EIP-2026-102870

This exploit leverages a buffer overflow in HT Editor 2.0.20 via an unsecure `strcat` call in `sys_common_canonicalize`, bypassing NX and ASLR using ROP chains to achieve arbitrary code execution. The payload constructs a ROP chain to resolve `system()` and execute `sh`.