CWE-427 — PoC Archivehttps://poc.intelseclab.com/tags/cwe-427/Latest proof-of-concept entries.Hugoen-usSun, 09 Aug 2026 00:00:00 +0000Ghidra — Swift Demangler Arbitrary Code Execution via Shared Project Files (CVE-2026-18718)https://poc.intelseclab.com/pocs/misc/2026-08-09_cve-2026-18718-ghidra-swift-demangler-code-execution/Sun, 09 Aug 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/misc/2026-08-09_cve-2026-18718-ghidra-swift-demangler-code-execution/High severity (CVSS 7.5) — misc · CVE-2026-18718. Status: Patched. Affects: Ghidra (NSA reverse engineering framework), Swift Demangler analyzer. Tags: ghidra, nsa, reverse-engineering, swift, demangler, code-execution, project-file, analyzer, CWE-427, CWE-494, uncontrolled-search-path, supply-chain, research-tool, shared-project.miscHighghidransareverse-engineeringswiftdemanglercode-executionproject-fileanalyzerCWE-427CWE-494uncontrolled-search-pathsupply-chainresearch-toolshared-projectDiscord Desktop Client Uncontrolled Search Path Element / Local Code Execution (CVE-2026-0776)https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-0776-discord-search-path/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-0776-discord-search-path/High severity (CVSS 7.3) — binary · CVE-2026-0776 (ZDI-CAN-27057, credit: Trend Micro Zero Day Initiative). Status: PoC. Affects: Discord Desktop Client (Windows). Tags: discord, cwe-427, search-path-hijack, node-modules, local-code-execution, windows, electron.binaryHighdiscordcwe-427search-path-hijacknode-moduleslocal-code-executionwindowselectron