Stack Clashing is pretty neat, something you should really pay attention to in embedded spaces (its often exploitable in UEFI land as most EDK2 builds lack guard pages).

I got to write some exploits for some recently, very fun bug class to exploit.