Blazej Adamczyk D-Link Routers - Command Injection
webapps hardware CVE-2018-10823

Ilya Timchenko Rausoft ID.prove 2.95 - 'Username' SQL injection
webapps windows_x86-64 CVE-2018-16659

rtmcx Linux/ARM - Egghunter (0x50905090) + execve('/bin/sh') Shellcode (60 bytes)
arm 60

rtmcx Linux/ARM - Bind (4444/TCP) Shell (/bin/sh) + IP Controlled (192.168.1.190) + Null-Free Shellcode (168 bytes)
arm 168

rtmcx Linux/ARM - Reverse (192.168.1.1:4444/TCP) Shell (/bin/sh)+ Null-Free Shellcode (80 bytes)
arm 80

rtmcx Linux/ARM - Reverse (192.168.1.1:4444/TCP) Shell (/bin/sh) + Password (MyPasswd) + Null-Free Shellcode (156 bytes)
arm 156

Joseph McDonagh Actiontec C1000A Modem - Backdoor Account
remote hardware

James McLean Bellini/Supercook Wi-Fi Yumi SC200 - Multiple Vulnerabilities
webapps hardware

Andrew McNicol Joomla! 1.5 < 3.4.6 - Object Injection 'x-forwarded-for' Header Remote Code Execution
webapps php 80 CVE-2015-8566;CVE-2015-8562;OSVDB-131679

Chris McCurley GoAutoDial CE 3.3-1406088000 - Authentication Bypass / Arbitrary File Upload / Command Injection
webapps php 80 CVE-2015-2845;CVE-2015-2844;CVE-2015-2843;CVE-2015-2842;OSVDB-121141;OSVDB-121140;OSVDB-121139

Juttikhun Khamchaiyaphum HP Data Protector 8.x - Remote Command Execution
remote hp-ux CVE-2014-2623;OSVDB-109069

Ciaran McNally Moodle 2.3.8/2.4.5 - Multiple Vulnerabilities
webapps php CVE-2013-4341;OSVDB-97355

Greg McMullin Apache Subversion - Remote Denial of Service
dos linux CVE-2013-1884;OSVDB-92092

Spencer McIntyre Jenkins CI Script Console - Command Execution (Metasploit)
remote multiple

Spencer McIntyre NetWin SurgeFTP - (Authenticated) Admin Command Injection (Metasploit)
remote multiple OSVDB-89105

tommccredie SimpleInvoices invoices Module - Customer Field Cross-Site Scripting
webapps php CVE-2012-4932;OSVDB-88330