Armando Huesca Prida Windows/x86 - Download File (http://10.10.10.5:8080/2NWyfQ9T.hta) Via mshta + Execute + Stager Shellcode (143 bytes)
windows_x86 143

Anurag Srivastava Linux/ARM - Bind (0.0.0.0:1337/TCP) Shell (/bin/sh) + Null-Free Shellcode (100 bytes)
arm 100

boku Linux/x64 - Bind (0.0.0.0:4444/TCP) Shell (/bin/bash) + Password (P3WP3Wl4ZerZ) + Null-free Shellcode (272 Bytes)
linux_x86-64 272

Metasploit TP-Link Archer A7/C7 - Unauthenticated LAN Remote Code Execution (Metasploit)
remote linux_mips 20002 CVE-2020-10884;CVE-2020-10883;CVE-2020-10882

Metasploit Exchange Control Panel - Viewstate Deserialization (Metasploit)
remote windows 443 CVE-2020-0688

Metasploit WordPress Plugin InfiniteWP - Client Authentication Bypass (Metasploit)
webapps php 80

Metasploit OpenSMTPD - MAIL FROM Remote Code Execution (Metasploit)
remote linux 25 CVE-2020-7247

Metasploit D-Link Devices - Unauthenticated Remote Command Execution in ssdpcgi (Metasploit)
remote linux_mips 1900 CVE-2019-20215

boku Linux/x86 - Bind Shell Generator Shellcode (114 bytes)
linux_x86 114

boku Windows/x86 - Dynamic Bind Shell + Null-Free Shellcode (571 Bytes)
windows_x86 571

Bruno de Barros Bulle Octeth Oempro 4.8 - 'CampaignID' SQL Injection
webapps php 80 CVE-2019-19740

Joel Aviad Ossi OLK Web Store 2020 - Cross-Site Request Forgery
webapps asp 80

Greg.Priest Webtareas 2.0 - 'id' SQL Injection
webapps php 80

1F98D Pachev FTP Server 1.0 - Path Traversal
remote linux 21

Ertebat Gostar Co ManageEngine Network Configuration Manager 12.2 - 'apiKey' SQL Injection
webapps java 80

Metasploit OpenMRS - Java Deserialization RCE (Metasploit)
remote linux 8081 CVE-2018-19276