Kevin Kirsche DynoRoot DHCP Client - Command Injection
local linux CVE-2018-1111

Richard Alviarez SAP NetWeaver Web Dynpro 6.4 < 7.5 - Information Disclosure
webapps linux

Metasploit Jenkins CLI - HTTP Java Deserialization (Metasploit)
remote linux 8080 CVE-2016-9299

Metasploit Jenkins CLI - HTTP Java Deserialization (Metasploit)
remote linux 8080 CVE-2016-9299

Google Security Research Linux < 4.16.9 / < 4.14.41 - 4-byte Infoleak via Uninitialized Struct Field in compat adjtimex Syscall
dos linux

t4rkd3vilz Powerlogic/Schneider Electric IONXXXX Series - Cross-Site Request Forgery
webapps linux CVE-2016-5809

Metasploit Libuser - 'roothelper' Local Privilege Escalation (Metasploit)
local linux CVE-2015-3246;CVE-2015-3245

Metasploit Libuser - 'roothelper' Local Privilege Escalation (Metasploit)
local linux CVE-2015-3246;CVE-2015-3245

L0RD Horse Market Sell & Rent Portal Script 1.5.7 - Cross-Site Request Forgery
webapps linux

Paolo Perego Linux/x86 - Reverse (127.0.0.1:4444/TCP) Shell (/bin/sh) Shellcode (96 Bytes)
linux_x86 96

Nuno Freitas Linux/x86 - Read /etc/passwd Shellcode (62 bytes)
linux_x86 62

Amine Kanane Linux/x86 - Bind (9443/TCP) Shell + fork() + Null-Free Shellcode (113 bytes)
linux_x86 113

Harry Sintonen GNU wget - Cookie Injection
local linux CVE-2018-0494

Nuno Freitas Linux/x86 - execve(/bin/sh) + NOT Encoded Shellcode (27 bytes)
linux_x86 27

Youssef Mami CSP MySQL User Manager 2.3.1 - Authentication Bypass
webapps linux CVE-2018-10757

straight_blast Exim < 4.90.1 - 'base64d' Remote Code Execution
remote linux 25 CVE-2018-6789