## https://sploitus.com/exploit?id=3B966B55-C44B-594F-A22B-E78277419152
# pocs
Proof-of-concept exploits for vulnerabilities discovered by [hextheshadow](https://github.com/hextheshadow).
All findings were identified using **XOR-1** — an autonomous multi-agent vulnerability research system built on a self-hosted Qwen 3 27B model. Each PoC was confirmed with AddressSanitizer or equivalent before disclosure. All listed vulnerabilities are fully patched.
Portfolio: [hex-the-shadow-vorthix.vercel.app](https://hex-the-shadow-vorthix.vercel.app)
Research writeups: [vorthix.com/research](https://vorthix.com/research)
---
## Findings
| # | CVE / ID | Target | Class | Severity | Status |
|---|----------|--------|-------|----------|--------|
| 1 | [CVE-2026-56412](./CVE-2026-56412-libexpat/) | libexpat | Heap UAF — incomplete fix bypass | Medium | Fixed · merged in 2.8.2 |
| 2 | [CVE-2026-72841](./CVE-2026-72841-libraw/) | LibRaw | Heap buffer overflow — FORC macro | Medium | Fixed · merged same day |
| 3 | [CVE-2026-57158](./CVE-2026-57158-freerdp/) | FreeRDP | Heap OOB read — brush decompression | High | Confirmed · reported |
| 4 | [CVE-2026-53720](./CVE-2026-53720-monocypher/) | Monocypher | Heap buffer overflow — Argon2 | High | Confirmed · reported |
| 5 | [GHSA-8cxh-7rcw-x2m7](./GHSA-8cxh-7rcw-x2m7-pjsip/) | PJSIP / pjmedia | Heap buffer overflow — H.263 RTP | Moderate | Fixed · patched in 2.18 |
---
## Methodology
Findings were not produced by running scanners. Each investigation started from a single task input — a GitHub repository or source path — and proceeded through autonomous hypothesis formation, call graph analysis, line-by-line code reading, sanitizer confirmation, and exploit development.
No false positives were submitted. Every PoC in this repository was confirmed with ASan or equivalent before the maintainer was contacted.
---
*All vulnerabilities in this repository are fully patched. PoCs are published for educational and research purposes following responsible disclosure.*