Stack-Overflow — PoC Archivehttps://poc.intelseclab.com/tags/stack-overflow/Latest proof-of-concept entries.Hugoen-usSun, 09 Aug 2026 00:00:00 +0000Ivanti Connect Secure / Policy Secure / ZTA Gateways Remote Unauthenticated Stack-Based Buffer Overflow (CVE-2025-22457)https://poc.intelseclab.com/pocs/network/2026-08-09_cve-2025-22457-ivanti-connect-secure-stack-overflow/Sun, 09 Aug 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-08-09_cve-2025-22457-ivanti-connect-secure-stack-overflow/Critical severity (CVSS 9) — network · CVE-2025-22457. Status: Patched. Affects: Ivanti Connect Secure, Pulse Connect Secure (end of support), Ivanti Policy Secure, Ivanti ZTA Gateways — the /home/bin/web HTTPS front-end process. Tags: ivanti, connect-secure, pulse-connect-secure, policy-secure, zta-gateway, vpn, stack-overflow, CWE-121, buffer-overflow, rce, unauthenticated, rop, heap-spray, aslr-bruteforce, x-forwarded-for, cisa-kev, ransomware, ruby, edge-device.networkCriticalivanticonnect-securepulse-connect-securepolicy-securezta-gatewayvpnstack-overflowCWE-121buffer-overflowrceunauthenticatedropheap-sprayaslr-bruteforcex-forwarded-forcisa-kevransomwarerubyedge-deviceTanStack Query — Unbounded Recursion Denial of Service in `replaceEqualDeep` (CVE-2026-26903)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-26903-tanstack-query-dos-recursion/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-26903-tanstack-query-dos-recursion/Medium severity — web · CVE-2026-26903. Status: PoC. Affects: TanStack Query (@tanstack/query-core and framework bindings: react-query, vue-query, solid-query, svelte-query). Tags: tanstack-query, javascript, denial-of-service, stack-overflow, recursion, react, frontend, client-side-dos.webMediumtanstack-queryjavascriptdenial-of-servicestack-overflowrecursionreactfrontendclient-side-dosPJSIP / PJNATH ICE Session Stack Buffer Overflow via SDP ice-ufrag (CVE-2026-25994)https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-25994-pjsip-ice-stack-overflow/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-25994-pjsip-ice-stack-overflow/High severity — network · CVE-2026-25994. Status: PoC. Affects: PJSIP / PJNATH (ICE implementation used by pjsua and SIP/VoIP stacks). Tags: pjsip, pjnath, ice, sip, voip, stack-overflow, dos, sdp, buffer-overflow.networkHighpjsippjnathicesipvoipstack-overflowdossdpbuffer-overflowlwIP SNMPv3 USM Stack-Based Buffer Overflow (CVE-2026-8836)https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-8836-lwip-snmpv3-stack-overflow/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-8836-lwip-snmpv3-stack-overflow/Critical severity (CVSS 9.8) — network · CVE-2026-8836. Status: PoC. Affects: lwIP (lightweight TCP/IP stack) — snmp_parse_inbound_frame() in src/apps/snmp/snmp_msg.c. Tags: lwip, snmp, snmpv3, stack-overflow, embedded, rce, asn1, cwe-121.networkCriticallwipsnmpsnmpv3stack-overflowembeddedrceasn1cwe-121FreeBSD setcred(2) Kernel Stack Buffer Overflow — Local Privilege Escalation (CVE-2026-45250)https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-45250-setcred-freebsd-lpe/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-45250-setcred-freebsd-lpe/Critical severity — binary · CVE-2026-45250. Status: PoC. Affects: FreeBSD kernel — setcred(2) system call (sys/kern/kern_prot.c). Tags: freebsd, kernel, lpe, privilege-escalation, stack-overflow, setcred, smap-bypass, smep-bypass, zfs, kernel-exploit.binaryCriticalfreebsdkernellpeprivilege-escalationstack-overflowsetcredsmap-bypasssmep-bypasszfskernel-exploitGeoVision GV-I/O Box 4E DVRSearch Unauthenticated Stack Buffer Overflow RCE (CVE-2026-12485)https://poc.intelseclab.com/pocs/network/2026-06-30_cve-2026-12485-geovision-dvrsearch-rce/Tue, 30 Jun 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-06-30_cve-2026-12485-geovision-dvrsearch-rce/Critical severity (CVSS 10) — network · CVE-2026-12485. Status: PoC. Affects: GeoVision GV-I/O Box 4E (Linux-based smart embedded I/O device). Tags: RCE, unauthenticated, stack-overflow, buffer-overflow, IoT, GeoVision, DVR, embedded, UDP, network, Python, CVSS-10.networkCriticalRCEunauthenticatedstack-overflowbuffer-overflowIoTGeoVisionDVRembeddedUDPnetworkPythonCVSS-10Netlogon CLDAP Stack Buffer Overflow (CVE-2026-41089)https://poc.intelseclab.com/pocs/network/2026-06-04_netlogon-cldap-stack-buffer-overflow/Thu, 04 Jun 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-06-04_netlogon-cldap-stack-buffer-overflow/Critical severity (CVSS 9.8) — network · CVE-2026-41089. Status: Weaponized. Affects: Microsoft Windows Netlogon (Domain Controller CLDAP path). Tags: Netlogon, CLDAP, Windows Server, stack-overflow, unauthenticated, DoS, potential-RCE.networkCriticalNetlogonCLDAPWindows Serverstack-overflowunauthenticatedDoSpotential-RCEIvanti Connect Secure Pre-Auth RCE (Stack Overflow)https://poc.intelseclab.com/pocs/network/2026-05-17_ivanti-connect-secure-rce/Sun, 17 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-05-17_ivanti-connect-secure-rce/Critical severity (CVSS 9) — network · CVE-2025-0282. Status: Weaponized. Affects: Ivanti Connect Secure, Ivanti Policy Secure, Ivanti ZTA Gateways. Tags: RCE, stack-overflow, buffer-overflow, pre-auth, unauthenticated, VPN, zero-day, active-exploitation, Ivanti, TLS.networkCriticalRCEstack-overflowbuffer-overflowpre-authunauthenticatedVPNzero-dayactive-exploitationIvantiTLS