Code-Execution — PoC Archivehttps://poc.intelseclab.com/tags/code-execution/Latest proof-of-concept entries.Hugoen-usSun, 09 Aug 2026 00:00:00 +0000Ghidra — Swift Demangler Arbitrary Code Execution via Shared Project Files (CVE-2026-18718)https://poc.intelseclab.com/pocs/misc/2026-08-09_cve-2026-18718-ghidra-swift-demangler-code-execution/Sun, 09 Aug 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/misc/2026-08-09_cve-2026-18718-ghidra-swift-demangler-code-execution/High severity (CVSS 7.5) — misc · CVE-2026-18718. Status: Patched. Affects: Ghidra (NSA reverse engineering framework), Swift Demangler analyzer. Tags: ghidra, nsa, reverse-engineering, swift, demangler, code-execution, project-file, analyzer, CWE-427, CWE-494, uncontrolled-search-path, supply-chain, research-tool, shared-project.miscHighghidransareverse-engineeringswiftdemanglercode-executionproject-fileanalyzerCWE-427CWE-494uncontrolled-search-pathsupply-chainresearch-toolshared-projectLangflow Custom Component Remote Code Execution — CVE-2026-33017https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-33017-langflow-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-33017-langflow-rce/Critical severity — web · CVE-2026-33017. Status: PoC. Affects: Langflow (flow-building / LLM pipeline platform). Tags: langflow, rce, custom-component, code-execution, flow-builder, reverse-shell, curl.webCriticallangflowrcecustom-componentcode-executionflow-builderreverse-shellcurlAI Model-Loader `trust_remote_code` Order-of-Operations RCE Simulation (CVE-2026-22807)https://poc.intelseclab.com/pocs/misc/2026-07-05_cve-2026-22807-vllm-trust-remote-code-bypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/misc/2026-07-05_cve-2026-22807-vllm-trust-remote-code-bypass/High severity — misc · CVE-2026-22807. Status: PoC. Affects: AI inference/model-loading frameworks that resolve custom model classes via auto_map before validating trust_remote_code (pattern seen in vLLM/Transformers-style loaders). Tags: vllm, huggingface, trust-remote-code, toctou, model-loading, supply-chain, python, code-execution.miscHighvllmhuggingfacetrust-remote-codetoctoumodel-loadingsupply-chainpythoncode-executionImageMagick Ghostscript Delegate Search Path Hijackhttps://poc.intelseclab.com/pocs/binary/2026-07-03_imagemagick-ghostscript-delegate-hijack/Fri, 03 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-07-03_imagemagick-ghostscript-delegate-hijack/High severity — binary · None assigned as of 2026-07-03. Status: PoC. Affects: ImageMagick (Ghostscript delegate for PDF/PS/EPS conversion) on Windows. Tags: imagemagick, ghostscript, windows, search-path-hijack, dll-planting-adjacent, delegate-execution, code-execution, pdf.binaryHighimagemagickghostscriptwindowssearch-path-hijackdll-planting-adjacentdelegate-executioncode-executionpdfc-ares TCP ares_getaddrinfo() Use-After-Free Code Executionhttps://poc.intelseclab.com/pocs/network/2026-07-03_c-ares-tcp-getaddrinfo-uaf/Fri, 03 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-03_c-ares-tcp-getaddrinfo-uaf/High severity — network · None assigned as of 2026-07-03. Status: PoC. Affects: c-ares (async DNS resolver library). Tags: c-ares, use-after-free, dns, resolver, tcp, heap-corruption, code-execution, edns.networkHighc-aresuse-after-freednsresolvertcpheap-corruptioncode-executionedns