Udp — PoC Archivehttps://poc.intelseclab.com/tags/udp/Latest proof-of-concept entries.Hugoen-usMon, 06 Jul 2026 00:00:00 +0000camel-coap Header Injection → RCE Self-Contained Reproducer (CVE-2026-33453)https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2026-33453-camel-coap-header-injection-reproducer/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2026-33453-camel-coap-header-injection-reproducer/Critical severity (CVSS 9.8) — web · CVE-2026-33453. Status: Patched. Affects: Apache Camel camel-coap component (org.apache.camel.coap.CamelCoapResource), routes forwarding to camel-exec. Tags: apache-camel, camel-coap, coap, header-injection, rce, cwe-915, camel-exec, unauthenticated, udp, spring-boot.webCriticalapache-camelcamel-coapcoapheader-injectionrcecwe-915camel-execunauthenticatedudpspring-bootdnsmasq EDNS Client Subnet (ECS) Response Validation Bypass (CVE-2026-4893)https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-4893-dnsmasq-ecs-spoofing/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-4893-dnsmasq-ecs-spoofing/Medium severity — network · CVE-2026-4893. Status: PoC. Affects: dnsmasq (DNS forwarder/cache). Tags: dnsmasq, dns, edns, ecs, rfc7871, cache-poisoning, spoofing, udp.networkMediumdnsmasqdnsednsecsrfc7871cache-poisoningspoofingudpApache Camel camel-coap Header Injection to Remote Code Execution (CVE-2026-33453)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-33453-apache-camel-coap-header-injection-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-33453-apache-camel-coap-header-injection-rce/Critical severity (CVSS 10) — web · CVE-2026-33453. Status: Weaponized. Affects: Apache Camel — camel-coap component (CamelCoapResource), routes forwarding to camel-exec. Tags: apache-camel, coap, header-injection, rce, cwe-915, camel-exec, unauthenticated, udp.webCriticalapache-camelcoapheader-injectionrcecwe-915camel-execunauthenticatedudpGeoVision GV-I/O Box 4E DVRSearch Unauthenticated Stack Buffer Overflow RCE (CVE-2026-12485)https://poc.intelseclab.com/pocs/network/2026-06-30_cve-2026-12485-geovision-dvrsearch-rce/Tue, 30 Jun 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-06-30_cve-2026-12485-geovision-dvrsearch-rce/Critical severity (CVSS 10) — network · CVE-2026-12485. Status: PoC. Affects: GeoVision GV-I/O Box 4E (Linux-based smart embedded I/O device). Tags: RCE, unauthenticated, stack-overflow, buffer-overflow, IoT, GeoVision, DVR, embedded, UDP, network, Python, CVSS-10.networkCriticalRCEunauthenticatedstack-overflowbuffer-overflowIoTGeoVisionDVRembeddedUDPnetworkPythonCVSS-10