Webshell-Upload — PoC Archivehttps://poc.intelseclab.com/tags/webshell-upload/Latest proof-of-concept entries.Hugoen-usMon, 06 Jul 2026 00:00:00 +0000WP Directory Kit Auto-Login Authentication Bypass to Full Site Takeover (CVE-2025-13390)https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-13390-wp-directory-kit-auth-bypass/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-13390-wp-directory-kit-auth-bypass/Critical severity (CVSS 10) — web · CVE-2025-13390. Status: Weaponized. Affects: WP Directory Kit (WordPress plugin). Tags: wordpress, wp-directory-kit, authentication-bypass, predictable-token, account-takeover, webshell-upload, python, cwe-287.webCriticalwordpresswp-directory-kitauthentication-bypasspredictable-tokenaccount-takeoverwebshell-uploadpythoncwe-287ASP.NET Core Kestrel HTTP Request Smuggling (CVE-2025-55315)https://poc.intelseclab.com/pocs/network/2026-07-06_cve-2025-55315-kestrel-http-request-smuggling/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-06_cve-2025-55315-kestrel-http-request-smuggling/Critical severity (CVSS 9.9) — network · CVE-2025-55315. Status: Weaponized. Affects: ASP.NET Core Kestrel web server (Microsoft.AspNetCore.Server.Kestrel). Tags: aspnet-core, kestrel, http-request-smuggling, chunked-transfer-encoding, dotnet, python, cwe-444, ssrf, cache-poisoning, webshell-upload.networkCriticalaspnet-corekestrelhttp-request-smugglingchunked-transfer-encodingdotnetpythoncwe-444ssrfcache-poisoningwebshell-upload