EIP-2026-102994

This exploit leverages a local stack-based buffer overflow in Silly Poker v0.25.5 by overwriting the return address with a NOP sled and shellcode to execute arbitrary commands (setuid(0) + execve('/bin/sh')). The exploit targets the HOME environment variable to trigger the vulnerability.