Buffer Overflow Vulnerability in get_merge_ipaddr (CVE-2025-60690) 1. Vulnerability Overview 2. Exploitation Path 3. Vulnerable Binary File: httpd 4. 0-Day Command Injection Exploitation Path In the httpd binary, at line 11, receives data via without any length restriction. A 4-iteration loop at line 14 uses to concatenate strings, leading to a buffer overflow vulnerability. Attackers can exploit this vulnerability by crafting malicious CGI parameters. 5. Proof-of-Concept (PoC) for Vulnerability Reproduction