EIP-2026-117769

This exploit targets a buffer overflow in PHP 6.0 Dev's str_transliterate() function to execute arbitrary code via a crafted Unicode payload. It leverages a JMP ESP instruction in php6ts.dll to redirect execution to a WinExec-based shellcode that launches CALC.