Zero-Click — PoC Archivehttps://poc.intelseclab.com/tags/zero-click/Latest proof-of-concept entries.Hugoen-usMon, 06 Jul 2026 00:00:00 +0000PrestaShop Checkout Zero-Click Account Takeover via ExpressCheckout Endpoint (CVE-2025-61922)https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-61922-prestashop-checkout-account-takeover/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-61922-prestashop-checkout-account-takeover/Critical severity (CVSS 9.1) — web · CVE-2025-61922. Status: PoC. Affects: PrestaShop Checkout module (ps_checkout). Tags: prestashop, ps_checkout, account-takeover, express-checkout, paypal, zero-click, session-hijacking, e-commerce, cwe-287.webCriticalprestashopps_checkoutaccount-takeoverexpress-checkoutpaypalzero-clicksession-hijackinge-commercecwe-287Dolby Unified (DDPlus) Decoder Out-of-Bounds Write via Evolution Data (CVE-2025-54957)https://poc.intelseclab.com/pocs/binary/2026-07-06_cve-2025-54957-dolby-decoder-oob-write/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-07-06_cve-2025-54957-dolby-decoder-oob-write/Critical severity (CVSS 9.8) — binary · CVE-2025-54957. Status: Weaponized. Affects: Dolby Digital Plus (DDPlus) Unified Decoder — bundled in Android media stack, iOS/macOS CoreAudio-adjacent decoders, and ChromeOS. Tags: dolby, ddplus, ac-3, ec-3, audio-codec, out-of-bounds-write, integer-overflow, zero-click, android, ios, macos, heap-corruption.binaryCriticaldolbyddplusac-3ec-3audio-codecout-of-bounds-writeinteger-overflowzero-clickandroidiosmacosheap-corruptionWindows Shell LNK _IDCONTROLW Zero-Click SMB Coercion Builder — CVE-2026-32202https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-32202-lnk-idcontrolw-builder/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-32202-lnk-idcontrolw-builder/High severity — binary · CVE-2026-32202 (related: CVE-2026-21510). Status: PoC. Affects: Windows Shell (shell32.dll) / Windows Explorer. Tags: lnk, shell32, windows, apt28, smb-coercion, zero-click, reverse-engineering, control-panel.binaryHighlnkshell32windowsapt28smb-coercionzero-clickreverse-engineeringcontrol-panellibopenapv / Android APV Codec Zero-Click Heap Buffer Overflow (CVE-2026-0006)https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-0006-openapv-heap-overflow/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-0006-openapv-heap-overflow/Critical severity (CVSS 9.8) — binary · CVE-2026-0006. Status: PoC. Affects: libopenapv (Samsung APV — Advanced Professional Video — codec), integrated into Android 16 as a Mainline module (mediaswcodec / C2SoftApvDec). Tags: android, libopenapv, apv-codec, heap-overflow, zero-click, media-framework, mediaswcodec, mainline-module.binaryCriticalandroidlibopenapvapv-codecheap-overflowzero-clickmedia-frameworkmediaswcodecmainline-moduleFreeScout Zero-Click RCE via Email Attachment Filename Sanitization Bypass ("Mail2Shell") — CVE-2026-28289https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-28289-freescout-mail-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-28289-freescout-mail-rce/Critical severity (CVSS 10) — web · CVE-2026-28289. Status: Weaponized. Affects: FreeScout helpdesk/mailbox application. Tags: freescout, rce, zero-click, email-attachment, htaccess-bypass, unicode-bypass, webshell, helpdesk.webCriticalfreescoutrcezero-clickemail-attachmenthtaccess-bypassunicode-bypasswebshellhelpdeskWindows NTLM Hash Disclosure via File Explorer - CVE-2025-24054https://poc.intelseclab.com/pocs/binary/2026-05-17_windows-ntlm-hash-disclosure-cve-2025-24054/Sun, 17 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-05-17_windows-ntlm-hash-disclosure-cve-2025-24054/Medium severity (CVSS 6.5) — binary · CVE-2025-24054. Status: Patched. Affects: Windows File Explorer (Windows Shell). Tags: NTLM, NTLMv2, hash-disclosure, zero-click, Windows, File-Explorer, UNC, SMB, credential-theft, in-the-wild, state-sponsored.binaryMediumNTLMNTLMv2hash-disclosurezero-clickWindowsFile-ExplorerUNCSMBcredential-theftin-the-wildstate-sponsoredWindows OLE Zero-Click RCE via Outlook RTF (CVE-2025-21298)https://poc.intelseclab.com/pocs/binary/2026-05-16_cve-2025-21298-outlook-rtf-rce/Sat, 16 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-05-16_cve-2025-21298-outlook-rtf-rce/Critical severity (CVSS 9.8) — binary · CVE-2025-21298. Status: Researched. Affects: Microsoft Windows OLE (ole32.dll) as reached by Outlook/Word RTF parsing. Tags: RCE, zero-click, Outlook, RTF, OLE, ole32, Windows, memory-corruption, unauthenticated.binaryCriticalRCEzero-clickOutlookRTFOLEole32Windowsmemory-corruptionunauthenticated