https://poc.intelseclab.com/tags/buffer-overflow/Latest proof-of-concept entries.Hugoen-usSun, 09 Aug 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-08-09_cve-2025-22457-ivanti-connect-secure-stack-overflow/Sun, 09 Aug 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-08-09_cve-2025-22457-ivanti-connect-secure-stack-overflow/Critical severity (CVSS 9) — network · CVE-2025-22457. Status: Patched. Affects: Ivanti Connect Secure, Pulse Connect Secure (end of support), Ivanti Policy Secure, Ivanti ZTA Gateways — the /home/bin/web HTTPS front-end process. Tags: ivanti, connect-secure, pulse-connect-secure, policy-secure, zta-gateway, vpn, stack-overflow, CWE-121, buffer-overflow, rce, unauthenticated, rop, heap-spray, aslr-bruteforce, x-forwarded-for, cisa-kev, ransomware, ruby, edge-device.networkCriticalivanticonnect-securepulse-connect-securepolicy-securezta-gatewayvpnstack-overflowCWE-121buffer-overflowrceunauthenticatedropheap-sprayaslr-bruteforcex-forwarded-forcisa-kevransomwarerubyedge-devicehttps://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-11499-tenda-router-bof/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-11499-tenda-router-bof/High severity — network · CVE-2026-11499. Status: PoC. Affects: Tenda HG7 / HG9 / HG10 routers (firmware family HG7_HG9_HG10re_300001138_en_xpon and similar). Tags: tenda, router, buffer-overflow, cwe-121, dos, embedded, iot, rce.networkHightendarouterbuffer-overflowcwe-121dosembeddediotrcehttps://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-38426-tasmota-fetchjpg-strcpy-overflow/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-38426-tasmota-fetchjpg-strcpy-overflow/Critical severity (CVSS 9.8) — network · CVE-2026-38426. Status: PoC. Affects: Arendst Tasmota (ESP32 firmware). Tags: tasmota, esp32, iot, buffer-overflow, strcpy, rce, mjpeg, scripter.networkCriticaltasmotaesp32iotbuffer-overflowstrcpyrcemjpegscripterhttps://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-38422-tasmota-fetchjpg-combined-overflow-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-38422-tasmota-fetchjpg-combined-overflow-rce/Critical severity (CVSS 9.8) — network · CVE-2026-38422. Status: PoC. Affects: Arendst Tasmota (ESP32 firmware). Tags: tasmota, esp32, iot, buffer-overflow, integer-overflow, rce, mjpeg, scripter.networkCriticaltasmotaesp32iotbuffer-overflowinteger-overflowrcemjpegscripterhttps://poc.intelseclab.com/pocs/hardware/2026-07-05_cve-2026-32743-px4-mavlink-overflow/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/hardware/2026-07-05_cve-2026-32743-px4-mavlink-overflow/Medium severity (CVSS 6.5) — hardware · CVE-2026-32743. Status: PoC. Affects: PX4 Autopilot flight controller firmware. Tags: px4, autopilot, mavlink, drone, uav, buffer-overflow, denial-of-service, mavlink-ftp.hardwareMediumpx4autopilotmavlinkdroneuavbuffer-overflowdenial-of-servicemavlink-ftphttps://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-25994-pjsip-ice-stack-overflow/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-25994-pjsip-ice-stack-overflow/High severity — network · CVE-2026-25994. Status: PoC. Affects: PJSIP / PJNATH (ICE implementation used by pjsua and SIP/VoIP stacks). Tags: pjsip, pjnath, ice, sip, voip, stack-overflow, dos, sdp, buffer-overflow.networkHighpjsippjnathicesipvoipstack-overflowdossdpbuffer-overflowhttps://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-32746-telnetd-linemode-slc-overflow/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-32746-telnetd-linemode-slc-overflow/Critical severity (CVSS 9.8) — network · CVE-2026-32746. Status: PoC (overflow trigger + verification only; no code execution/shellcode included). Affects: GNU InetUtils telnetd. Tags: telnetd, inetutils, linemode, slc, buffer-overflow, pre-auth, cwe-120, cwe-787.networkCriticaltelnetdinetutilslinemodeslcbuffer-overflowpre-authcwe-120cwe-787https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-5172-dnsmasq-srv-rdlen-overflow/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-5172-dnsmasq-srv-rdlen-overflow/Info severity — network · CVE-2026-5172. Status: PoC. Affects: dnsmasq (DNS forwarder/resolver). Tags: dnsmasq, dns, buffer-overflow, srv-record, rdlen, upstream-resolver, memory-corruption.networkInfodnsmasqdnsbuffer-overflowsrv-recordrdlenupstream-resolvermemory-corruptionhttps://poc.intelseclab.com/pocs/network/2026-06-30_cve-2026-12485-geovision-dvrsearch-rce/Tue, 30 Jun 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-06-30_cve-2026-12485-geovision-dvrsearch-rce/Critical severity (CVSS 10) — network · CVE-2026-12485. Status: PoC. Affects: GeoVision GV-I/O Box 4E (Linux-based smart embedded I/O device). Tags: RCE, unauthenticated, stack-overflow, buffer-overflow, IoT, GeoVision, DVR, embedded, UDP, network, Python, CVSS-10.networkCriticalRCEunauthenticatedstack-overflowbuffer-overflowIoTGeoVisionDVRembeddedUDPnetworkPythonCVSS-10https://poc.intelseclab.com/pocs/network/2026-05-17_ivanti-connect-secure-rce/Sun, 17 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-05-17_ivanti-connect-secure-rce/Critical severity (CVSS 9) — network · CVE-2025-0282. Status: Weaponized. Affects: Ivanti Connect Secure, Ivanti Policy Secure, Ivanti ZTA Gateways. Tags: RCE, stack-overflow, buffer-overflow, pre-auth, unauthenticated, VPN, zero-day, active-exploitation, Ivanti, TLS.networkCriticalRCEstack-overflowbuffer-overflowpre-authunauthenticatedVPNzero-dayactive-exploitationIvantiTLShttps://poc.intelseclab.com/pocs/web/2026-05-14_nginx-rift-cve-2026-42945/Thu, 14 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-14_nginx-rift-cve-2026-42945/Critical severity (CVSS 9.8) — web · CVE-2026-42945. Status: Weaponized. Affects: NGINX Open Source / NGINX Plus. Tags: RCE, unauthenticated, nginx, heap-overflow, buffer-overflow, rewrite.webCriticalRCEunauthenticatednginxheap-overflowbuffer-overflowrewrite