<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Token-Theft — PoC Archive</title><link>https://poc.intelseclab.com/tags/token-theft/</link><description>Latest proof-of-concept entries.</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Sun, 05 Jul 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://poc.intelseclab.com/tags/token-theft/index.xml" rel="self" type="application/rss+xml"/><item><title>Windows pstrip64.sys BYOVD Physical Memory Local Privilege Escalation — CVE-2026-29923</title><link>https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-29923-pstrip64-driver-lpe/</link><pubDate>Sun, 05 Jul 2026 00:00:00 +0000</pubDate><guid>https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-29923-pstrip64-driver-lpe/</guid><description>Critical severity — binary · CVE-2026-29923. Status: Weaponized. Affects: pstrip64.sys kernel driver (EnTech Taiwan PowerStrip, up to version 3.90.736). Tags: byovd, windows-kernel, lpe, physical-memory, eprocess, token-theft, driver, ioctl.</description><category>binary</category><category>Critical</category><category>byovd</category><category>windows-kernel</category><category>lpe</category><category>physical-memory</category><category>eprocess</category><category>token-theft</category><category>driver</category><category>ioctl</category></item><item><title>Flowise NVIDIA NIM Endpoint Authentication Bypass — CVE-2026-30824</title><link>https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-30824-flowise-nvidia-nim-auth-bypass/</link><pubDate>Sun, 05 Jul 2026 00:00:00 +0000</pubDate><guid>https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-30824-flowise-nvidia-nim-auth-bypass/</guid><description>Critical severity (CVSS 9.8) — web · CVE-2026-30824. Status: Weaponized. Affects: Flowise (NVIDIA NIM integration endpoints). Tags: flowise, nvidia-nim, auth-bypass, cwe-306, token-theft, container-management, python, unauthenticated.</description><category>web</category><category>Critical</category><category>flowise</category><category>nvidia-nim</category><category>auth-bypass</category><category>cwe-306</category><category>token-theft</category><category>container-management</category><category>python</category><category>unauthenticated</category></item></channel></rss>