CWE-121 — PoC Archivehttps://poc.intelseclab.com/tags/cwe-121/Latest proof-of-concept entries.Hugoen-usSun, 09 Aug 2026 00:00:00 +0000Ivanti Connect Secure / Policy Secure / ZTA Gateways Remote Unauthenticated Stack-Based Buffer Overflow (CVE-2025-22457)https://poc.intelseclab.com/pocs/network/2026-08-09_cve-2025-22457-ivanti-connect-secure-stack-overflow/Sun, 09 Aug 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-08-09_cve-2025-22457-ivanti-connect-secure-stack-overflow/Critical severity (CVSS 9) — network · CVE-2025-22457. Status: Patched. Affects: Ivanti Connect Secure, Pulse Connect Secure (end of support), Ivanti Policy Secure, Ivanti ZTA Gateways — the /home/bin/web HTTPS front-end process. Tags: ivanti, connect-secure, pulse-connect-secure, policy-secure, zta-gateway, vpn, stack-overflow, CWE-121, buffer-overflow, rce, unauthenticated, rop, heap-spray, aslr-bruteforce, x-forwarded-for, cisa-kev, ransomware, ruby, edge-device.networkCriticalivanticonnect-securepulse-connect-securepolicy-securezta-gatewayvpnstack-overflowCWE-121buffer-overflowrceunauthenticatedropheap-sprayaslr-bruteforcex-forwarded-forcisa-kevransomwarerubyedge-deviceTenda AC9 `AdvSetMacMtuWan` Stack-Based Buffer Overflow (CVE-2025-29384)https://poc.intelseclab.com/pocs/network/2026-07-06_cve-2025-29384-tenda-ac9-stack-overflow/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-06_cve-2025-29384-tenda-ac9-stack-overflow/Critical severity (CVSS 9.8) — network · CVE-2025-29384. Status: PoC. Affects: Tenda AC9 dual-band wireless router, web management interface (/goform/AdvSetMacMtuWan endpoint). Tags: tenda, ac9, router, stack-buffer-overflow, cwe-121, dos, rce, mips, embedded, iot, python, ruby, metasploit.networkCriticaltendaac9routerstack-buffer-overflowcwe-121dosrcemipsembeddediotpythonrubymetasploitTenda HG7/HG9/HG10 Router Stack-Based Buffer Overflow — CVE-2026-11499https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-11499-tenda-router-bof/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-11499-tenda-router-bof/High severity — network · CVE-2026-11499. Status: PoC. Affects: Tenda HG7 / HG9 / HG10 routers (firmware family HG7_HG9_HG10re_300001138_en_xpon and similar). Tags: tenda, router, buffer-overflow, cwe-121, dos, embedded, iot, rce.networkHightendarouterbuffer-overflowcwe-121dosembeddediotrcelwIP SNMPv3 USM Stack-Based Buffer Overflow (CVE-2026-8836)https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-8836-lwip-snmpv3-stack-overflow/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-8836-lwip-snmpv3-stack-overflow/Critical severity (CVSS 9.8) — network · CVE-2026-8836. Status: PoC. Affects: lwIP (lightweight TCP/IP stack) — snmp_parse_inbound_frame() in src/apps/snmp/snmp_msg.c. Tags: lwip, snmp, snmpv3, stack-overflow, embedded, rce, asn1, cwe-121.networkCriticallwipsnmpsnmpv3stack-overflowembeddedrceasn1cwe-121ASUSTOR ADM vpnupload.cgi Format String / Stack Buffer Overflow RCE — CVE-2026-6643https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-6643-asustor-adm-vpnupload-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-6643-asustor-adm-vpnupload-rce/Critical severity — binary · CVE-2026-6643. Status: PoC. Affects: ASUSTOR ADM (ASUSTOR Data Master), /portal/apis/settings/vpnupload.cgi (upload_wireguard action). Tags: asustor, adm, nas, format-string, stack-buffer-overflow, cwe-134, cwe-121, rce, wireguard.binaryCriticalasustoradmnasformat-stringstack-buffer-overflowcwe-134cwe-121rcewireguard