttps://poc.intelseclab.com/tags/tls/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000nginx Resolver Use-After-Free in OCSP Stapling (CVE-2026-40701)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-40701-nginx-resolver-ocsp-uaf/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-40701-nginx-resolver-ocsp-uaf/Medium severity (CVSS 6.3) — web · CVE-2026-40701. Status: PoC. Affects: nginx (open source). Tags: nginx, use-after-free, ocsp-stapling, resolver, memory-corruption, docker-lab, tls.webMediumnginxuse-after-freeocsp-staplingresolvermemory-corruptiondocker-labtlslibcurl mTLS Connection Reuse Authentication Bypass (CVE-2026-8932)https://poc.intelseclab.com/pocs/network/2026-06-30_cve-2026-8932-libcurl-mtls-auth-bypass/Tue, 30 Jun 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-06-30_cve-2026-8932-libcurl-mtls-auth-bypass/Low severity — network · CVE-2026-8932. Status: PoC. Affects: libcurl (embedded library; standalone curl CLI unaffected). Tags: authentication-bypass, mTLS, TLS, libcurl, connection-reuse, client-certificate, C, Low.networkLowauthentication-bypassmTLSTLSlibcurlconnection-reuseclient-certificateCLowIvanti Connect Secure Pre-Auth RCE (Stack Overflow)https://poc.intelseclab.com/pocs/network/2026-05-17_ivanti-connect-secure-rce/Sun, 17 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-05-17_ivanti-connect-secure-rce/Critical severity (CVSS 9) — network · CVE-2025-0282. Status: Weaponized. Affects: Ivanti Connect Secure, Ivanti Policy Secure, Ivanti ZTA Gateways. Tags: RCE, stack-overflow, buffer-overflow, pre-auth, unauthenticated, VPN, zero-day, active-exploitation, Ivanti, TLS.networkCriticalRCEstack-overflowbuffer-overflowpre-authunauthenticatedVPNzero-dayactive-exploitationIvantiTLSApache httpd mod_http2 Double-Free Pre-Auth RCE - CVE-2026-23918https://poc.intelseclab.com/pocs/web/2026-05-17_apache-httpd-mod-http2-double-free/Sun, 17 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-17_apache-httpd-mod-http2-double-free/Critical severity — web · CVE-2026-23918. Status: Weaponized. Affects: Apache HTTP Server (httpd) with mod_http2. Tags: RCE, pre-auth, unauthenticated, double-free, heap-corruption, Apache, httpd, mod_http2, HTTP/2, TLS.webCriticalRCEpre-authunauthenticateddouble-freeheap-corruptionApachehttpdmod_http2HTTP/2TLS