Scripter — PoC Archivehttps://poc.intelseclab.com/tags/scripter/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000Tasmota fetch_jpg() strcpy() Buffer Overflow in boundary[40] (CVE-2026-38426)https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-38426-tasmota-fetchjpg-strcpy-overflow/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-38426-tasmota-fetchjpg-strcpy-overflow/Critical severity (CVSS 9.8) — network · CVE-2026-38426. Status: PoC. Affects: Arendst Tasmota (ESP32 firmware). Tags: tasmota, esp32, iot, buffer-overflow, strcpy, rce, mjpeg, scripter.networkCriticaltasmotaesp32iotbuffer-overflowstrcpyrcemjpegscripterTasmota fetch_jpg() Integer Wraparound to Heap Corruption (CVE-2026-38427)https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-38427-tasmota-fetchjpg-integer-wraparound/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-38427-tasmota-fetchjpg-integer-wraparound/Critical severity (CVSS 9.8) — network · CVE-2026-38427. Status: PoC. Affects: Arendst Tasmota (ESP32 firmware). Tags: tasmota, esp32, iot, integer-overflow, heap-corruption, rce, mjpeg, scripter.networkCriticaltasmotaesp32iotinteger-overflowheap-corruptionrcemjpegscripterTasmota fetch_jpg() Combined Buffer Overflow RCE Chain (CVE-2026-38422)https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-38422-tasmota-fetchjpg-combined-overflow-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-38422-tasmota-fetchjpg-combined-overflow-rce/Critical severity (CVSS 9.8) — network · CVE-2026-38422. Status: PoC. Affects: Arendst Tasmota (ESP32 firmware). Tags: tasmota, esp32, iot, buffer-overflow, integer-overflow, rce, mjpeg, scripter.networkCriticaltasmotaesp32iotbuffer-overflowinteger-overflowrcemjpegscripter