PoC||GTFO 10 out, has a Pokémon-related article.
Posted by: Stackout
Date: 2016-01-16 10:09:00
The article details code exec in Gen 1 via save corruption, and utilising that to escape the SGB to get full code exec on the SNES.
As is the style of PoC||GTFO, the pdf is also valid as a zip file (which includes a copy of the pokered disassembly), and as an LSNES movie which does that.