https://poc.intelseclab.com/tags/arbitrary-code-execution/Latest proof-of-concept entries.Hugoen-usMon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/misc/2026-07-06_cve-2025-12735-safe-expr-eval-mitigation/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/misc/2026-07-06_cve-2025-12735-safe-expr-eval-mitigation/Critical severity (CVSS 9.8) — misc · CVE-2025-12735. Status: Patched. Affects: expr-eval npm package (mathematical/logical expression evaluator). Tags: expr-eval, eval-injection, arbitrary-code-execution, rce, cwe-95, javascript, typescript, npm, expression-parser, mitigation-library, drop-in-replacement.miscCriticalexpr-evaleval-injectionarbitrary-code-executionrcecwe-95javascripttypescriptnpmexpression-parsermitigation-librarydrop-in-replacementhttps://poc.intelseclab.com/pocs/misc/2026-07-05_cve-2026-23947-orval-codegen-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/misc/2026-07-05_cve-2026-23947-orval-codegen-rce/High severity — misc · CVE-2026-23947. Status: PoC. Affects: Orval (OpenAPI-to-TypeScript client generator), version 7.10.0. Tags: orval, openapi, code-generation, arbitrary-code-execution, nodejs, supply-chain, typescript, build-tooling.miscHighorvalopenapicode-generationarbitrary-code-executionnodejssupply-chaintypescriptbuild-toolinghttps://poc.intelseclab.com/pocs/binary/2026-07-03_ghidra-swift-demangler-ace/Fri, 03 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-07-03_ghidra-swift-demangler-ace/Medium severity — binary · None assigned as of 2026-07-03. Status: Incomplete PoC. Affects: Ghidra (NSA reverse-engineering suite). Tags: ghidra, reverse-engineering, arbitrary-code-execution, tracermi, sevenzipjbinding, native-parser, conditional-exploit, calc-poc.binaryMediumghidrareverse-engineeringarbitrary-code-executiontracermisevenzipjbindingnative-parserconditional-exploitcalc-poc